Alternatives and similar repositories for r0ak:

Users that are interested in r0ak are comparing it to the libraries listed below

• vineetgaurav / WIN_JELLY
  Windows GPU rootkit PoC by Team Jellyfish
  ☆35Updated 9 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 2 years ago
• mgeeky / PEInfo
  Another Portable Executable files analysing stuff
  ☆20Updated 13 years ago
• connormcgarr / Kernel-Escalation-of-Privileges-Payloads
  NT AUTHORITY\SYSTEM
  ☆37Updated 4 years ago
• bytecode77 / sysprep-privilege-escalation
  Sysprep Volatile Environment LPE (2017)
  ☆14Updated 2 months ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆38Updated 4 years ago
• alal4465 / HeavensGateHook
  Hooking Heavens Gate in a weekend
  ☆13Updated 3 years ago
• bytecode77 / enter-product-key-privilege-escalation
  Enter Product Key Volatile Environment LPE
  ☆12Updated 2 months ago
• bytecode77 / taskmgr-privilege-escalation
  TaskMgr Volatile Environment LPE
  ☆13Updated 2 months ago
• loneicewolf / smbdoor
  improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys
  ☆49Updated last year
• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆31Updated last year
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆16Updated 6 years ago
• NUL0x4C / RecycleBinPersistence
  using the Recycle Bin to insure persistence
  ☆12Updated 2 years ago
• rbmm / Noname
  really ?
  ☆12Updated 11 months ago
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• codingtest / r0ak
  r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
  ☆27Updated 6 years ago
• hasherezade / hidden_bee_tools
  Parser for a custom executable format from Hidden Bee malware (first stage)
  ☆39Updated 4 months ago
• Idov31 / UdpInspector
  Listing UDP connections with remote address without sniffing.
  ☆30Updated last year
• loneicewolf / flame-sourcecode
  UPDATED 2022 Flame malware sourcecode available !! Forked. I will later provide my sample of Flame, Duqu and Gauss.
  ☆19Updated 10 months ago
• loneicewolf / EXEC_LKM
  A LKM (Loadable Kernel Module) to execute a command as root; I include a example of using netcat and a compiled(with source and steps on…
  ☆15Updated 3 months ago
• LethalSnake1337 / PE-Loader-exercise
  A simple PE loader.
  ☆25Updated 2 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• Jb05s / Exploit-Dev-C
  ☆23Updated 4 years ago
• ryan-weil / Code-Cave
  Injects position-dependent code into a code cave in an executable file, and applies relocations.
  ☆23Updated last year
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆15Updated 3 years ago
• AzAgarampur / PsForge
  Process Hollowing demonstration & explanation
  ☆34Updated 3 years ago
• 0xN3utr0n / Noteme
  ELF packer/crypter that aims to create hardened and stealthy troyans
  ☆53Updated 3 years ago
• connormcgarr / Presentations
  ☆26Updated 3 months ago
• realoriginal / bootdoor
  An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot
  ☆61Updated last year
• EvilBytecode / Evilbytecode-Gate
  Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…
  ☆16Updated 3 weeks ago