Alternatives and similar repositories for ParseNTFS:

Users that are interested in ParseNTFS are comparing it to the libraries listed below

• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆41Updated last year
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆46Updated last year
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated last year
• SaadAhla / BlockNonMSModules
  Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules
  ☆41Updated last year
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆45Updated 3 weeks ago
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 2 years ago
• rad9800 / VehApiResolve
  ☆105Updated 2 years ago
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆45Updated 4 months ago
• FuzzySecurity / AdvSim.Compression
  Simple and sane compression wrapper library.
  ☆18Updated 2 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆65Updated 3 years ago
• RobinFassinaMoschiniForks / TransitionalPeriod
  Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits
  ☆27Updated 2 years ago
• listinvest / undonut
  Unpacker for donut shellcode
  ☆16Updated 4 years ago
• susMdT / clr-thing
  rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.
  ☆13Updated last year
• rbmm / LdrpKernel32DllName
  ☆82Updated 7 months ago
• Teach2Breach / noldr
  Dynamically resolve API function addresses at runtime in a secure manner.
  ☆47Updated 3 months ago
• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆26Updated 5 months ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆57Updated 3 months ago
• Slowerzs / CryptDecryptMemory
  ☆28Updated last month
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆44Updated 2 years ago
• cainiao1992 / ollvm-mingw
  An Obfuscator-LLVM based mingw-w64 toolchain.
  ☆34Updated 3 years ago
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆54Updated 2 years ago
• Kharos102 / ReadWriteDriverSample
  ☆21Updated 9 months ago
• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆31Updated last year
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 2 months ago
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆18Updated last month
• matterpreter / cpuid
  A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class
  ☆26Updated last year
• xalicex / Unhook-Import-Address-Table
  Piece of code to detect and remove hooks in IAT
  ☆62Updated 2 years ago
• trustedsec / Windows-MS-LSAT-RPC-Example
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆24Updated last year