Alternatives and similar repositories for RunPE

Users that are interested in RunPE are comparing it to the libraries listed below

• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• ScorchSecurity / Toast
  User-mode hook bypassing method
  ☆33Updated 8 years ago
• iammaguire / Salient-Rootkit
  A kernel mode Windows rootkit in development.
  ☆49Updated 3 years ago
• d35ha / PEReflectiveInjection
  Remote PE reflective injection with a simple reflective loader
  ☆31Updated 5 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆36Updated 4 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆31Updated 8 years ago
• NtRaiseHardError / UnRunPE
  PoC for detecting and dumping process hollowing code injection
  ☆51Updated 6 years ago
• NtRaiseHardError / Phage
  Reflective DLL Injection style process infector
  ☆20Updated 6 years ago
• emc2314 / PEZEncrypt
  PE Infector/Cryptor source code
  ☆15Updated 8 years ago
• rtyuiow / vmware-backdoor
  vmware-backdoor
  ☆33Updated 3 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆33Updated 5 years ago
• hasherezade / hidden_bee_tools
  Parser for a custom executable format from Hidden Bee malware (first stage)
  ☆43Updated 9 months ago
• yardenshafir / MitigationFlagsCliTool
  Command like tool to print mitigation flags for running processes in a memory dump
  ☆46Updated 4 years ago
• AzAgarampur / byeintegrity3-uac
  Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler
  ☆29Updated 3 years ago
• DoubleLabyrinth / ProcessHollowing
  ☆36Updated 6 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆59Updated 5 years ago
• EgeBalci / MapPE
  PE file mapping and manipulation package.
  ☆36Updated 3 years ago
• vineetgaurav / WIN_JELLY
  Windows GPU rootkit PoC by Team Jellyfish
  ☆35Updated 10 years ago
• aeshes / exe_crypter
  ☆13Updated 8 years ago
• alfarom256 / PebLdr
  ☆15Updated 4 years ago
• aaaddress1 / Win-Exploit-Inject
  PoC for DEF CON 26: Playing Malware Injection with Exploit thoughts
  ☆25Updated 6 years ago
• deroko / activationcontexthook
  ☆34Updated 7 years ago
• zwclose / veeamon
  ☆16Updated 5 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 7 years ago
• d35ha / RunPE
  An example of PE hollowing injection technique
  ☆23Updated 5 years ago
• hasherezade / tag_converter
  ☆22Updated 4 years ago
• blaquee / APCHook
  hooking KiUserApcDispatcher
  ☆24Updated 8 years ago
• SamLarenN / PSC-Engine
  Polymorphic Stub Creator
  ☆34Updated 8 years ago
• n4r1b / WdFilter-Research
  Data and structures regarding the research done on WdFilter
  ☆12Updated 5 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 3 years ago