Alternatives and similar repositories for mal_ex

Users that are interested in mal_ex are comparing it to the libraries listed below

• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆262Updated 3 months ago
• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆261Updated 3 weeks ago
• rad9800 / byor
  ☆160Updated 7 months ago
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 3 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆204Updated 11 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆164Updated 5 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 10 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆234Updated last year
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆136Updated 4 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆168Updated last year
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆209Updated last month
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆293Updated 4 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆137Updated 4 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆216Updated last year
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆220Updated 8 months ago
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆324Updated last month
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆204Updated 4 months ago
• rbmm / SC_DEMO
  ☆125Updated last month
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆207Updated 11 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆211Updated last year
• kfallahi / NTLMPasswordChanger
  PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.
  ☆72Updated 2 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆258Updated last year
• chryzsh / awesome-bof
  🧠 The ultimate, community-curated resource for Beacon Object Files (BOFs) — tutorials, how-tos, deep dives, and reference materials.
  ☆95Updated 3 weeks ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆168Updated 5 months ago
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆207Updated last year
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆169Updated 11 months ago
• MalwareTech / ExifSmugglingPoC
  A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload
  ☆47Updated 2 months ago
• Maldev-Academy / LsassHijackingViaReg
  Injecting DLL into LSASS at boot
  ☆156Updated 8 months ago
• dis0rder0x00 / DbgNexum
  Shellcode injection using the Windows Debugging API
  ☆124Updated last week
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆263Updated 9 months ago