Alternatives and similar repositories for EDRSnowblast:

Users that are interested in EDRSnowblast are comparing it to the libraries listed below

• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆46Updated last year
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆43Updated 2 years ago
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆59Updated 11 months ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆70Updated last year
• dis0rder0x00 / ParentProcessManipulation-LNK
  Using LNK files and user input simulation to start processes under explorer.exe
  ☆24Updated 4 months ago
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆21Updated last year
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• Offensive-Panda / D3MPSEC
  "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…
  ☆24Updated 5 months ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 2 years ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆52Updated last year
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 3 months ago
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆49Updated 3 weeks ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆54Updated 2 months ago
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆42Updated last year
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated 2 years ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated 6 months ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆19Updated 8 months ago
• deepinstinct / VSTO-POC
  A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously
  ☆31Updated 2 years ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated 2 years ago
• rasta-mouse / KerbApp
  ☆28Updated 8 months ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• OffenseTeacher / Steganim
  ☆47Updated last year
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated 7 months ago