Alternatives and similar repositories for Nyx-Full-Dll-Unhook:

Users that are interested in Nyx-Full-Dll-Unhook are comparing it to the libraries listed below

• EvilBytecode / Ntdll-Unhook
  Unhook Ntdll.dll, Go & C++.
  ☆21Updated 8 months ago
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆28Updated last week
• maxDcb / C2Core
  Core Submodule of Exploration C2
  ☆15Updated last week
• Uri3n / Advanced-TLS-Injection
  Threadless injection via TLS callbacks
  ☆16Updated 4 months ago
• Offensive-Panda / D3MPSEC
  "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…
  ☆24Updated 6 months ago
• EricEsquivel / OpsLoader
  A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader
  ☆19Updated 6 months ago
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆37Updated 6 months ago
• S12cybersecurity / NinjaInjector
  Classic Process Injection with Memory Evasion Techniques implemantation
  ☆68Updated last year
• EvilBytecode / EByte-Shellcode-Loader
  shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually fro…
  ☆9Updated 6 months ago
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆22Updated 2 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆22Updated 8 months ago
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆23Updated 3 weeks ago
• arsium / PELoader
  ☆20Updated last year
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated 7 months ago
• EvilBytecode / ThunderKitty-Ransomware
  Ransomware written in go, encrypt - decrypt.
  ☆18Updated 8 months ago
• FalconForceTeam / bof-winrm-plugin-jump
  ☆25Updated 2 months ago
• redskal / obfuscatxor
  Near compile-time string obfuscation for Golang
  ☆13Updated last year
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆46Updated last year
• wsummerhill / DictionShellcode
  Encode shellcode into dictionary words for evasion and entropy reduction
  ☆23Updated 4 months ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆68Updated last year
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆36Updated last year
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆48Updated last year
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆62Updated last year
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆71Updated 2 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆63Updated 7 months ago
• dis0rder0x00 / ParentProcessManipulation-LNK
  Using LNK files and user input simulation to start processes under explorer.exe
  ☆24Updated 6 months ago
• EvilBytecode / SsnRetrieval
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆11Updated 7 months ago