Alternatives and similar repositories for Evader:

Users that are interested in Evader are comparing it to the libraries listed below

• NtRaiseHardError / NINA
  NINA: No Injection, No Allocation x64 Process Injection Technique
  ☆195Updated 4 years ago
• t3rabyt3-zz / Gozi
  Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years.
  ☆63Updated 6 years ago
• eLoopWoo / zwhawk
  A kernel rootkit with remote command and control interface for windows
  ☆108Updated 7 years ago
• alal4465 / Win_Rootkit
  A kernel-mode rootkit with remote control
  ☆208Updated 4 years ago
• dadas190 / Heavens-Gate-2.0
  Executes 64bit code from a 32bit process
  ☆232Updated 7 years ago
• hasherezade / module_overloading
  A more stealthy variant of "DLL hollowing"
  ☆339Updated 10 months ago
• 0x25bit / DarkCrypter
  A Simple AES Command Line Crypter
  ☆36Updated 2 years ago
• nickcano / RelocBonus
  An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.
  ☆299Updated 6 years ago
• kkent030315 / NoPatchGuardCallback
  x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code
  ☆200Updated 3 years ago
• NtRaiseHardError / Antimalware-Research
  Research on Anti-malware and other related security solutions
  ☆259Updated 4 years ago
• NtRaiseHardError / AntiHook
  PoC designed to evade userland-hooking anti-virus.
  ☆87Updated 5 years ago
• hasherezade / chimera_pe
  ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…
  ☆218Updated last year
• idan1288 / ProcessHollowing32-64
  Process Hollowing for 32 bit and 64 bit
  ☆80Updated 7 years ago
• PELock / Simple-Polymorphic-Engine-SPE32
  Simple Polymorphic Engine (SPE32) is a simple polymorphic engine for encrypting code and data. It is an amateur project that can be used …
  ☆137Updated last year
• nickcano / ReloadLibrary
  A quick-and-dirty anti-hook library proof of concept.
  ☆102Updated 6 years ago
• MalwareTech / ZombifyProcess
  Inject code into a legitimate process
  ☆143Updated 10 years ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆105Updated last year
• hasherezade / antianalysis_demos
  Set of antianalysis techniques found in malware
  ☆129Updated last year
• forrest-orr / phantom-dll-hollower-poc
  Phantom DLL hollowing PoC
  ☆353Updated 2 years ago
• Barakat / CVE-2019-16098
  Local privilege escalation PoC exploit for CVE-2019-16098
  ☆193Updated 5 years ago
• WithSecureLabs / ModuleStomping
  https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/
  ☆118Updated 5 years ago
• josh0xA / threadfire
  PoC Thread Execution Hijacking for Win32 Code Injection
  ☆175Updated 5 months ago
• MahmoudZohdy / Process-Injection-Techniques
  Various Process Injection Techniques
  ☆145Updated 2 years ago
• DanielAvinoam / TheSubZeroProject
  A multi-staged malware that contains a kernel mode rootkit and a remote system shell.
  ☆71Updated 3 years ago
• etormadiv / HostingCLR
  Executing a .NET Assembly from C++ in Memory (CLR Hosting)
  ☆188Updated 8 years ago
• czs108 / Windows-PE-Packer
  🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engine…
  ☆335Updated 3 months ago
• jackullrich / TRunPE
  A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…
  ☆93Updated 5 years ago
• kkent030315 / PageTableInjection
  Code Injection, Inject malicious payload via pagetables pml4.
  ☆230Updated 3 years ago
• D4stiny / ThreadJect
  Manual DLL Injector using Thread Hijacking.
  ☆232Updated 7 years ago
• dalvarezperez / CreateFile_based_rootkit
  ☆131Updated last year