Alternatives and similar repositories for ContextMenuHijack:

Users that are interested in ContextMenuHijack are comparing it to the libraries listed below

• Hagrid29 / RemotePatcher
  Patch AMSI and ETW in remote process via direct syscall
  ☆81Updated 2 years ago
• reveng007 / ReflectiveNtdll
  A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…
  ☆171Updated 2 years ago
• fortra / hw-call-stack
  Use hardware breakpoints to spoof the call stack for both syscalls and API calls
  ☆187Updated 8 months ago
• EvanMcBroom / perfect-loader
  Load a dynamic library from memory by modifying the native Windows loader
  ☆207Updated last month
• SaadAhla / D1rkSleep
  Improved version of EKKO by @5pider that Encrypts only Image Sections
  ☆118Updated 2 years ago
• SaadAhla / BlockOpenHandle
  Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…
  ☆167Updated last year
• Octoberfest7 / KDStab
  BOF combination of KillDefender and Backstab
  ☆163Updated last year
• tijme / amd-ryzen-master-driver-v17-exploit
  Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
  ☆135Updated 2 years ago
• kyleavery / TitanLdr
  Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
  ☆136Updated 2 years ago
• NUL0x4C / Syscallslib
  a library that automates some clean syscalls to make it easier to implement
  ☆84Updated 2 years ago
• klezVirus / NimlineWhispers3
  A tool for converting SysWhispers3 syscalls for use with Nim projects
  ☆143Updated 2 years ago
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆164Updated last year
• janoglezcampos / c_syscalls
  Single stub direct and indirect syscalling with runtime SSN resolving for windows.
  ☆133Updated 2 years ago
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆134Updated 2 years ago
• RedTeamOperations / VEH-PoC
  ☆112Updated 2 years ago
• waldo-irc / YouMayPasser
  You shall pass
  ☆255Updated 2 years ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆107Updated 3 months ago
• NVISOsecurity / Interceptor
  Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
  ☆122Updated 2 years ago
• mansk1es / GhostFart
  ☆134Updated last year
• 0x00Check / ExploitLeakedHandle
  Identify and exploit leaked handles for local privilege escalation.
  ☆105Updated last year
• paranoidninja / Proxy-DLL-Loads
  The code is a pingback to the Dark Vortex blog:
  ☆170Updated 2 years ago
• 0xDeku / NiceKatz
  A nice process dumping tool
  ☆78Updated 2 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆137Updated 2 years ago
• Cobalt-Strike / CallStackMasker
  A PoC implementation for dynamically masking call stacks with timers.
  ☆265Updated 2 years ago
• NVISOsecurity / CobaltWhispers
  CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…
  ☆229Updated 2 years ago
• Yaxser / COFFLoader2
  Load and execute COFF files and Cobalt Strike BOFs in-memory
  ☆209Updated 2 years ago
• SECFORCE / DLL-Hollow-PoC
  DLL Hollowing PoC - Remote and Self shellcode injection
  ☆75Updated 3 years ago
• Octoberfest7 / DropSpawn_BOF
  CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
  ☆224Updated last year
• passthehashbrowns / BOFMask
  ☆115Updated last year
• trustedsec / PPLFaultDumpBOF
  ☆138Updated last year