Alternatives and similar repositories for IDLE-Abuse

Users that are interested in IDLE-Abuse are comparing it to the libraries listed below

• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• jsecu / ElevatedEvents
  ☆30Updated 2 years ago
• shantanu561993 / DLL-Sideload
  ☆40Updated 2 years ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆56Updated 2 years ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated 2 years ago
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆38Updated last year
• Allevon412 / BreadManModuleStomping
  ☆43Updated last year
• dosxuz / PerunsFart
  This is my own implementation of the Perun's Fart technique by Sektor7
  ☆71Updated 3 years ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆100Updated 2 years ago
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆28Updated 2 years ago
• EspressoCake / DLL-Exports-Extraction-BOF
  DLL Exports Extraction BOF with optional NTFS transactions.
  ☆82Updated 3 years ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆31Updated last year
• dobin / antniumui
  The Web UI for Antnium
  ☆27Updated 3 years ago
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆29Updated 3 years ago
• smokeme / asar-backdoor
  ☆30Updated 3 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆39Updated 2 years ago
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 3 years ago
• Sh0ckFR / API-Hashing
  A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++
  ☆37Updated last year
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆56Updated 2 years ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆44Updated 10 months ago
• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆36Updated 2 months ago
• Octoberfest7 / Cohab_Processes
  A small Aggressor script to help Red Teams identify foreign processes on a host machine
  ☆85Updated 2 years ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆20Updated last year
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆37Updated 10 months ago
• Kryp7os / SharpRBCD
  An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD
  ☆47Updated 4 months ago
• Wh04m1001 / PICDumper
  ☆25Updated 3 years ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆22Updated 2 years ago
• tccontre / Reg-Restore-Persistence-Mole
  a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…
  ☆51Updated last year
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆45Updated 2 years ago
• Shrfnt77 / DynamicSyscalls
  DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
  ☆66Updated 2 years ago