Alternatives and similar repositories for Arya:

Users that are interested in Arya are comparing it to the libraries listed below

• malcomvetter / AntiDebug
  PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
  ☆32Updated 6 years ago
• DissectMalware / ClipboardWatcher
  Monitor the textual data pasted into Windows clipboard
  ☆28Updated 6 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆90Updated 5 years ago
• marcin-chwedczuk / dll-inject
  Simple DLL injector written in C#
  ☆24Updated 9 years ago
• chango77747 / ReverseShell
  Simple C# reverse shell with shellcode and process injection
  ☆40Updated 8 years ago
• m4mm0n / WinPIT
  Windows Process Injection Toolkit - plain and simple :)
  ☆26Updated 6 years ago
• FuzzySecurity / DotNetToJScript-LanguageModeBreakout
  ☆26Updated 6 years ago
• glinares / CSCGuard
  Protects and logs suspicious and malicious usage of .NET CSC.exe and Runtime C# Compilation
  ☆25Updated 6 years ago
• 0xbadjuju / TellMeYourSecrets
  A C# DLL to Dump LSA Secrets
  ☆57Updated 6 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆51Updated 6 years ago
• dsnezhkov / RunDllMShim
  Run Managed Assemblies with RunDll
  ☆16Updated 6 years ago
• byt3bl33d3r / Invoke-AutoIt
  Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes
  ☆60Updated 7 years ago
• jaredhaight / ReflectCmd
  A simple reflective dll example
  ☆18Updated 8 years ago
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆62Updated 5 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆86Updated last year
• malcomvetter / SneakyService
  A simple, minimal C# windows service implementation that can be used to demonstrate privilege escalation from misconfigured windows servi…
  ☆15Updated 9 years ago
• 0xyg3n / mem64
  Run Any Native PE file as a memory ONLY Payload , most likely as a shellcode using hta attack vector which interacts with Powershell.
  ☆27Updated 7 years ago
• sunsided / native-dotnet-code-injection
  Injection of managed code into non-managed Windows applications
  ☆28Updated 6 years ago
• leechristensen / OffensivePowerShellTasking
  Run multiple PowerShell scripts concurrently in different app domains!
  ☆34Updated 9 years ago
• sweetsoftware / ReversePowershell
  Opens a reverse PowerShell terminal to the client. Shell receives commands through TCP
  ☆24Updated 9 years ago
• nshalabi / IronKit
  Use IronPython directly in your code without IronPython DLLs and dependencies
  ☆12Updated 2 years ago
• mgeeky / PEInfo
  Another Portable Executable files analysing stuff
  ☆20Updated 13 years ago
• malcomvetter / CertCheck
  Programmatically access a TLS certificate chain in C++ and C#
  ☆13Updated 6 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 7 years ago
• antman1p / SharpProcEnum
  .NET tool for enumeration processes and dumping memory.
  ☆56Updated 5 years ago
• davehardy20 / PoSHBypass
  ☆24Updated 6 years ago
• OsandaMalith / VBShellCode
  Making shellcode UD - https://osandamalith.com
  ☆24Updated 8 years ago
• cobbr / InsecurePowerShellHost
  InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…
  ☆30Updated 7 years ago
• two06 / FridaInject
  Inject Frida-Gadget into a local process
  ☆24Updated 5 years ago
• DamonMohammadbagher / NativePayload_HTTP
  Data Exfiltration via HTTP Traffic (C# and Shell Script)
  ☆16Updated last year