Alternatives and similar repositories for Evilbytecode-Anti-VM

Users that are interested in Evilbytecode-Anti-VM are comparing it to the libraries listed below

• EvilBytecode / Malwarebytes-Shutdowner
  Kill malawarebytes process. Can be ported to any programming language.
  ☆9Updated 3 weeks ago
• EvilBytecode / GetSyscallStubGo
  GetSyscallStubCGo.
  ☆10Updated 3 weeks ago
• EvilBytecode / RubyRedOps
  💎 | RubyRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Ruby
  ☆10Updated 3 weeks ago
• redskal / obfuscatxor
  Near compile-time string obfuscation for Golang
  ☆13Updated last year
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• EvilBytecode / SsnRetrieval
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆12Updated 3 weeks ago
• 0xPrimo / Ntdll-Unhooking
  Ntdll Unhooking
  ☆12Updated 3 weeks ago
• EvilBytecode / Evilbytecode-Gate
  Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…
  ☆21Updated 3 weeks ago
• EvilBytecode / Nyx-Full-Dll-Unhook
  (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.
  ☆30Updated 3 weeks ago
• EvilBytecode / Amsi-Patch-Updated-2025
  How to bypass AMSI (Antimalware Scan Interface) in PowerShell/C++ by dynamically patching the AmsiScanBuffer function.
  ☆17Updated 3 weeks ago
• qwqdanchun / RainbowSheep
  Change hash for a signed pe
  ☆16Updated last year
• varwara / CVE-2024-21338
  PoC for the Untrusted Pointer Dereference in the appid.sys driver
  ☆16Updated last year
• EvilBytecode / Eset-Unload
  Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …
  ☆10Updated 3 weeks ago
• Fadi002 / MalwareInvestigation
  reverse engineering random malwares
  ☆23Updated 3 months ago
• EvilBytecode / Ntdll-Unhook
  Unhook Ntdll.dll, Go & C++.
  ☆22Updated 3 weeks ago
• EvilBytecode / ThunderKitty-Ransomware
  Ransomware written in go, encrypt - decrypt.
  ☆20Updated 2 weeks ago
• Idov31 / NidhoggCSharpApi
  C# API for Nidhogg rootkit
  ☆17Updated last year
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆37Updated this week
• farinap5 / bitmap4shell
  A (quite) simple steganography algorithm to hide shellcodes within bitmap image.
  ☆21Updated last year
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆21Updated 3 weeks ago
• C5Hackr / c_syscalls
  https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.
  ☆31Updated 10 months ago
• C5Hackr / Segment-Encryption
  ☆24Updated 6 months ago
• tykawaii98 / CVE-2024-21338_PoC
  ☆39Updated 10 months ago
• rbmm / RtlClone
  ☆38Updated 2 months ago
• knight0x07 / NailaoLoader-Hiding-Execution-Flow
  NailaoLoader: Hiding Execution Flow via Patching
  ☆20Updated 2 months ago
• wwh1004 / AmsiBypassUacDetector
  Detect BypassUAC using AMSI
  ☆23Updated 2 months ago
• AlSch092 / HideStaticReferences
  Research into removing strings & API call references at compile-time (Anti-Analysis)
  ☆25Updated 11 months ago
• baiyies / CrossInject
  32 bit process inject shellcode to 32 bit process and 64 bit process
  ☆32Updated 2 years ago
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆70Updated 6 months ago
• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆29Updated last month