Alternatives and similar repositories for lib-nosa

Users that are interested in lib-nosa are comparing it to the libraries listed below

• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆159Updated 8 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆119Updated 8 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆158Updated 3 weeks ago
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆105Updated last year
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆270Updated 11 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆122Updated 7 months ago
• rbmm / SC
  shell code example
  ☆62Updated 3 months ago
• rad9800 / talks
  ☆58Updated 4 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆92Updated 6 months ago
• OtterHacker / Hooker
  ☆108Updated 9 months ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆101Updated 2 years ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆157Updated 8 months ago
• decoder-it / RelabelAbuse
  ☆61Updated last year
• rad9800 / WTSRM2
  ☆161Updated 2 years ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆74Updated 10 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆205Updated 7 months ago
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆255Updated last year
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆199Updated 6 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆22Updated this week
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆105Updated last year
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆74Updated 7 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆96Updated 6 months ago
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated last year
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆119Updated 4 months ago
• CICADA8-Research / COMThanasia
  A set of programs for analyzing common vulnerabilities in COM
  ☆223Updated 11 months ago
• r0keb / TrashFormer
  A 64 bit executable junk code engine for polymorphic malware.
  ☆65Updated 2 months ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆65Updated last month
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆67Updated 4 months ago
• mansk1es / GhostFart
  ☆137Updated 2 years ago