Alternatives and similar repositories for mal_ex

Users that are interested in mal_ex are comparing it to the libraries listed below

• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆289Updated last month
• rad9800 / byor
  ☆163Updated 7 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆205Updated last year
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 4 months ago
• chryzsh / awesome-bof
  🧠 The ultimate resource for finding Beacon Object Files (BOFs).
  ☆97Updated this week
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆138Updated 5 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆269Updated 4 months ago
• MalwareTech / ExifSmugglingPoC
  A Proof-of-Concept using Cache Smuggling + Exif data to passively download a second stage payload
  ☆50Updated 3 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated last year
• CodeXTF2 / OpenMalleableC2
  Open Source Implementation of Cobalt Strike's Malleable C2
  ☆90Updated 2 weeks ago
• Maldev-Academy / GhostlyHollowingViaTamperedSyscalls2
  ☆70Updated last month
• rbmm / SC_DEMO
  ☆125Updated last month
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆135Updated 5 months ago
• thelikes / slivercloak
  PoC framework for Sliver compilation
  ☆22Updated last year
• HackLike-co / Cloak
  Generate Secure, Polymorphic, Evasive (lol) Payloads
  ☆29Updated 4 months ago
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆335Updated last month
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆211Updated 2 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 11 months ago
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆293Updated 5 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆261Updated 5 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆169Updated last year
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆208Updated last year
• dis0rder0x00 / DbgNexum
  Shellcode injection using the Windows Debugging API
  ☆165Updated last month
• kfallahi / NTLMPasswordChanger
  PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll.
  ☆72Updated 3 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆168Updated last year
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆220Updated 9 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 6 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆107Updated 2 months ago