Alternatives and similar repositories for go_libpeconv

Users that are interested in go_libpeconv are comparing it to the libraries listed below

• abdullah2993 / go-runpe
  execute a PE in the address space of another PE aka process hollowing
  ☆58Updated 3 years ago
• lesnuages / go-execute-assembly
  Allow a Go process to dynamically load .NET assemblies
  ☆149Updated 5 years ago
• CCob / goreflect
  Reflective DLL loading of your favorite Golang program
  ☆169Updated 5 years ago
• ayoul3 / reflect-pe
  Reflectively load PE
  ☆103Updated 5 years ago
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆98Updated 4 years ago
• neox41 / go-procinject
  Process Injection Techniques with Golang
  ☆79Updated 5 years ago
• joshfaust / Simple-Loader
  Windows Defender ShellCode Execution Bypass
  ☆130Updated 5 years ago
• bats3c / DefensiveInjector
  Shellcode injector using direct syscalls
  ☆120Updated 4 years ago
• py7hagoras / GetSystem
  This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of alm…
  ☆109Updated 2 years ago
• djhohnstein / CSharpSetThreadContext
  C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread
  ☆119Updated 6 years ago
• badBounty / directInjectorPOC
  Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.
  ☆84Updated 5 years ago
• 0xballistics / inject2pe
  inject or convert shellcode to PE
  ☆40Updated 5 years ago
• aaaddress1 / sakeInject
  Windows PE - TLS (Thread Local Storage) Injector in C/C++
  ☆106Updated 4 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆79Updated 4 years ago
• audibleblink / dummyDLL
  Utility for hunting UAC bypasses or COM/DLL hijacks that alerts on the exported function that was consumed.
  ☆41Updated 2 years ago
• Signal-Labs / NtdllUnpatcher
  Example code for EDR bypassing
  ☆150Updated 6 years ago
• asaurusrex / DoppelGate
  DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userla…
  ☆121Updated 3 years ago
• N4kedTurtle / HellsGatePoC
  ☆50Updated 4 years ago
• mdsecactivebreach / firewalker
  ☆151Updated 4 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆119Updated 5 years ago
• D00MFist / Go4aRun
  Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process
  ☆233Updated 5 years ago
• outflanknl / TamperETW
  PoC to demonstrate how CLR ETW events can be tampered.
  ☆189Updated 5 years ago
• r3nhat / XORedReflectiveDLL
  Reflective DLL Injection with obfuscated (XOR) shellcode
  ☆73Updated 4 years ago
• Binject / shellcode
  Shellcode library as a Go package
  ☆70Updated 5 years ago
• vyrus001 / shellGo
  A Microsoft windows x86_64 Golang shellcode tester that includes example calc.exe shellcode.
  ☆69Updated 7 years ago
• reevesrs24 / EvasiveProcessHollowing
  Evasive Process Hollowing Techniques
  ☆141Updated 4 years ago
• marpie / signed-loaders
  signed-loaders documents Windows executables that can be used for side-loading DLLs.
  ☆68Updated 6 years ago
• leoloobeek / COMRunner
  A simple COM server which provides a component to run shellcode
  ☆137Updated 5 years ago
• NVISOsecurity / DInvisibleRegistry
  DInvisibleRegistry
  ☆82Updated 4 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆85Updated 3 years ago