Alternatives and similar repositories for ThreatCheck

Users that are interested in ThreatCheck are comparing it to the libraries listed below

• keowu / BadRentdrv2
  A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering t…
  ☆104Updated last year
• naksyn / DojoLoader
  Generic PE loader for fast prototyping evasion techniques
  ☆244Updated last year
• lsecqt / ThreadlessInject-C-Implementation
  This repository implements Threadless Injection in C
  ☆172Updated 2 years ago
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆71Updated last year
• Cobalt-Strike / sleepmask-vs
  A simple Sleepmask BOF example
  ☆167Updated 2 months ago
• oldboy21 / RflDllOb
  Reflective DLL Injection Made Bella
  ☆248Updated last year
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆167Updated last year
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆116Updated last year
• xalicex / LOLDrivers_finder
  ☆89Updated 2 years ago
• NtDallas / MemLoader
  Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible
  ☆266Updated 7 months ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆202Updated 2 years ago
• internetangel / ZeroCrumb
  Dumping App Bound Protected Credentials & Cookies Without Privileges.
  ☆166Updated 8 months ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆214Updated 2 years ago
• ProcessusT / Venoma
  Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution
  ☆198Updated 8 months ago
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆102Updated last year
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆75Updated 3 years ago
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆294Updated 3 months ago
• lem0nSec / KBlast
  Basic interactive Windows kernel offensive toolkit written in C
  ☆135Updated 4 months ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆80Updated last year
• WKL-Sec / LayeredSyscall
  Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …
  ☆296Updated last year
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆265Updated last year
• Maldev-Academy / LsassHijackingViaReg
  Injecting DLL into LSASS at boot
  ☆156Updated 9 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆156Updated this week
• 0xJs / BYOVD_read_write_primitive
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆204Updated 5 months ago
• nettitude / Tartarus-TpAllocInject
  ☆209Updated 2 years ago
• Meowmycks / koneko
  Robust Cobalt Strike shellcode loader with multiple advanced evasion features
  ☆199Updated 9 months ago
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆171Updated last year
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆169Updated 2 years ago
• xalicex / Killers
  Exploitation of process killer drivers
  ☆202Updated 2 years ago
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆182Updated 3 weeks ago