Alternatives and similar repositories for Ulfberht:

Users that are interested in Ulfberht are comparing it to the libraries listed below

• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆107Updated 4 months ago
• NtDallas / Draugr
  BOF with Synthetic Stackframe
  ☆135Updated last week
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆73Updated 6 months ago
• Octoberfest7 / enumhandles_BOF
  ☆123Updated 6 months ago
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.
  ☆90Updated 11 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆94Updated last month
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆58Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆147Updated 2 months ago
• deh00ni / NtDumpBOF
  ☆93Updated 6 months ago
• securifybv / BOFRyptor
  ☆120Updated last year
• passthehashbrowns / BOFMask
  ☆115Updated last year
• decoder-it / RelabelAbuse
  ☆61Updated 9 months ago
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆79Updated last year
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆154Updated 5 months ago
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆126Updated 6 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆167Updated 3 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆61Updated 8 months ago
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆63Updated 6 months ago
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆110Updated 2 months ago
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆82Updated last year
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆109Updated 7 months ago
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆70Updated 2 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆75Updated 10 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆206Updated 2 months ago