Alternatives and similar repositories for cpp-implant:

Users that are interested in cpp-implant are comparing it to the libraries listed below

• shogunlab / building-c2-implants-in-cpp
  The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).
  ☆228Updated 4 months ago
• reevesrs24 / EvasiveProcessHollowing
  Evasive Process Hollowing Techniques
  ☆139Updated 4 years ago
• Accenture / CLRvoyance
  Managed assembly shellcode generation
  ☆271Updated 4 years ago
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆172Updated 4 years ago
• hasherezade / masm_shc
  A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
  ☆175Updated last week
• am0nsec / wspe
  Windows System Programming Experiments
  ☆218Updated 2 years ago
• bats3c / EvtMute
  Apply a filter to the events being reported by windows event logging
  ☆261Updated 4 years ago
• dalvarezperez / CreateFile_based_rootkit
  ☆134Updated last month
• jhackz / RTO-Implant
  Red Team Operator: Malware Development Essentials Course
  ☆98Updated 4 years ago
• ajpc500 / NimlineWhispers
  A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.
  ☆167Updated 3 years ago
• Mr-Un1k0d3r / DLLsForHackers
  Dll that can be used for side loading and other attack vector.
  ☆202Updated 4 years ago
• med0x2e / NoAmci
  Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
  ☆216Updated 5 years ago
• mdsecactivebreach / firewalker
  ☆151Updated 4 years ago
• leoloobeek / COMProxy
  PoC for proxying COM objects when hijacking
  ☆207Updated 5 years ago
• asaurusrex / Probatorum-EDR-Userland-Hook-Checker
  Project to check which Nt/Zw functions your local EDR is hooking
  ☆186Updated 4 years ago
• boku7 / HOLLOW
  EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…
  ☆280Updated 2 years ago
• Signal-Labs / NtdllUnpatcher
  Example code for EDR bypassing
  ☆150Updated 6 years ago
• am0nsec / vx
  Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
  ☆180Updated 3 years ago
• y11en / FOLIAGE
  Experiment on reproducing Obfuscate & Sleep
  ☆144Updated 4 years ago
• 0xpat / COFFInjector
  PoC MSVC COFF Object file loader/injector.
  ☆176Updated 4 years ago
• manyfacedllama / amsi-tracer
  Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …
  ☆109Updated 4 years ago
• am0nsec / SharpHellsGate
  C# Implementation of the Hell's Gate VX Technique
  ☆212Updated 4 years ago
• boku7 / Nobelium-PdfDLRunAesShellcode
  A recreation of the "Nobelium" malware based on Microsofts Malware analysis - Part 1: PDF2Pwn
  ☆101Updated 2 years ago
• karttoon / trigen
  Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.
  ☆204Updated 7 years ago
• EgeBalci / WSAAcceptBackdoor
  Winsock accept() Backdoor Implant.
  ☆112Updated 4 years ago
• amitwaisel / Malproxy
  Proxy system calls over an RPC channel
  ☆98Updated 3 years ago
• forrest-orr / phantom-dll-hollower-poc
  Phantom DLL hollowing PoC
  ☆360Updated 2 years ago
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆129Updated 2 years ago
• paranoidninja / PIC-Get-Privileges
  Building and Executing Position Independent Shellcode from Object Files in Memory
  ☆156Updated 4 years ago
• asaurusrex / DoppelGate
  DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userla…
  ☆121Updated 3 years ago