Alternatives and similar repositories for ARM64_AmsiPatch

Users that are interested in ARM64_AmsiPatch are comparing it to the libraries listed below

• kozmer / silentpulse
  single-threaded event driven sleep obfuscation poc for linux
  ☆34Updated last month
• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated last year
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆17Updated 2 years ago
• kapellos / VladimiRED
  ☆18Updated 6 months ago
• sudonoodle / Aggressor-NTFY
  Cobalt Strike notifications via NTFY.
  ☆14Updated 9 months ago
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆17Updated last year
• iamagarre / BadExclusions
  BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR
  ☆20Updated last year
• vysecurity / Nemesis-Download-Watcher
  Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.
  ☆14Updated last year
• jfjallid / go-cmloot
  A tool to enumerate and download files from the System Center Configuration Manager (SCCM) SMB share (SCCMContentLib)
  ☆13Updated 11 months ago
• S3cur3Th1sSh1t / nim-strenc
  string encryption in Nim
  ☆20Updated last year
• 0xRedpoll / ludus_mythic_teamserver
  Ludus role for deploying a Mythic Teamserver onto Linux servers
  ☆14Updated 4 months ago
• a7t0fwa7 / DllDragon
  A simple to use single-include Windows API resolver
  ☆22Updated last year
• MythicAgents / nemesis
  Nemesis agent for Mythic
  ☆27Updated 10 months ago
• malcomvetter / TLAD
  The Totally Legit Authentication Dialog
  ☆12Updated last year
• duckbillsecurity / pdf-smuggler
  Create PDFs with HTML smuggling attachments that save on opening the document.
  ☆30Updated 2 weeks ago
• redskal / malrdp-deploy
  Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible
  ☆12Updated last year
• affix / rusty-hollow
  Unix Process hollowing in rust
  ☆22Updated 7 months ago
• som3canadian / Mythic_NimSyscallPacker_Wrapper
  Mythic C2 wrapper for NimSyscallPacker
  ☆25Updated 4 months ago
• JCSteiner / SGCC---public
  Command and Control Framework using powershell implants
  ☆35Updated 3 weeks ago
• RedSiege / Delta-Encoder
  ☆16Updated last year
• GKNSB / HTMLSmuggler
  Smuggle a file to a user's browser
  ☆20Updated 3 years ago
• thiagopeixoto / mystique-self-injection
  An improvement and a different approach to Mockingjay Self-Injection.
  ☆35Updated last year
• eversinc33 / UnXorStringsNet
  Deobfuscation of XorStringsNet
  ☆14Updated 8 months ago
• mlcsec / SigFinder
  Identify binaries with Authenticode digital signatures signed to an internal CA/domain
  ☆40Updated last year
• delivr-to / MailCollector
  A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM
  ☆20Updated last year
• 0xB455 / ActiveSyncBruter
  ☆26Updated 4 months ago
• outflanknl / RedELK-workshop
  Items related to the RedELK workshop given at security conferences
  ☆29Updated last year
• Offensive-Panda / .NET_PROFILER_DLL_LOADING
  .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…
  ☆43Updated 11 months ago