Alternatives and similar repositories for ThreadHijacking_CSharp

Users that are interested in ThreadHijacking_CSharp are comparing it to the libraries listed below

• Kara-4search / ProcessHollowing_CSharp
  ProcessHollowing via csharp
  ☆13Updated 4 years ago
• Kara-4search / EarlyBirdInjection_CSharp
  Inject shellcode into process via "EarlyBird"
  ☆26Updated 4 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆52Updated 3 years ago
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆61Updated 3 years ago
• Kara-4search / MappingInjection_CSharp
  MappingInjection via csharp
  ☆40Updated 4 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆57Updated 2 years ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆45Updated 4 years ago
• Kara-4search / PEB-PPIDspoofing_Csharp
  Command line & PPID spoofing
  ☆29Updated 2 years ago
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆82Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆104Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆18Updated 4 years ago
• mez-0 / winrmdll
  C++ WinRM API via Reflective DLL
  ☆145Updated 4 years ago
• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆18Updated 4 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago
• GetRektBoy724 / SharpHalos
  My implementation of Halo's Gate technique in C#
  ☆54Updated 3 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆138Updated 3 years ago
• Tw1sm / SharpInjector
  Flexible C# shellcode runner
  ☆39Updated 4 years ago
• Kara-4search / WindowsEventLogsBypass_Csharp
  Bypass windows eventlogs & Sysmon
  ☆19Updated 4 years ago
• Octoberfest7 / Mutants_Sessions_Self-Deletion
  Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.
  ☆129Updated 3 years ago
• ceramicskate0 / SharpExchange
  C# Tool to interact with MS Exchange based on MS docs
  ☆102Updated 3 years ago
• MrAle98 / BOF-RunPE
  ☆57Updated 2 years ago
• EspressoCake / DLL-Exports-Extraction-BOF
  DLL Exports Extraction BOF with optional NTFS transactions.
  ☆90Updated 4 years ago
• apokryptein / secinject
  Section Mapping Process Injection (secinject): Cobalt Strike BOF
  ☆101Updated 4 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆49Updated 2 years ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆85Updated 3 years ago
• Wra7h / PEResourceInject
  ☆60Updated 3 years ago
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆86Updated 2 years ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆122Updated 3 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• sliverarmory / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆31Updated 4 years ago