Alternatives and similar repositories for WindowsExploits

Users that are interested in WindowsExploits are comparing it to the libraries listed below

• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆77Updated 5 years ago
• sliverarmory / COFFLoader
  ☆49Updated last month
• pwn1sher / uuid-loader
  UUID based Shellcode loader for your favorite C2
  ☆86Updated 4 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 5 years ago
• OccamsXor / sim-ba
  (Sim)ulate (Ba)zar Loader
  ☆29Updated 5 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 4 years ago
• Allevon412 / PPL_Sandboxer
  ☆82Updated 3 years ago
• Kudaes / Scripts
  Repository for dirty scripts and PoCs
  ☆20Updated 11 months ago
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆32Updated 6 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆48Updated 4 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 4 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆117Updated 4 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆136Updated 3 years ago
• hyp3rlinx / NtFileSins
  Windows File Enumeration Intel Gathering Tool.
  ☆17Updated 2 years ago
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆26Updated 5 years ago
• KINGSABRI / AssemblyLoader
  Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()
  ☆35Updated 4 years ago
• ihack4falafel / Dell-Driver-EoP-CVE-2021-21551
  Dell Driver EoP (CVE-2021-21551)
  ☆32Updated 3 years ago
• daem0nc0re / HEVD-CSharpKernelPwn
  CSharp Writeups for HackSys Extreme Vulnerable Driver
  ☆45Updated 4 years ago
• tomcarver16 / AmsiHook
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆67Updated 5 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆36Updated 4 years ago
• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆80Updated 5 years ago
• tothi / PowerLessShell
  Run PowerShell command without invoking powershell.exe
  ☆35Updated 4 years ago
• oxfemale / LogonCredentialsSteal
  LOCAL AND REMOTE HOOK msv1_0!SpAcceptCredentials from LSASS.exe and DUMP DOMAIN/LOGIN/PASSWORD IN CLEARTEXT to text file.
  ☆122Updated 6 years ago
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 3 years ago
• boku7 / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆93Updated 2 years ago
• 0xballistics / inject2pe
  inject or convert shellcode to PE
  ☆41Updated 6 years ago
• OsandaMalith / PE2HTML
  Injects HTML/PHP/ASP to the PE
  ☆104Updated 5 years ago
• sneakerhax / C2PE
  Red Team C2 and Post Exploitation code
  ☆34Updated 6 months ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• sailay1996 / FileWrite2system
  File Write Weapon for Privilege Escalation To get SYSTEM
  ☆18Updated 5 years ago