Alternatives and similar repositories for ElfDoor-gcc

Users that are interested in ElfDoor-gcc are comparing it to the libraries listed below

• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆198Updated 4 months ago
• OtterHacker / Hooker
  ☆107Updated 7 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆102Updated 3 weeks ago
• rad9800 / talks
  ☆55Updated last month
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated last year
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆116Updated last month
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆188Updated 4 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆155Updated 6 months ago
• Dor00tkit / CVE-2024-30090
  CVE-2024-30090 - LPE PoC
  ☆107Updated 7 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆183Updated 4 months ago
• deepinstinct / ShimMe
  ☆141Updated 7 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆70Updated last week
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆110Updated 3 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆109Updated 8 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆160Updated 5 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆224Updated 5 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆115Updated 6 months ago
• MatheuZSecurity / UnhookingLinuxEdr
  Attacking the cleanup_module function of a kernel module
  ☆36Updated 2 months ago
• Maldev-Academy / LsassHijackingViaReg
  Injecting DLL into LSASS at boot
  ☆113Updated last month
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆50Updated last year
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆100Updated 3 months ago
• captain-woof / malware-study
  My projects to understand malware development and detection. Use responsibly. I'm not responsible if you cause unauthorised damage to any…
  ☆70Updated last month
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆264Updated 8 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆53Updated 4 months ago
• Friends-Security / RedirectThread
  Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…
  ☆159Updated 3 weeks ago
• exploits-forsale / 24h2-nt-exploit
  Exploit targeting NT kernel in 24H2 Windows Insider Preview
  ☆130Updated last year
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆89Updated 11 months ago
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆164Updated 11 months ago
• MatheuZSecurity / ModTracer
  ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.
  ☆82Updated 3 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆218Updated 7 months ago