Alternatives and similar repositories for GHRL

Users that are interested in GHRL are comparing it to the libraries listed below

• ZeroMemoryEx / URootkit
  simple user-mode Rootkit
  ☆106Updated 2 years ago
• dr4k0nia / XorStringsNET
  Easy XOR string encryption for NET based binaries
  ☆140Updated last year
• ZeroMemoryEx / TrampHook
  Simple x86 Trampoline Hook
  ☆42Updated 3 years ago
• Hemogl0bin / drvscanner
  Scan for potentially vulnerable drivers
  ☆91Updated 3 years ago
• etwhook / TartarusInjector
  Native Shellcode Injector Via Handle Hijacking & Pool Party.
  ☆12Updated last year
• dr4k0nia / MurkyStrings
  A string obfuscator for .NET apps, built to evade static string analysis.
  ☆106Updated 2 years ago
• kkent030315 / Van1338
  A journal for $6,000 Riot Vanguard bounty.
  ☆65Updated 2 years ago
• call-042PE / UCantSeeM3
  Hiding your process in ProcessHacker,Task Manager,etc by patching NtQuerySystemInformation
  ☆88Updated 4 years ago
• idkhidden / winapipatcher
  WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.
  ☆44Updated last year
• hasherezade / SweetDreams
  Implementation of Advanced Module Stomping and Heap/Stack Encryption
  ☆11Updated 2 years ago
• zer0condition / ZeroThreadKernel
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆156Updated 2 years ago
• iilegacyyii / ExportDumper
  A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.
  ☆71Updated 3 years ago
• 0x44F / WinKit
  💻 Windows 10 Kernel-mode rootkit
  ☆32Updated 3 years ago
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆154Updated this week
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆59Updated 3 years ago
• hasherezade / shellc_encoder
  Standalone Metasploit-like XOR encoder for shellcode
  ☆50Updated last year
• dr4k0nia / Origami
  Packer compressing .net assemblies, (ab)using the PE format for data storage
  ☆171Updated 2 years ago
• ZeroMemoryEx / SleepKiller
  Bypass Malware Time Delays
  ☆104Updated 3 years ago
• 3intermute / ramiel
  uefi diskless persistence technique + OVMF secureboot bypass
  ☆92Updated last year
• XaFF-XaFF / Kernel-Process-Hollowing
  Windows x64 kernel mode rootkit process hollowing POC.
  ☆189Updated 2 years ago
• NeoMaster831 / kurasagi
  Windows 11 24H2 Runtime PatchGuard Bypass
  ☆183Updated 2 weeks ago
• ZeroMemoryEx / KasperskyHook
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆16Updated 9 months ago
• XaFF-XaFF / Shellcodev
  Shellcodev is a tool designed to help and automate the process of shellcode creation.
  ☆111Updated last year
• irql / CVE-2021-31728
  vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.
  ☆91Updated 4 years ago
• jonaslyk / temp
  ☆71Updated 2 years ago
• CarlosG13 / Process-Hypnosis-Debugger-assisted-control-flow-hijack
  ☆37Updated last year
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆90Updated last year
• maziland / StackBombing
  Next gen process injection technique
  ☆54Updated 5 years ago
• mrexodia / lolbin-poc
  Small PoC of using a Microsoft signed executable as a lolbin.
  ☆138Updated 2 years ago
• fcccode / Vx-Engines
  Collection of source code for Polymorphic, Metamorphic, and Permutation Engines used in Malware
  ☆31Updated 5 years ago