Alternatives and similar repositories for de4dot_mod

Users that are interested in de4dot_mod are comparing it to the libraries listed below

• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆40Updated 4 years ago
• laomms / EXE2DLL_CLR
  Add export function and convert exe to dll
  ☆26Updated 5 years ago
• killvxk / POCS
  May the POC be with you
  ☆65Updated last month
• jmgk77 / PDL
  A tool/library to proxify DLL
  ☆38Updated 3 years ago
• JPCERTCC / upx-mod
  UPX - the Ultimate Packer for eXecutables
  ☆69Updated 3 years ago
• the-deniss / Vulnerability-Disclosures
  Vulnerability analysis and proof of concepts
  ☆37Updated 2 years ago
• killvxk / awesome-obfuscations
  ☆75Updated 6 months ago
• xpn / DotNetDebug
  A simple POC to demonstrate the power of .NET debugging for injection
  ☆73Updated 5 years ago
• cbwang505 / AppContainerBypass
  AppContainerBypass
  ☆21Updated 4 years ago
• MalwareMechanic / RISCYpacker
  Process Hollowing Packer
  ☆29Updated 8 years ago
• vic4key / QLoader
  QLoader is a PE loader creator that helps you quickly create a non-exe loader for application
  ☆113Updated last year
• iammaguire / Salient-Rootkit
  A kernel mode Windows rootkit in development.
  ☆49Updated 4 years ago
• therealdreg / shellex
  C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debug…
  ☆114Updated 2 years ago
• sterrasec / genpatch
  genpatch is IDA plugin that generates a python script for patching binary
  ☆37Updated 2 years ago
• hacksysteam / CVE-2021-45067
  Adobe Reader DC Information Leak Exploit
  ☆23Updated 3 years ago
• AzAgarampur / byeintegrity2-uac
  Bypass UAC by abusing the Internet Explorer Add-on installer
  ☆57Updated 4 years ago
• gkucherin / de4dot
  .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).
  ☆29Updated 3 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆41Updated 5 years ago
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆36Updated 8 months ago
• hidd3ncod3s / WindowsAPIhash
  Windows API Hashes used in the malwares
  ☆42Updated 10 years ago
• repnz / rpcmon
  RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
  ☆24Updated 5 years ago
• ze0r / cve-2019-1422
  ☆14Updated 6 years ago
• Q4n / SuperPriv
  从admin冲到TrustedInstaller
  ☆17Updated 2 years ago
• AzRunRCE / CppHostCLR
  C++ Host .NET CLR & Run a assembly directly from ressource (RT_RCDATA) without extraction disk.
  ☆15Updated 2 years ago
• Demonslay335 / DotNetMonitor
  Think APIMonitor, but for .NET binaries.
  ☆57Updated 2 years ago
• aaaddress1 / wow64Jit
  Call 32bit NtDLL API directly from WoW64 Layer
  ☆61Updated 5 years ago
• guillaC / WMI-Viewer
  simple WMI Viewer
  ☆21Updated 5 years ago
• jackullrich / memfuck
  A PoC designed to bypass all usermode hooks in a WoW64 environment.
  ☆150Updated 5 years ago
• ryan-weil / Code-Cave
  Injects position-dependent code into a code cave in an executable file, and applies relocations.
  ☆26Updated 2 years ago
• rootm0s / UUB
  UIAccess UAC Bypass using token duplication and keyboard events
  ☆27Updated 6 years ago