Alternatives and similar repositories for mal_ex

Users that are interested in mal_ex are comparing it to the libraries listed below

• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆289Updated last month
• rad9800 / byor
  ☆163Updated 7 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆269Updated 4 months ago
• chryzsh / awesome-bof
  🧠 The ultimate resource for finding Beacon Object Files (BOFs).
  ☆97Updated this week
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• HackLike-co / Cloak
  Generate Secure, Polymorphic, Evasive (lol) Payloads
  ☆29Updated 4 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆139Updated 5 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 11 months ago
• MalwareTech / ExifSmugglingPoC
  A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload
  ☆50Updated 3 months ago
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆335Updated last month
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆135Updated 5 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆205Updated last year
• CodeXTF2 / OpenMalleableC2
  Open Source Implementation of Cobalt Strike's Malleable C2
  ☆90Updated 2 weeks ago
• thelikes / slivercloak
  PoC framework for Sliver compilation
  ☆22Updated last year
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆261Updated 5 months ago
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 4 months ago
• dis0rder0x00 / DbgNexum
  Shellcode injection using the Windows Debugging API
  ☆165Updated last month
• rbmm / SC_DEMO
  ☆125Updated 2 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated last year
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆211Updated 2 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆169Updated last year
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆168Updated last year
• Maldev-Academy / GhostlyHollowingViaTamperedSyscalls2
  ☆70Updated last month
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆212Updated last year
• c2pain / RustPatchlessCLRLoader
  .NET assembly loader with patchless AMSI and ETW bypass in Rust
  ☆58Updated last year
• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 6 months ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆218Updated last year
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆265Updated 10 months ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆222Updated 9 months ago