Alternatives and similar repositories for exec2shell:

Users that are interested in exec2shell are comparing it to the libraries listed below

• wabzsy / gonut
  Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.
  ☆51Updated last year
• timwhitez / ReturnGate
  ReturnGate, just like HellsGate.
  ☆66Updated 2 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 2 years ago
• timwhitez / Doge-Assembly
  Golang evasion tool, execute-assembly .Net file
  ☆97Updated 2 years ago
• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆65Updated 10 months ago
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆51Updated last year
• Rvn0xsy / AsmShellcodeLoader
  汇编语言编写Shellcode加载器源代码 https://payloads.online/archivers/2022-02-16/1/
  ☆78Updated 2 years ago
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆97Updated 4 years ago
• yzddmr6 / SharpAlternativeShellcodeExec
  Alternative Shellcode Execution Via Callbacks Rewrite In C#
  ☆88Updated last year
• evilashz / Visual-Studio-BOF-template
  more conveniently Visual-Studio-BOF-template
  ☆61Updated last year
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆81Updated last year
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆63Updated 2 years ago
• secur30nly / go-self-delete
  Go implementation of the self-deletion of an running executable from disk
  ☆106Updated last year
• timwhitez / Doge-MemX
  Golang implementation of Reflective load PE from memory
  ☆63Updated 3 years ago
• bigb0sss / Bankai
  Another Go Shellcode Loader using Windows APIs
  ☆139Updated 3 years ago
• parzel / GoBofRunner
  A BOF/COFF loader implemented in Go and CGO.
  ☆17Updated last year
• Ne0nd0g / go-clr
  A PoC package for hosting the CLR and executing .NET from Go
  ☆71Updated 8 months ago
• dust-life / run_pe
  ☆48Updated 3 years ago
• grines / goc2
  MacOS C2 Framework
  ☆83Updated 3 years ago
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• The-Z-Labs / cli4bofs
  Command line interface for (running) BOFs
  ☆43Updated this week
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆205Updated last year
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆71Updated last year
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆138Updated 2 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆43Updated 3 years ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆57Updated last year
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆67Updated 2 years ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆43Updated last year
• timwhitez / ScareCrow-Common
  ScareCrow loader binary source which easier to read and learn
  ☆25Updated 2 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆82Updated 2 years ago