Alternatives and similar repositories for BypassETW_CSharp

Users that are interested in BypassETW_CSharp are comparing it to the libraries listed below

• Kara-4search / BypassAMSI_CSharp

  View on GitHub
  Bypass AMSI
  ☆13Aug 8, 2021Updated 4 years ago
• Kara-4search / ProcessHollowing_CSharp

  View on GitHub
  ProcessHollowing via csharp
  ☆13Dec 21, 2021Updated 4 years ago
• Kara-4search / Simple_ShellCodeLoader_CSharp

  View on GitHub
  A Simple ShellcodeLoader
  ☆11Jun 4, 2021Updated 4 years ago
• Kara-4search / WindowsEventLogsBypass_Csharp

  View on GitHub
  Bypass windows eventlogs & Sysmon
  ☆20Aug 24, 2021Updated 4 years ago
• Kara-4search / MappingInjection_CSharp

  View on GitHub
  MappingInjection via csharp
  ☆40Nov 19, 2021Updated 4 years ago
• Kara-4search / EarlyBirdInjection_CSharp

  View on GitHub
  Inject shellcode into process via "EarlyBird"
  ☆26Aug 30, 2021Updated 4 years ago
• Kara-4search / ThreadHijacking_CSharp

  View on GitHub
  Process inject technique "Thread hijacking" via csharp
  ☆15Dec 18, 2021Updated 4 years ago
• Kara-4search / Fiber_ShellcodeExecution

  View on GitHub
  Using fibers to execute shellcode in a local process via csharp
  ☆28Jan 2, 2022Updated 4 years ago
• Kara-4search / SysCall_ShellcodeLoad_Csharp

  View on GitHub
  Load shellcode via syscall
  ☆56Jul 28, 2021Updated 4 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp

  View on GitHub
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Sep 6, 2021Updated 4 years ago
• Kara-4search / DInvoke_shellcodeload_CSharp

  View on GitHub
  ShellCodeLoader via DInvoke
  ☆60Jul 5, 2021Updated 4 years ago
• Kara-4search / HookDetection_CSharp

  View on GitHub
  HookDetection
  ☆45Sep 3, 2021Updated 4 years ago
• Kara-4search / PEB-PPIDspoofing_Csharp

  View on GitHub
  Command line & PPID spoofing
  ☆29Apr 15, 2023Updated 2 years ago
• Kara-4search / HellgateLoader_CSharp

  View on GitHub
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆18Jan 21, 2022Updated 4 years ago
• susMdT / SharpIndirectSyscalls

  View on GitHub
  ☆11Feb 12, 2023Updated 3 years ago
• Mantraufo / Kanoninjector

  View on GitHub
  Runpe + DInvoke + Syscall
  ☆16Jun 18, 2021Updated 4 years ago
• mez-0 / InMemoryNET

  View on GitHub
  Exploring in-memory execution of .NET
  ☆138Apr 20, 2022Updated 3 years ago
• timwhitez / Doge-RL

  View on GitHub
  Reflective DLL injection Execution
  ☆20Sep 9, 2022Updated 3 years ago
• Intrus1ve / Runpe-ProcessHollowing

  View on GitHub
  Fud Runpe Av Evasion / All Av Bypass
  ☆32Feb 24, 2023Updated 2 years ago
• ar33zy / Nimjector

  View on GitHub
  ☆42Jan 13, 2023Updated 3 years ago
• arsium / PELoader

  View on GitHub
  ☆20Jul 23, 2023Updated 2 years ago
• Mantraufo / KanonSys

  View on GitHub
  Bypass Windows defender syscall
  ☆18Jul 17, 2021Updated 4 years ago
• plackyhacker / CmdLineSpoofer

  View on GitHub
  How to spoof the command line when spawning a new process from C#.
  ☆110Dec 28, 2021Updated 4 years ago
• PaulDotSH / hidden-tear-recoded

  View on GitHub
  A recode of the open source ransomware "Hidden Tear", this has fixes for all of the old hidden tear problems and has a bit cleaner code
  ☆13May 22, 2024Updated last year
• crawl3r / FunWithAMSI

  View on GitHub
  A repo to hold any bypasses I work on/study/whatever
  ☆19Dec 30, 2020Updated 5 years ago
• TomOS3 / UserModeUnhooking

  View on GitHub
  This project is created for research into antivirus evasion by unhooking.
  ☆18Sep 2, 2021Updated 4 years ago
• eimon96 / vbs2exe

  View on GitHub
  Convert VBS file to EXE
  ☆17May 17, 2025Updated 8 months ago
• scareing / cmd2shellcode

  View on GitHub
  cmd2shellcode
  ☆79May 6, 2021Updated 4 years ago
• 1013503897 / RDP-credentials-decrypter

  View on GitHub
  decrypt rdp credentials to password using mimikatz.
  ☆28Dec 18, 2020Updated 5 years ago
• Hnisec / AntiAnalysis

  View on GitHub
  Detect VirtualBox, SandBox, Emulator, Debugger, Hosting, Processes in C#
  ☆20Jun 23, 2020Updated 5 years ago
• proxytype / Hide-FS

  View on GitHub
  Inject dll to explorer.exe and hide file from process.
  ☆23Apr 24, 2021Updated 4 years ago
• aniqfakhrul / Sharperner

  View on GitHub
  Simple executable generator with encrypted shellcode.
  ☆280Oct 3, 2022Updated 3 years ago
• S12cybersecurity / NinjaInjector

  View on GitHub
  Classic Process Injection with Memory Evasion Techniques implemantation
  ☆72Oct 28, 2023Updated 2 years ago
• WindowsCodeCamp / append_signed_pe

  View on GitHub
  Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.
  ☆26Mar 13, 2021Updated 4 years ago
• GetRektBoy724 / SharpUnhooker

  View on GitHub
  C# Based Universal API Unhooker
  ☆411Feb 18, 2022Updated 3 years ago
• AzAgarampur / byeintegrity5-uac

  View on GitHub
  Bypass UAC at any level by abusing the Task Scheduler and environment variables
  ☆35Jul 12, 2021Updated 4 years ago
• 0x00Jeff / BetterGetProcAddress

  View on GitHub
  POC of a better implementation of GetProcAddress for ntdll using binary search
  ☆111Apr 8, 2024Updated last year
• timwhitez / killProcessPOC

  View on GitHub
  use aswArPot.sys to kill process
  ☆69Aug 26, 2022Updated 3 years ago
• FeigongSec / NTLMINFO

  View on GitHub
  ☆47May 8, 2021Updated 4 years ago