Alternatives and similar repositories for Hooker:

Users that are interested in Hooker are comparing it to the libraries listed below

• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆73Updated 6 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆150Updated 2 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆140Updated 2 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆171Updated last week
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆61Updated 7 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated 11 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆202Updated 3 months ago
• ZERODETECTION / MSC_Dropper
  ☆138Updated 6 months ago
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆79Updated last month
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆66Updated 3 weeks ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆83Updated 7 months ago
• Evi1Grey5 / Recursive-Loader
  Recursive Loader
  ☆101Updated 4 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆113Updated 2 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆152Updated last month
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆216Updated 2 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆157Updated 3 weeks ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 6 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆92Updated 3 weeks ago
• fin3ss3g0d / NativeThreadpool
  Work, timer, and wait callback example using solely Native Windows APIs.
  ☆85Updated last year
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆163Updated 7 months ago
• xpn / CloudInject
  ☆107Updated 2 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆76Updated last year
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆208Updated 2 months ago
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆85Updated 8 months ago
• eversinc33 / PSXecute
  32bit MIPS I VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆110Updated 2 months ago
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆76Updated 6 months ago
• Octoberfest7 / enumhandles_BOF
  ☆122Updated 5 months ago
• OtterHacker / SetProcessInjection
  ☆147Updated last year
• Karkas66 / CelestialSpark
  A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust
  ☆83Updated 10 months ago