Alternatives and similar repositories for Runpe-ProcessHollowing

Users that are interested in Runpe-ProcessHollowing are comparing it to the libraries listed below

• exploitblizzard / UAC-Bypass
  Bypassing windows uac, however its an old approach/method but its still unpatched ¯\_(ツ)_/¯
  ☆44Updated 4 years ago
• nqntmqmqmb / pePolymorpher
  A tool implementing process hollowing making your PE polymorphic
  ☆16Updated 5 years ago
• w1u0u1 / NanoCore
  NanoCore rat stub source code
  ☆38Updated 3 years ago
• arsium / BypassUAC
  A rework of CMLuaUtil AutoElevated
  ☆29Updated 3 years ago
• NYAN-x-CAT / SharpShell
  Injecting shellcode into a process memory and executing it in C#
  ☆52Updated 3 years ago
• SaadAhla / StackCrypt
  Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…
  ☆166Updated 2 years ago
• N3agu / Akame-Loader
  A stealthy C++ shellcode loader using anti-analysis checks, AES-256 decryption, and dynamic memory permissions to evade detection. Includ…
  ☆21Updated 10 months ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆91Updated 2 years ago
• adamhlt / Basic-Rootkit
  POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
  ☆62Updated 2 years ago
• arsium / ShellCodeLoaderCSharp
  A small shellcode loader library written in C#
  ☆48Updated 4 years ago
• dr4k0nia / NixImports
  A .NET malware loader, using API-Hashing to evade static analysis
  ☆209Updated 2 years ago
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆111Updated 3 years ago
• XShar / shell_crypor_framework
  Криптор на шелл-кодах
  ☆11Updated 5 years ago
• arsium / PELoader
  ☆20Updated 2 years ago
• NYAN-x-CAT / CSharp-RunPE
  Hide malware behind a legit process C#
  ☆129Updated 5 years ago
• XShar / BypassAV_Framework
  Test antiviruses
  ☆12Updated 2 years ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆68Updated 4 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆71Updated last year
• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆108Updated 3 years ago
• 0xJX / SharpRAT
  Group 4 - C# Remote Administrator Tool
  ☆11Updated 11 months ago
• whydee86 / FUD-ShellCode-UUID
  Making Shellcode fully undetectable using uuid
  ☆23Updated 4 years ago
• Ricky5panish / PE-Runtime-Crypter
  A runtime Crypter written in C++ to bypass AVs signature based detection
  ☆39Updated 2 years ago
• AnshumanSrivastava108 / Static-Scantime-Crypter
  A Scantime Crytper that applies an obfuscation method onto a malware/false-positive so an antivirus cannot successfully match it with any…
  ☆16Updated 4 years ago
• 0xyg3n / DarkFender
  Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)
  ☆36Updated 5 years ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆112Updated 2 years ago
• wireless90 / ProcessInjector.NET
  Learning Process Injection and Hollowing techniques
  ☆42Updated 3 years ago
• AzAgarampur / byeintegrity5-uac
  Bypass UAC at any level by abusing the Task Scheduler and environment variables
  ☆35Updated 4 years ago
• SaadAhla / BlockOpenHandle
  Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…
  ☆172Updated 2 years ago
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆67Updated 3 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago