Alternatives and similar repositories for Nyx-Full-Dll-Unhook:

Users that are interested in Nyx-Full-Dll-Unhook are comparing it to the libraries listed below

• EvilBytecode / RubyRedOps
  💎 | RubyRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Ruby
  ☆10Updated 9 months ago
• EvilBytecode / Ntdll-Unhook
  Unhook Ntdll.dll, Go & C++.
  ☆21Updated this week
• Offensive-Panda / D3MPSEC
  "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…
  ☆24Updated 7 months ago
• maxDcb / C2Core
  Core Submodule of Exploration C2
  ☆16Updated 2 weeks ago
• MaorSabag / fileSearcher
  A simple BOF (Beacon Object File) to search files in the system
  ☆13Updated last year
• FalconForceTeam / bof-winrm-plugin-jump
  ☆27Updated 3 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆22Updated 9 months ago
• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆29Updated last month
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆40Updated last year
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• qwqdanchun / RainbowSheep
  Change hash for a signed pe
  ☆16Updated last year
• EvilBytecode / EByte-Shellcode-Loader
  shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually fro…
  ☆9Updated this week
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆25Updated last month
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• gavz / ExplorerPersist
  Explorer Persistence technique : Hijacking cscapi.dll order loading path and writing our malicious dll into C:\Windows\cscapi.dll , when …
  ☆83Updated 2 years ago
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆23Updated 3 months ago
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆23Updated last year
• wsummerhill / DictionShellcode
  Encode shellcode into dictionary words for evasion and entropy reduction
  ☆25Updated 5 months ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆44Updated 2 years ago
• EvilBytecode / Amsi-Patch-Updated-2025
  How to bypass AMSI (Antimalware Scan Interface) in PowerShell/C++ by dynamically patching the AmsiScanBuffer function.
  ☆13Updated last month
• 0x3rhy / BypassCredGuard-BOF
  BypassCredGuard CS BOF
  ☆38Updated 3 months ago
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆37Updated 7 months ago
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆47Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆63Updated 8 months ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆69Updated last year
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆45Updated last year
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆73Updated 3 months ago
• S12cybersecurity / NinjaInjector
  Classic Process Injection with Memory Evasion Techniques implemantation
  ☆69Updated last year
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆50Updated last year
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆32Updated last year