Alternatives and similar repositories for ARM64_AmsiPatch:

Users that are interested in ARM64_AmsiPatch are comparing it to the libraries listed below

• sudonoodle / Aggressor-NTFY
  Cobalt Strike notifications via NTFY.
  ☆13Updated 7 months ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated 9 months ago
• vysecurity / Nemesis-Download-Watcher
  Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.
  ☆14Updated last year
• S3cur3Th1sSh1t / nim-strenc
  string encryption in Nim
  ☆19Updated 10 months ago
• chryzsh / linux_bof
  ELF Beacon Object File (BOF) Template
  ☆19Updated 5 months ago
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆17Updated last year
• kapellos / VladimiRED
  ☆18Updated 4 months ago
• iamagarre / BadExclusions
  BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR
  ☆20Updated last year
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆17Updated last year
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆22Updated 9 months ago
• jfjallid / go-cmloot
  A tool to enumerate and download files from the System Center Configuration Manager (SCCM) SMB share (SCCMContentLib)
  ☆13Updated 8 months ago
• Tylous / Dent
  A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.
  ☆14Updated 2 years ago
• affix / rusty-hollow
  Unix Process hollowing in rust
  ☆21Updated 4 months ago
• duckbillsecurity / pdf-smuggler
  Create PDFs with HTML smuggling attachments that save on opening the document.
  ☆29Updated last year
• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• dmcxblue / NiceDayPhishing
  ☆19Updated 4 months ago
• EvilBytecode / Amsi-Patch-Updated-2025
  How to bypass AMSI (Antimalware Scan Interface) in PowerShell/C++ by dynamically patching the AmsiScanBuffer function.
  ☆13Updated last month
• outflanknl / RedELK-workshop
  Items related to the RedELK workshop given at security conferences
  ☆29Updated last year
• eversinc33 / RDPassSpray
  Python3 tool to perform password spraying using RDP
  ☆16Updated last year
• dmcxblue / NtCreateUserProcessBOF
  An Aggressor Script that utilizes NtCreateUserProcess to run binaries
  ☆26Updated 2 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆41Updated 5 months ago
• eversinc33 / UnXorStringsNet
  Deobfuscation of XorStringsNet
  ☆14Updated 5 months ago
• EvanMcBroom / sleepy
  A lexer and parser for Sleep
  ☆19Updated 3 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆20Updated 2 years ago
• ricardojoserf / NativeNtdllRemap
  Remap ntdll.dll using only NTAPI functions with a suspended process
  ☆21Updated last week
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆20Updated last year
• fern89 / runpe-x64
  RunPE adapted for x64 and written in C, does not use RWX
  ☆25Updated 11 months ago
• p4p1 / havoc-store
  A simple website to act as a store for havoc modules and extensions
  ☆26Updated 3 months ago