Alternatives and similar repositories for Venom

Users that are interested in Venom are comparing it to the libraries listed below

• Idov31 / Cronos
  PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.
  ☆590Updated last year
• rad9800 / TamperingSyscalls
  ☆486Updated 2 years ago
• deepinstinct / Dirty-Vanity
  A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…
  ☆646Updated 2 years ago
• MalwareApiLib / MalwareApiLibrary
  collection of apis used in malware development
  ☆224Updated 2 years ago
• Wra7h / FlavorTown
  Various ways to execute shellcode
  ☆492Updated last year
• janoglezcampos / DeathSleep
  A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…
  ☆523Updated 2 years ago
• Maldev-Academy / HellHall
  Performing Indirect Clean Syscalls
  ☆566Updated 2 years ago
• 0xTriboulet / Revenant
  Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework
  ☆379Updated 11 months ago
• ZeroMemoryEx / Amsi-Killer
  Lifetime AMSI bypass
  ☆634Updated last year
• sinfulz / JustEvadeBro
  JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
  ☆310Updated 10 months ago
• Kudaes / Split
  Apply a divide and conquer approach to bypass EDRs
  ☆280Updated last year
• dobin / avred
  Analyse your malware to surgically obfuscate it
  ☆483Updated last month
• Kudaes / Elevator
  UAC bypass by abusing RPC and debug objects.
  ☆620Updated last year
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆233Updated last year
• NUL0x4C / TerraLdr
  A Payload Loader Designed With Advanced Evasion Features
  ☆510Updated 2 years ago
• georgesotiriadis / Chimera
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆483Updated last year
• NUL0x4C / APCLdr
  Payload Loader With Evasion Features
  ☆318Updated 2 years ago
• klezVirus / SilentMoonwalk
  PoC Implementation of a fully dynamic call stack spoofer
  ☆802Updated 11 months ago
• lab52io / LeakedHandlesFinder
  Leaked Windows processes handles identification tool
  ☆288Updated 3 years ago
• Kudaes / EPI
  Threadless Process Injection through entry point hijacking
  ☆347Updated 10 months ago
• SaadAhla / NTDLLReflection
  Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…
  ☆297Updated last year
• cocomelonc / peekaboo
  Simple undetectable shellcode and code injector launcher example. Inspired by RTO malware development course.
  ☆249Updated 8 months ago
• thefLink / RecycledGate
  Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
  ☆470Updated 3 years ago
• redteamsocietegenerale / DLLirant
  DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
  ☆496Updated 2 years ago
• Maldev-Academy / MaldevAcademyLdr.1
  ☆356Updated last year
• Kudaes / Fiber
  Using fibers to run in-memory code.
  ☆213Updated last year
• huntandhackett / concealed_code_execution
  Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows
  ☆216Updated 2 years ago
• NUL0x4C / AtomPePacker
  A Highly capable Pe Packer
  ☆713Updated 2 years ago
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆697Updated 4 months ago
• kleiton0x00 / Proxy-DLL-Loads
  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
  ☆350Updated 5 months ago