Alternatives and similar repositories for exec2shell

Users that are interested in exec2shell are comparing it to the libraries listed below

• wabzsy / gonut
  Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.
  ☆58Updated last year
• yzddmr6 / SharpAlternativeShellcodeExec
  Alternative Shellcode Execution Via Callbacks Rewrite In C#
  ☆88Updated 2 years ago
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆69Updated 2 years ago
• timwhitez / ReturnGate
  ReturnGate, just like HellsGate.
  ☆67Updated 2 years ago
• The-Z-Labs / cli4bofs
  Command line interface for (running) BOFs
  ☆47Updated this week
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆138Updated 2 years ago
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆206Updated last year
• timwhitez / Doge-Assembly
  Golang evasion tool, execute-assembly .Net file
  ☆97Updated 3 years ago
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆83Updated 2 years ago
• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆66Updated last year
• aus / gopherheaven
  Go implementation of the Heaven's Gate technique
  ☆98Updated 4 years ago
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆69Updated 2 years ago
• timwhitez / Doge-MemX
  Golang implementation of Reflective load PE from memory
  ☆63Updated 3 years ago
• trustedsec / PPLFaultDumpBOF
  ☆142Updated 2 years ago
• secur30nly / go-self-delete
  Go implementation of the self-deletion of an running executable from disk
  ☆108Updated last year
• Ne0nd0g / go-clr
  A PoC package for hosting the CLR and executing .NET from Go
  ☆74Updated 10 months ago
• M01N-Team / HeaderLessPE
  ☆240Updated last year
• grines / goc2
  MacOS C2 Framework
  ☆83Updated 3 years ago
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆67Updated 2 years ago
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆51Updated 2 years ago
• evilashz / Visual-Studio-BOF-template
  more conveniently Visual-Studio-BOF-template
  ☆65Updated last year
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆72Updated last year
• kyleavery / TitanLdr
  Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
  ☆146Updated 2 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆140Updated 3 years ago
• Rvn0xsy / AsmShellcodeLoader
  汇编语言编写Shellcode加载器源代码 https://payloads.online/archivers/2022-02-16/1/
  ☆78Updated 2 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆82Updated 3 years ago
• waldo-irc / LockdExeDemo
  A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/
  ☆188Updated 3 years ago
• bigb0sss / Bankai
  Another Go Shellcode Loader using Windows APIs
  ☆140Updated 3 years ago
• XiaoliChan / Invoke-sAMSpoofing
  CVE-2021-42287/CVE-2021-42278 exploits in powershell
  ☆37Updated 3 years ago