Alternatives and similar repositories for CitadelCore:

Users that are interested in CitadelCore are comparing it to the libraries listed below

• zodiacon / ManagedWindows
  Managed wrappers around the Windows API and some Native API
  ☆34Updated 6 years ago
• malcomvetter / WMIProcessWatcher
  An example pattern in C# for using WMI to monitor process creation and termination events.
  ☆52Updated 6 years ago
• Scavanger / MemoryModule.net
  Loading a native DLL in the memory.
  ☆69Updated 7 years ago
• malcomvetter / AntiDebug
  PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
  ☆32Updated 6 years ago
• malcomvetter / DieHard
  PoC: process watcher patterns to make killing a process hard.
  ☆11Updated 6 years ago
• guitmz / msil-cecil-injection
  Injection of MSIL using Cecil
  ☆12Updated 9 years ago
• b4rtik / SharpLoadImage
  Hide .Net assembly into png images
  ☆35Updated 5 years ago
• CameronAavik / ILject
  Provides a way which you can load a .NET dll/exe from disk, modify/inject IL, and then run the assembly all in memory without modifying t…
  ☆30Updated 8 years ago
• AviAvni / NativeLeakDetector
  Win32 memory leak detector with ETW
  ☆41Updated 7 years ago
• checkymander / MemScan
  Quick Proof of Concept for reading a processes memory and searching for a specific string.
  ☆10Updated 6 years ago
• cobbr / InsecurePowerShellHost
  InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…
  ☆31Updated 7 years ago
• nektra / SQLSvrIntercept
  Microsoft SQL Server Hooking
  ☆22Updated 11 years ago
• NewOrbit / MalwareScan.AMSI
  ☆75Updated 8 months ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• two06 / FridaSharp
  ☆15Updated 5 years ago
• am0nsec / MCGC
  Minimalist Custom .NET Core Garbage Collector
  ☆21Updated 4 years ago
• two06 / FridaInject
  Inject Frida-Gadget into a local process
  ☆26Updated 5 years ago
• numaru / socksifier
  One DLL to redirect them all to SOCKS4 server.
  ☆24Updated 5 years ago
• m4mm0n / WinPIT
  Windows Process Injection Toolkit - plain and simple :)
  ☆26Updated 6 years ago
• arsium / BypassGetModuleBaseAddressAndGetExportAddress
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆20Updated 2 years ago
• ethanmoffat / PELoaderLib
  ☆8Updated 5 months ago
• enkomio / Anathema
  .NET instrumentation framework
  ☆72Updated 7 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆41Updated 5 years ago
• mjsabby / CopyOnWriteDump
  Copy-on-write fork()-like memory dump using Process Snapshotting APIs
  ☆13Updated 7 years ago
• sunnyc7 / EvilWMIProvider
  Installs And Executes Shellcode
  ☆11Updated 9 years ago
• woelmer / inlinecodeinxaml
  How to write inline c# in xaml
  ☆8Updated 11 years ago
• zodiacon / AccessMask
  ☆18Updated 5 years ago
• tmthrgd / DLL-Injector
  Inject and detour DLLs and program functions both managed and unmanaged in other programs, written (almost) purely in C#. [Not maintained…
  ☆38Updated 11 years ago
• pigeonhands / MLRat
  Plugin Driven Remote Administration Tool (Unsupported)
  ☆13Updated 9 years ago
• malcomvetter / ProtectProcessFromJoeUser
  PoC: Protecting Joe User from killing his own process.
  ☆9Updated 6 years ago