Alternatives and similar repositories for RustChain

Users that are interested in RustChain are comparing it to the libraries listed below

• Signal-Labs / iat_unhook_sample
  (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…
  ☆134Updated 9 months ago
• Kudaes / CustomEntryPoint
  Select any exported function in a dll as the new dll's entry point.
  ☆81Updated last year
• enkomio / BrokenFlow
  A simple PoC to invoke an encrypted shellcode by using an hidden call
  ☆116Updated 3 years ago
• tijme / amd-ryzen-master-driver-v17-exploit
  Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
  ☆148Updated 2 years ago
• b1tg / Ox-C2
  Command & Control server and agent written in Rust
  ☆35Updated 3 years ago
• NVISOsecurity / Interceptor
  Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
  ☆134Updated 2 years ago
• SpikySabra / Kernel-Cactus
  It's pointy and it hurts!
  ☆126Updated 3 years ago
• thiagopeixoto / massayo
  Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL
  ☆64Updated 3 years ago
• Kudaes / RustHollow
  Inject a shellcode in a remote process using Process Hollowing.
  ☆54Updated 4 years ago
• frank2 / oxide
  A PoC packer written in Rust!
  ☆74Updated 3 years ago
• mansk1es / GhostFart
  ☆137Updated 2 years ago
• 0x00Check / ExploitLeakedHandle
  Identify and exploit leaked handles for local privilege escalation.
  ☆111Updated 2 years ago
• x42en / sysplant
  Your syscall factory
  ☆126Updated 2 months ago
• NUL0x4C / EtwSessionHijacking
  A Poc on blocking Procmon from monitoring network events
  ☆108Updated 4 months ago
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆83Updated 7 months ago
• Kudaes / rust_tips_and_tricks
  Rust For Windows Cheatsheet
  ☆120Updated 2 weeks ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• eversinc33 / GpuDecryptShellcode
  XOR decrypting shellcode using the GPU with OpenCL.
  ☆117Updated 6 months ago
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆105Updated last year
• whokilleddb / exe_who
  Executables on Disk? Bleh 🤮
  ☆111Updated 2 years ago
• ZeroMemoryEx / Overlord
  abusing Process Hacker driver to terminate other processes (BYOVD)
  ☆83Updated 2 years ago
• zblurx / impersonate-rs
  Rusty Impersonate
  ☆102Updated last month
• postrequest / donut-rs
  Donut generator in rust.
  ☆27Updated 3 years ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆79Updated last year
• Kudaes / Bin-Finder
  Detect EDR's exceptions by inspecting processes' loaded modules
  ☆130Updated last year
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆76Updated last month
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆80Updated 4 years ago
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆88Updated 2 years ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated 2 years ago
• klezVirus / NimlineWhispers3
  A tool for converting SysWhispers3 syscalls for use with Nim projects
  ☆147Updated 3 years ago