Alternatives and similar repositories for Runpe-ProcessHollowing

Users that are interested in Runpe-ProcessHollowing are comparing it to the libraries listed below

• exploitblizzard / UAC-Bypass
  Bypassing windows uac, however its an old approach/method but its still unpatched ¯\_(ツ)_/¯
  ☆43Updated 3 years ago
• NYAN-x-CAT / SharpShell
  Injecting shellcode into a process memory and executing it in C#
  ☆52Updated 3 years ago
• nqntmqmqmb / pePolymorpher
  A tool implementing process hollowing making your PE polymorphic
  ☆16Updated 5 years ago
• arsium / BypassUAC
  A rework of CMLuaUtil AutoElevated
  ☆27Updated 2 years ago
• w1u0u1 / NanoCore
  NanoCore rat stub source code
  ☆39Updated 3 years ago
• arsium / ShellCodeLoaderCSharp
  A small shellcode loader library written in C#
  ☆48Updated 3 years ago
• N3agu / Akame-Loader
  A stealthy C++ shellcode loader using anti-analysis checks, AES-256 decryption, and dynamic memory permissions to evade detection. Includ…
  ☆21Updated 6 months ago
• XShar / shell_crypor_framework
  Криптор на шелл-кодах
  ☆11Updated 5 years ago
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆109Updated 2 years ago
• arsium / PELoader
  ☆20Updated 2 years ago
• d1rkmtrr / StackCrypt
  Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…
  ☆162Updated 2 years ago
• AzAgarampur / byeintegrity5-uac
  Bypass UAC at any level by abusing the Task Scheduler and environment variables
  ☆31Updated 4 years ago
• adamhlt / Basic-Rootkit
  POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
  ☆59Updated 2 years ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆90Updated 2 years ago
• XShar / BypassAV_Framework
  Test antiviruses
  ☆12Updated last year
• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆107Updated 3 years ago
• NYAN-x-CAT / CSharp-RunPE
  Hide malware behind a legit process C#
  ☆125Updated 5 years ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆111Updated 2 years ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆67Updated 3 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆51Updated 3 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆69Updated last year
• S12cybersecurity / Admin2Sys
  Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM
  ☆63Updated 2 years ago
• 0xyg3n / DarkFender
  Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)
  ☆36Updated 5 years ago
• dr4k0nia / NixImports
  A .NET malware loader, using API-Hashing to evade static analysis
  ☆207Updated 2 years ago
• 0xJX / SharpRAT
  Group 4 - C# Remote Administrator Tool
  ☆11Updated 8 months ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• Kara-4search / BypassETW_CSharp
  Bypassing ETW with Csharp
  ☆27Updated 3 years ago
• Ricky5panish / PE-Runtime-Crypter
  A runtime Crypter written in C++ to bypass AVs signature based detection
  ☆37Updated 2 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆56Updated 2 years ago