Alternatives and similar repositories for PS2BAT

Users that are interested in PS2BAT are comparing it to the libraries listed below

• EvilBytecode / Powershell-Persistance
  Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do…
  ☆11Updated 6 months ago
• EvilBytecode / GoEvilDocs
  Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.
  ☆13Updated 6 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆23Updated 6 months ago
• EvilBytecode / ThunderKitty-Ransomware
  Ransomware written in go, encrypt - decrypt.
  ☆29Updated 6 months ago
• EvilBytecode / Evilbytecode-Gate
  Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…
  ☆23Updated 6 months ago
• EvilBytecode / SsnRetrieval
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆12Updated 6 months ago
• zimnyaa / fiber-stager
  A simple Nim stager (w/ fiber execution)
  ☆18Updated 3 years ago
• splexas / TrampHooker
  A mechanism that trampoline hooks functions in x86/x64 systems.
  ☆21Updated last year
• C5Hackr / ARM64_AmsiPatch
  ☆20Updated 5 months ago
• d1rkmtrr / HadesLdr
  Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2
  ☆13Updated 2 years ago
• ahkeur / VEH2
  A Patchless AMSI Bypass Technique using VEH²
  ☆29Updated 4 months ago
• PL-V / Firefox-WebInject
  Firefox webInjector capable of injecting codes into webpages using a mitmproxy.
  ☆42Updated 3 years ago
• rasta-mouse / PacketAlchemy
  Playing with packets in C#
  ☆15Updated last year
• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆35Updated last year
• outflanknl / unmanaged-dotnet-patch
  Modify managed functions from unmanaged code
  ☆52Updated last year
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆22Updated 2 years ago
• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆66Updated 2 years ago
• rxOred / process-hollowing
  process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread
  ☆31Updated 3 years ago
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆63Updated 3 years ago
• Unprotect-Project / FuncInEvasionTechniqueDemo
  ☆34Updated last year
• Azr43lKn1ght / Rust-ProcHollow
  Process Hollowing in Rust with Process Executable Relocation Support for both 32 and 64 bit architecture environments.
  ☆22Updated 9 months ago
• lem0nSec / SkeletonKey
  Reproducing the SkeletonKey malware.
  ☆11Updated last year
• iDigitalFlame / XrMT
  e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!
  ☆25Updated last year
• EvilBytecode / Eset-Unload
  Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …
  ☆12Updated 6 months ago
• hasherezade / shellc_encoder
  Standalone Metasploit-like XOR encoder for shellcode
  ☆50Updated last year
• buldansec / EnableEFS
  Enable EFS service as low priv user (PE & BOF)
  ☆20Updated 3 months ago
• ricardojoserf / NativeNtdllRemap
  Remap ntdll.dll using only NTAPI functions with a suspended process
  ☆26Updated 6 months ago
• susMdT / SharpIndirectSyscalls
  ☆11Updated 2 years ago
• klezVirus / AIDA64DRIVER-EoP
  AIDA64DRIVER Elevation of Privilege Vulnerability
  ☆15Updated last year
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆60Updated 11 months ago