Alternatives and similar repositories for lib-nosa

Users that are interested in lib-nosa are comparing it to the libraries listed below

• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆162Updated 10 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆122Updated 10 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆170Updated 2 months ago
• rbmm / SC
  shell code example
  ☆63Updated 3 weeks ago
• rad9800 / talks
  ☆60Updated 6 months ago
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆105Updated last year
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆127Updated 2 months ago
• r0keb / TrashFormer
  A 64 bit executable junk code engine for polymorphic malware.
  ☆70Updated 4 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆94Updated last month
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆106Updated 9 months ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆43Updated 2 weeks ago
• xforcered / Being-A-Good-CLR-Host
  ☆134Updated 9 months ago
• OtterHacker / Hooker
  ☆108Updated 11 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆119Updated 6 months ago
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆272Updated last year
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆211Updated 9 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆201Updated 8 months ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆74Updated last year
• Reijaff / offensive_c
  ☆42Updated 2 years ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated 2 years ago
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆104Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆158Updated 10 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆118Updated last month
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆66Updated 2 weeks ago
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆121Updated last year
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 6 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆102Updated 8 months ago
• RWXstoned / LdrShuffle
  Code execution/injection technique using DLL PEB module structure manipulation
  ☆208Updated 4 months ago
• decoder-it / RelabelAbuse
  ☆61Updated last year
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆74Updated 9 months ago