Alternatives and similar repositories for SimpleProcessHollowing

Users that are interested in SimpleProcessHollowing are comparing it to the libraries listed below

• arsium / PELoader
  ☆20Updated last year
• TunnelGRE / ProcessInjection-GO
  Shellcode encryption in RC4 and process injection into explorer.exe.
  ☆37Updated 2 years ago
• kouzhudong / HidePort
  Hide Port In Windows
  ☆39Updated 7 months ago
• EvilBytecode / Nyx-Full-Dll-Unhook
  (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.
  ☆31Updated 2 weeks ago
• Vasco0x4 / ShadeLoader
  ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过
  ☆40Updated 2 weeks ago
• arsium / ShellCodeExec
  My personal shellcode loader
  ☆31Updated 2 years ago
• bopin2020 / WindowsCamp
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆55Updated 3 weeks ago
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆45Updated last year
• CyberSecurityUP / ProcessKiller-BYOVD
  BYOVD Technique Example using viragt64 driver
  ☆40Updated 10 months ago
• dk0m / ZeroCrumb
  Dumping App Bound Protected Credentials & Cookies Without Privileges.
  ☆40Updated last week
• baiyies / CrossInject
  32 bit process inject shellcode to 32 bit process and 64 bit process
  ☆32Updated 2 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆70Updated last year
• EvilBytecode / EDR-XDR-AV-Bypass-Shellcode-Loader
  Bypassing Major EDR's with staged shellcode, custom getmodulehandleW and getprocaddress, veh syscalls & more.
  ☆20Updated last month
• sexyiam / UAC-Bypass
  UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.
  ☆48Updated last year
• qwqdanchun / RainbowSheep
  Change hash for a signed pe
  ☆16Updated last year
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆24Updated last year
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆127Updated last year
• Neo-Maoku / KillDriverProtect
  关闭恶意驱动的文件和注册表保护
  ☆12Updated 2 years ago
• jseclab / obj2shellcode
  shellcode生成框架
  ☆86Updated 10 months ago
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆63Updated 2 years ago
• wwh1004 / AmsiBypassUacDetector
  Detect BypassUAC using AMSI
  ☆23Updated 3 months ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆44Updated last year
• hiatus / NtGate
  Transparently call NTAPI via Halo's Gate with indirect syscalls.
  ☆11Updated last year
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆34Updated 3 years ago
• EvilBytecode / EByte-Pattern-AmsiPatch
  Pattern-based AMSI bypass that patches AMSI.dll in memory by modifying comparison values, conditional jumps, and function prologues to ne…
  ☆18Updated 3 weeks ago
• hid3rx / GhostWriting
  ☆30Updated last year
• estr3llas / anti-vm-cpuid
  A collection of cpuid instruction implementations for anti-vm purposes.
  ☆11Updated last year
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆72Updated last year
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆56Updated last year
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆51Updated 2 years ago