Alternatives and similar repositories for ElfDoor-gcc:

Users that are interested in ElfDoor-gcc are comparing it to the libraries listed below

• OtterHacker / Hooker
  ☆105Updated 5 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆183Updated 3 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆151Updated 4 months ago
• deepinstinct / ShimMe
  ☆140Updated 5 months ago
• MatheuZSecurity / ModTracer
  ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.
  ☆75Updated last month
• ngn13 / shrk
  LKM rootkit for modern kernels, with DNS C2 and a simple web interface
  ☆65Updated 2 weeks ago
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆105Updated 4 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated 2 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆69Updated 2 months ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆106Updated last month
• MatheuZSecurity / UnhookingLinuxEdr
  Attacking the cleanup_module function of a kernel module
  ☆30Updated 3 weeks ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆186Updated 2 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆109Updated 7 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆116Updated last week
• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆126Updated 3 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆216Updated 4 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆173Updated 2 months ago
• Dor00tkit / CVE-2024-30090
  CVE-2024-30090 - LPE PoC
  ☆106Updated 6 months ago
• lsecqt / BSides-2024-Malware-Development-101-From-Zero-to-Non-Hero
  ☆34Updated 11 months ago
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆183Updated last month
• Maldev-Academy / CodeSearchDemo
  ☆39Updated last year
• eversinc33 / 1.6-C2
  Using the Counter Strike 1.6 RCON protocol as a C2 Channel.
  ☆78Updated 2 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆156Updated 4 months ago
• brosck / Frosty
  「🧊」Ring 3 Rootkit for Windows 10
  ☆57Updated 4 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆39Updated last month
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆92Updated last week
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆50Updated last month
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• HulkOperator / AuthStager
  ☆54Updated 6 months ago
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆123Updated 2 months ago