Alternatives and similar repositories for Runpe-ProcessHollowing

Users that are interested in Runpe-ProcessHollowing are comparing it to the libraries listed below

• exploitblizzard / UAC-Bypass
  Bypassing windows uac, however its an old approach/method but its still unpatched ¯\_(ツ)_/¯
  ☆44Updated 4 years ago
• NYAN-x-CAT / SharpShell
  Injecting shellcode into a process memory and executing it in C#
  ☆52Updated 3 years ago
• arsium / BypassUAC
  A rework of CMLuaUtil AutoElevated
  ☆29Updated 3 years ago
• w1u0u1 / NanoCore
  NanoCore rat stub source code
  ☆38Updated 3 years ago
• nqntmqmqmb / pePolymorpher
  A tool implementing process hollowing making your PE polymorphic
  ☆16Updated 5 years ago
• arsium / ShellCodeLoaderCSharp
  A small shellcode loader library written in C#
  ☆48Updated 4 years ago
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆111Updated 3 years ago
• XShar / shell_crypor_framework
  Криптор на шелл-кодах
  ☆11Updated 5 years ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆91Updated 2 years ago
• N3agu / Akame-Loader
  A stealthy C++ shellcode loader using anti-analysis checks, AES-256 decryption, and dynamic memory permissions to evade detection. Includ…
  ☆21Updated 10 months ago
• dr4k0nia / NixImports
  A .NET malware loader, using API-Hashing to evade static analysis
  ☆209Updated 2 years ago
• NYAN-x-CAT / CSharp-RunPE
  Hide malware behind a legit process C#
  ☆129Updated 5 years ago
• 0xJX / SharpRAT
  Group 4 - C# Remote Administrator Tool
  ☆11Updated 11 months ago
• adamhlt / Basic-Rootkit
  POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
  ☆62Updated 2 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago
• SaadAhla / StackCrypt
  Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…
  ☆166Updated 2 years ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆68Updated 4 years ago
• XShar / BypassAV_Framework
  Test antiviruses
  ☆12Updated 2 years ago
• Snykes / BitRat-Source-Code
  BitRat Source Code
  ☆42Updated 5 years ago
• arsium / PELoader
  ☆20Updated 2 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆70Updated last year
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆52Updated 3 years ago
• S12cybersecurity / Admin2Sys
  Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM
  ☆62Updated 2 years ago
• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆108Updated 3 years ago
• Kara-4search / BypassETW_CSharp
  Bypassing ETW with Csharp
  ☆27Updated 4 years ago
• ntdll0 / HVNC
  My POC implementation of HVNC (Hidden VNC / Hidden Desktop)
  ☆28Updated last year
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• whydee86 / FUD-ShellCode-UUID
  Making Shellcode fully undetectable using uuid
  ☆23Updated 4 years ago
• reveng007 / ReflectiveNtdll
  A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…
  ☆181Updated 2 years ago
• 0xyg3n / DarkFender
  Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)
  ☆36Updated 5 years ago