Alternatives and similar repositories for Cloak

Users that are interested in Cloak are comparing it to the libraries listed below

• chryzsh / awesome-bof
  🧠 The ultimate, community-curated resource for Beacon Object Files (BOFs) — tutorials, how-tos, deep dives, and reference materials.
  ☆69Updated last month
• dmcxblue / PyObscura
  A python script that automates a C2 Profile build
  ☆41Updated 2 months ago
• p4p1 / havoc-privkit
  a port of privkit bof for havoc
  ☆23Updated last year
• Red-Team-SNCF / ceos
  ☆23Updated last year
• dmcxblue / AzureFunctionRedirector
  ☆45Updated last month
• xforcered / ForsHops
  ForsHops
  ☆136Updated 2 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆78Updated 3 months ago
• tijme / kong-loader
  Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…
  ☆26Updated 2 months ago
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆30Updated last year
• GeisericII / Winpacket
  Impacket pre-compiled binaries
  ☆16Updated last year
• zero2504 / Early-Cryo-Bird-Injections
  Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects
  ☆96Updated 2 months ago
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆50Updated 4 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆78Updated 3 months ago
• Sh4N4C1 / sh4loader
  ☆29Updated 9 months ago
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆73Updated 2 months ago
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆49Updated last month
• dmcxblue / AzureRedirector
  A C# project that builds a Web Application which redirects all HTTPS
  ☆25Updated 3 months ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆73Updated 9 months ago
• rbmm / SC_DEMO
  ☆115Updated 2 months ago
• b0bd0g / OneGate
  Yet another shellcode loader - but a sneaky one
  ☆20Updated last month
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆119Updated 5 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆107Updated 4 months ago
• 0xTriboulet / rssh-rs
  ☆49Updated last week
• c2pain / RustPatchlessCLRLoader
  .NET assembly loader with patchless AMSI and ETW bypass in Rust
  ☆50Updated 7 months ago
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆62Updated last year
• thelikes / slivercloak
  PoC framework for Sliver compilation
  ☆15Updated 4 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated 11 months ago
• xforcered / VectoredExceptionHandling
  ☆31Updated 9 months ago
• FalconForceTeam / bof-winrm-client
  ☆111Updated 4 months ago
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆38Updated last year