The first open source runtime windows batch and command line deobfuscator
☆50Jun 23, 2026Updated 4 months ago
Alternatives and similar repositories for Exorcism
Users that are interested in Exorcism are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A runtime Assembly dumper for powershell to combat the rise in .net based crypters and malware.☆17Aug 26, 2025Updated last year
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- The best powershell obfuscator ever made☆136Jun 16, 2026Updated 4 months ago
- A Free Open sourced crypter that builds a output .NET .exe Stub (Updated whenever I feel like it)☆23Oct 18, 2025Updated last year
- PandaCrypter is a C#-based tool designed to convert PowerShell scripts into obfuscated batch files (.bat) with encryption and additional …☆55Aug 16, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- Binary Ninja plugin to deobfuscate strings obfuscated with the Garble project☆45Mar 6, 2025Updated last year
- Powershell & Javascript Obfuscator☆50Aug 24, 2026Updated 2 months ago
- WinDumper is a Windows utility for resolving unexported ntdll.dll functions using portable AOB signatures.☆14Dec 30, 2025Updated 10 months ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 8 months ago
- Most advanced and poorly coded windows batch obfuscator ever made (aka the best)☆350Dec 1, 2025Updated 11 months ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- Print the stack trace☆51Mar 8, 2026Updated 7 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).☆69Dec 17, 2025Updated 10 months ago
- A windows 11 rootkit in Rust☆22Mar 23, 2025Updated last year
- A simple Reset Survival PoC☆14Jan 25, 2026Updated 9 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated last year
- VDM sig bypass and additional WinAPI stubs☆21Feb 16, 2026Updated 8 months ago
- Takes a raw shellcode file (or a hex string) and produces a standalone .exe☆13May 29, 2026Updated 5 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆52May 5, 2025Updated last year
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆25Mar 4, 2026Updated 7 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Reverse engineering malware samples☆16Dec 3, 2021Updated 4 years ago
- proper ntdll .text section unhooking via native api. unlike other unhookers this doesnt leave 2 ntdlls loaded. x86/x64/wow64 supported.☆56Dec 9, 2025Updated 10 months ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Utilizing DLang For Offensive Operations.☆15May 29, 2025Updated last year
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- A WIP shellcode loader tool which bypasses AV/EDR, coded in C++, and equipped with a minimal builder.☆87Sep 27, 2025Updated last year
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- A C# PE loader for x64 and x86 PE files.☆57Mar 9, 2026Updated 7 months ago
- Malware traffic obfuscation library☆37Jul 24, 2025Updated last year
- golang decryption poc of the new app bound encryption introduced in chrome version 127.☆22Nov 4, 2024Updated last year
- An example of an external LLVM plugin module transform pass for the latest versions.☆15Oct 21, 2025Updated last year
- Pipeline for creating shellcode from a nostd rust project.☆28Jul 11, 2024Updated 2 years ago
- Bootloader for Nuitka-compiled Python DLLs. Loads main.dll extracted via nuitka-extractor directly from third-party apps. Lightweight C i…☆15Nov 29, 2025Updated 11 months ago