Alternatives and similar repositories for LoadPE

Users that are interested in LoadPE are comparing it to the libraries listed below

• zibility / Anti-Rootkits
  内核级ARK工具。
  ☆62Updated 9 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆53Updated 4 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆45Updated 12 years ago
• Microwave89 / rtsectiontest
  An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.
  ☆98Updated 9 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 8 years ago
• 3gstudent / CreateRemoteThread
  From 32-bit process to 64-bit process
  ☆69Updated 4 years ago
• zodiacon / DllInjectionWithThreadContext
  This is a sample that shows how to leverage SetThreadContext for DLL injection
  ☆85Updated 8 years ago
• strivexjun / HideDll
  Hide DLL / Hide Module / Hide Dynamic Link Library
  ☆108Updated 6 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆61Updated 6 years ago
• Iamgublin / LockWebPageDriver
  锁主页驱动
  ☆38Updated 6 years ago
• alphaSeclab / anti-debug
  ☆119Updated 7 years ago
• namjkee / ssdt.Recover.21yu3
  绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook
  ☆38Updated 10 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 6 years ago
• DeDf / WProtect
  ☆40Updated 6 years ago
• chinatiny / WindowsPlatform
  ☆97Updated 4 years ago
• andylau004 / LookDrvCode
  LookDrvCode
  ☆31Updated 11 years ago
• Trietptm-on-Coding-Algorithms / ZeroBank-ring0-bundle
  Kernel-Mode rootkit that connects to a remote server to send & recv commands
  ☆33Updated 7 years ago
• killeven / ObjToShellCode
  Rapid generation ShellCode
  ☆61Updated 8 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• Frenda / libScanHook
  ☆48Updated 8 years ago
• hackflame / ida_python_extractCode
  ida提取特征码脚本
  ☆56Updated 6 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆90Updated 7 years ago
• bronzeMe / SSDT_Hook_x64
  ☆36Updated 8 years ago
• jnastarot / native_peloader
  PE(compressed dll) memory loader using nt api
  ☆46Updated 8 years ago
• webees / ADkiller
  Fixed memory overflow issue in ProcessHider.
  ☆16Updated 7 years ago
• w1nds / AheadLib64
  x64 dll hijacking tool(like AheadLib)
  ☆57Updated 4 years ago
• muxq / hellorpc
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Updated 7 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆47Updated 9 years ago
• aaaddress1 / wow64Jit
  Call 32bit NtDLL API directly from WoW64 Layer
  ☆61Updated 5 years ago
• Voraka / CyxvcProtect
  CyxvcProtect packer written with C++
  ☆22Updated 8 years ago