Alternatives and similar repositories for GHRL

Users that are interested in GHRL are comparing it to the libraries listed below

• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆106Updated 2 years ago
• ZeroMemoryEx / TrampHook
  Simple x86 Trampoline Hook
  ☆42Updated 3 years ago
• dr4k0nia / XorStringsNET
  Easy XOR string encryption for NET based binaries
  ☆139Updated last year
• Hemogl0bin / drvscanner
  Scan for potentially vulnerable drivers
  ☆91Updated 3 years ago
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆109Updated 2 years ago
• iilegacyyii / ExportDumper
  A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.
  ☆71Updated 3 years ago
• kkent030315 / Van1338
  A journal for $6,000 Riot Vanguard bounty.
  ☆65Updated 2 years ago
• call-042PE / UCantSeeM3
  Hiding your process in ProcessHacker,Task Manager,etc by patching NtQuerySystemInformation
  ☆88Updated 4 years ago
• 0x44F / WinKit
  💻 Windows 10 Kernel-mode rootkit
  ☆32Updated 3 years ago
• idkhidden / winapipatcher
  WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.
  ☆43Updated last year
• hasherezade / shellc_encoder
  Standalone Metasploit-like XOR encoder for shellcode
  ☆50Updated last year
• dr4k0nia / simple-string-encryption
  Simple website to automatically generate string encryption/decryption routines for C#
  ☆10Updated 3 years ago
• 0x00Jeff / BetterGetProcAddress
  POC of a better implementation of GetProcAddress for ntdll using binary search
  ☆108Updated last year
• jonaslyk / temp
  ☆71Updated 2 years ago
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆89Updated last year
• ZeroMemoryEx / Hooks_Hunter
  Simple API Hooks detector
  ☆74Updated 3 years ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆111Updated 2 years ago
• irql / CVE-2021-31728
  vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.
  ☆91Updated 4 years ago
• C5Hackr / Segment-Encryption
  ☆26Updated last year
• etwhook / TartarusInjector
  Native Shellcode Injector Via Handle Hijacking & Pool Party.
  ☆12Updated last year
• ZeroMemoryEx / KasperskyHook
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆17Updated 9 months ago
• ZeroMemoryEx / SleepKiller
  Bypass Malware Time Delays
  ☆104Updated 3 years ago
• mrexodia / lolbin-poc
  Small PoC of using a Microsoft signed executable as a lolbin.
  ☆138Updated 2 years ago
• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆66Updated 2 years ago
• fcccode / Vx-Engines
  Collection of source code for Polymorphic, Metamorphic, and Permutation Engines used in Malware
  ☆32Updated 5 years ago
• hasherezade / SweetDreams
  Implementation of Advanced Module Stomping and Heap/Stack Encryption
  ☆11Updated 2 years ago
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆153Updated 3 weeks ago
• amitschendel / venom-rootkit
  A simple Windows kernel rootkit.
  ☆94Updated 5 months ago
• exploitblizzard / Windows-Privilege-Escalation-CVE-2021-1732
  Read my blog for more info -
  ☆32Updated 4 years ago
• 3intermute / ramiel
  uefi diskless persistence technique + OVMF secureboot bypass
  ☆93Updated last year