Alternatives and similar repositories for OptixGate

Users that are interested in OptixGate are comparing it to the libraries listed below

• Unprotect-Project / FuncInEvasionTechniqueDemo
  ☆34Updated last year
• KingKDot / PowerCrypt
  The best powershell obfuscator ever made
  ☆117Updated 3 months ago
• 0xsp-SRD / OffensivePascal
  Pascal Offsec repo for malware dev and red teaming 🚩
  ☆186Updated 2 years ago
• almounah / go-buena-clr
  Good CLR Host with Native patchless AMSI Bypass
  ☆96Updated 7 months ago
• almounah / superdeye
  Indirect Syscall with TartarusGate Approach in Go
  ☆132Updated 4 months ago
• 0xNinjaCyclone / AsmLdr
  Dynamic shellcode loader with sophisticated evasion capabilities
  ☆253Updated last month
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆98Updated last year
• itaymigdal / PichichiH0ll0wer
  Nim process hollowing loader
  ☆60Updated 3 months ago
• MzHmO / SymProcAddress
  Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)
  ☆145Updated last year
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆250Updated 11 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆159Updated 3 months ago
• 0xJs / BlockEDRTraffic
  Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …
  ☆252Updated last month
• keowu / BadRentdrv2
  A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering t…
  ☆99Updated 10 months ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆73Updated last year
• NtDallas / Ulfberht
  Shellcode loader
  ☆94Updated 11 months ago
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆165Updated last year
• Faisal-P27 / WAREED-DNS-C2
  ☆122Updated 7 months ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated 2 years ago
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆202Updated last year
• dk0m / ZeroCrumb
  Dumping App Bound Protected Credentials & Cookies Without Privileges.
  ☆143Updated 5 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆154Updated last year
• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆106Updated 8 months ago
• sexyiam / UAC-Bypass
  UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.
  ☆50Updated last year
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆271Updated 2 weeks ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆210Updated last year
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆262Updated 7 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆140Updated this week
• AlteredSecurity / Disable-TamperProtection
  A POC to disable TamperProtection and other Defender / MDE components
  ☆232Updated last year
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆130Updated 3 months ago
• paranoidninja / BRC4-BOF-Artillery
  ☆137Updated 2 weeks ago