Alternatives and similar repositories for Runpe-ProcessHollowing

Users that are interested in Runpe-ProcessHollowing are comparing it to the libraries listed below

• exploitblizzard / UAC-Bypass
  Bypassing windows uac, however its an old approach/method but its still unpatched ¯\_(ツ)_/¯
  ☆43Updated 3 years ago
• nqntmqmqmb / pePolymorpher
  A tool implementing process hollowing making your PE polymorphic
  ☆16Updated 5 years ago
• NYAN-x-CAT / SharpShell
  Injecting shellcode into a process memory and executing it in C#
  ☆53Updated 2 years ago
• arsium / BypassUAC
  A rework of CMLuaUtil AutoElevated
  ☆27Updated 2 years ago
• w1u0u1 / NanoCore
  NanoCore rat stub source code
  ☆38Updated 3 years ago
• arsium / ShellCodeLoaderCSharp
  A small shellcode loader library written in C#
  ☆47Updated 3 years ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆90Updated 2 years ago
• SaadAhla / StackCrypt
  Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…
  ☆162Updated 2 years ago
• N3agu / Akame-Loader
  Akame is an open-source, shellcode loader written in C++17
  ☆20Updated 5 months ago
• Ricky5panish / PE-Runtime-Crypter
  A runtime Crypter written in C++ to bypass AVs signature based detection
  ☆36Updated 2 years ago
• adamhlt / Basic-Rootkit
  POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
  ☆60Updated 2 years ago
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆106Updated 2 years ago
• dr4k0nia / NixImports
  A .NET malware loader, using API-Hashing to evade static analysis
  ☆208Updated 2 years ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆65Updated 3 years ago
• arsium / PELoader
  ☆20Updated 2 years ago
• XShar / shell_crypor_framework
  Криптор на шелл-кодах
  ☆11Updated 5 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆69Updated last year
• XShar / BypassAV_Framework
  Test antiviruses
  ☆12Updated last year
• ntdll0 / HVNC
  My POC implementation of HVNC (Hidden VNC / Hidden Desktop)
  ☆27Updated 8 months ago
• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆105Updated 2 years ago
• reveng007 / ReflectiveNtdll
  A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…
  ☆174Updated 2 years ago
• NYAN-x-CAT / CSharp-RunPE
  Hide malware behind a legit process C#
  ☆125Updated 5 years ago
• eversinc33 / MalwareAdventurez
  My adventures in learning about different userland malware techniques, such as syscalls, injection, unhooking or sandbox evasion.
  ☆78Updated last year
• MahmoudZohdy / APICallProxy
  Windows API Call Obfuscation
  ☆109Updated 2 years ago
• wireless90 / ProcessInjector.NET
  Learning Process Injection and Hollowing techniques
  ☆42Updated 3 years ago
• d1rkmtrr / BlockOpenHandle
  Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…
  ☆172Updated 2 years ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆110Updated last year
• capt-meelo / KernelCallbackTable-Injection
  Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html
  ☆135Updated 3 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆51Updated 3 years ago
• 0xJX / SharpRAT
  Group 4 - C# Remote Administrator Tool
  ☆11Updated 6 months ago