Alternatives and similar repositories for PandaLoader:

Users that are interested in PandaLoader are comparing it to the libraries listed below

• WKL-Sec / LayeredSyscall
  Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …
  ☆250Updated 8 months ago
• R41N3RZUF477 / QuickAssist_UAC_Bypass
  UAC Bypass using UIAccess program QuickAssist
  ☆81Updated last month
• Vasco0x4 / ShadeLoader
  ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过
  ☆39Updated 8 months ago
• HackerCalico / RAT_Obfuscator
  Magical obfuscator, supports obfuscating EXE, BOF, and ShellCode.
  ☆148Updated 4 months ago
• oldboy21 / SyscallMeMaybe
  Implementation of Indirect Syscall technique to pop a calc.exe
  ☆102Updated last year
• ProcessusT / Venoma
  Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution
  ☆175Updated last year
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆77Updated last year
• Maldev-Academy / GhostlyHollowingViaTamperedSyscalls
  Implementing the ghostly hollowing PE injection technique using tampered syscalls.
  ☆144Updated last month
• Konis-Bros / espio
  Shellcode obfuscation tool to avoid AV/EDR.
  ☆126Updated last year
• joaoviictorti / coffeeldr
  A COFF Loader written in Rust
  ☆95Updated 2 weeks ago
• NtDallas / Ulfberht
  Shellcode loader
  ☆81Updated 5 months ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆114Updated 6 months ago
• naksyn / DojoLoader
  Generic PE loader for fast prototyping evasion techniques
  ☆230Updated 9 months ago
• sexyiam / UAC-Bypass
  UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.
  ☆46Updated 11 months ago
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆63Updated 2 years ago
• SaadAhla / D1rkInject
  Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…
  ☆177Updated last year
• jseclab / obj2shellcode
  shellcode生成框架
  ☆85Updated 9 months ago
• nseckt / Thread-Pool-Injection-PoC
  Proof of concept code for thread pool based process injection in Windows.
  ☆115Updated 3 weeks ago
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆89Updated 10 months ago
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆126Updated last year
• NtDallas / Draugr
  BOF with Synthetic Stackframe
  ☆143Updated last month
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆142Updated 5 months ago
• Cobalt-Strike / bof-vs
  A Beacon Object File (BOF) template for Visual Studio
  ☆188Updated last month
• hid3rx / PEPacker
  ☆96Updated last year
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆130Updated 8 months ago
• SaadAhla / BlockOpenHandle
  Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…
  ☆167Updated last year
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆62Updated last year
• HackerCalico / StackSpoofer_Macro
  An easy-to-use and powerful Macro for Stack Spoofing.
  ☆19Updated 3 months ago
• RistBS / ContextMenuHijack
  Execute a payload at each right click on a file/folder in the explorer menu for persistence
  ☆172Updated 2 years ago