Alternatives and similar repositories for GoodKit

Users that are interested in GoodKit are comparing it to the libraries listed below

• zero2504 / FrostLock-Injection
  FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…
  ☆41Updated 8 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆61Updated last year
• kleiton0x00 / RtlHijack
  Alternative Read and Write primitives using Rtl* functions the unintended way.
  ☆78Updated 3 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆51Updated last year
• Print3M / epic
  Extensible Position Independent Code – shellcode (C/C++) development and building toolkit designed for developer experience, predictabili…
  ☆100Updated last month
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆32Updated last year
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆44Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆84Updated last year
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆64Updated 10 months ago
• yo-yo-yo-jbo / commandline_spoofing
  Commandline spoofing on Windows
  ☆78Updated 2 weeks ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆67Updated 2 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• Kharos102 / interceptor
  Sample Rust Hooking Engine
  ☆36Updated last year
• rasta-mouse / GadgetHunter
  Find jmp gadgets for call stack spoofing.
  ☆69Updated 2 months ago
• 0xflux / ETW-Bypass-Rust
  Event Tracing for Windows EDR bypass in Rust (usermode)
  ☆36Updated last year
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆43Updated 2 years ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆79Updated last year
• winterknife / SILVERPICK
  Windows User-Mode Shellcode Development Framework (WUMSDF)
  ☆117Updated 3 weeks ago
• entropy-z / EDR_Evasion_101
  Ways to evade EDR hooking using ntdll unhooking and direct syscall.
  ☆24Updated last year
• xelemental / Mal-LNK-Generator
  ☆38Updated 8 months ago
• Teach2Breach / rpeloader
  use python on windows with full submodule support without installation
  ☆30Updated 10 months ago
• ghostbyt3 / BYOVDFinder
  Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.
  ☆73Updated 4 months ago
• bot984397 / eepy
  ☆38Updated 7 months ago
• 0xJs / EnumMitigations
  Reports on Driver, LSASS and other security services mitigations
  ☆32Updated 3 months ago
• JayGLXR / RustySpy
  A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …
  ☆19Updated 9 months ago
• Teach2Breach / hollow_rs
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Updated 10 months ago
• Teach2Breach / schtask
  Rust implementation, creating a scheduled task programmatically with user logon trigger.
  ☆47Updated 6 months ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆51Updated 2 years ago