Alternatives and similar repositories for AntiVM

Users that are interested in AntiVM are comparing it to the libraries listed below

• S12cybersecurity / FreeThreadHijacking
  Perform Thread Hijacking Shellcode Injection without OpenProcess and OpenThread mapping all the free handles in memory
  ☆12Updated 10 months ago
• S12cybersecurity / VirtualAlloc-Implementation
  My Own VirtualAlloc Implementation to use as alternative unknown for all the defense solutions of VirtualAlloc Win32 API Function
  ☆8Updated last year
• S12cybersecurity / PDFTypeSpoofing
  PDF Icon File Type Spoofer
  ☆14Updated 10 months ago
• varwara / CVE-2024-21338
  PoC for the Untrusted Pointer Dereference in the appid.sys driver
  ☆16Updated last year
• android1337 / crycall
  Compile-Time Calls Obfuscator for C++14+
  ☆43Updated last year
• S12cybersecurity / PrivilegeEscalationClass
  C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin
  ☆21Updated last year
• NUL0x4C / RecycleBinPersistence
  using the Recycle Bin to insure persistence
  ☆12Updated 2 years ago
• qwqdanchun / RainbowSheep
  Change hash for a signed pe
  ☆16Updated last year
• buzzer-re / BulletTrain
  A manual PE mapping implementation, aka reflective loader
  ☆19Updated 2 years ago
• paskalian / RetSpoofer
  Spoof the return address of any function call.
  ☆10Updated 9 months ago
• un4ckn0wl3z / AbuseWin32
  Collection of Win32 with C++/Assembly for Hooking, Patch and Reversing PE file
  ☆12Updated 2 years ago
• crvvdev / cpp-ransomware
  C\C++ Ransomware example using RSA and AES-128 with BCrypt library on Windows
  ☆17Updated 2 years ago
• freakanonymous / DLL_ROOTKIT_loader
  Rootkit loader for your rootkit dll, x86/x64 system wide DLL injection (+appinit_dlls registry create) uses heavens gate
  ☆19Updated 4 years ago
• ManulMap / malstring
  Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.
  ☆21Updated 11 months ago
• blueflagss / inline-syscall
  A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.
  ☆49Updated 3 months ago
• Intrus1ve / Runpe-ProcessHollowing
  Fud Runpe Av Evasion / All Av Bypass
  ☆33Updated 2 years ago
• Allevon412 / ReflectiveDLLInjector
  This program is used to perform reflective DLL Injection to a remote process specified by the user.
  ☆65Updated last year
• byte2mov / codecave-hook
  codecave hook reverse engineering toolkit.
  ☆36Updated last year
• AlSch092 / HideStaticReferences
  Research into removing strings & API call references at compile-time (Anti-Analysis)
  ☆25Updated 11 months ago
• XaFF-XaFF / MBR-Overwrite-with-custom-message
  Overwrite MBR and add own custom message
  ☆17Updated 5 years ago
• S12cybersecurity / S12URootkit
  User Mode Windows Rootkit
  ☆61Updated last year
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• 0mWindyBug / FileHide
  filter driver to hide files and directories
  ☆20Updated last year
• SkarSys / windows-kernel-trojan
  A windows kernel mode driver that spoofs serial numbers when mapped and executes a malicious payload (FULLY from kernel!!!)
  ☆31Updated 7 months ago
• x0reaxeax / SilentWrite
  PoC arbitrary WPM without a process handle
  ☆19Updated last year
• EvilBytecode / Amsi-Patch-Updated-2025
  How to bypass AMSI (Antimalware Scan Interface) in PowerShell/C++ by dynamically patching the AmsiScanBuffer function.
  ☆17Updated 3 weeks ago
• PaulNorman01 / Dynamizer
  Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.
  ☆19Updated 2 years ago
• S12cybersecurity / MySQL-DataStealer
  Post-Exploitation Tool to Steal MySQL Data, and with persistence extract all data from MySQL table every time that Windows are opened wit…
  ☆10Updated 2 years ago
• adamhlt / Basic-Rootkit
  POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files
  ☆54Updated last year
• MastMind / PE-infector
  Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)
  ☆59Updated last year