Alternatives and similar repositories for PatchlessCLRLoader

Users that are interested in PatchlessCLRLoader are comparing it to the libraries listed below

• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆267Updated 2 years ago
• SaadAhla / UnhookingPatch
  Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
  ☆310Updated 2 years ago
• WKL-Sec / dcomhijack
  Lateral Movement Using DCOM and DLL Hijacking
  ☆326Updated 2 years ago
• naksyn / DojoLoader
  Generic PE loader for fast prototyping evasion techniques
  ☆243Updated last year
• Cobalt-Strike / bof-vs
  A Beacon Object File (BOF) template for Visual Studio
  ☆258Updated last month
• senzee1984 / MutationGate
  Use hardware breakpoint to dynamically change SSN in run-time
  ☆278Updated last year
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆324Updated last year
• deepinstinct / DCOMUploadExec
  DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
  ☆378Updated last year
• iilegacyyii / ThreadlessInject-BOF
  BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…
  ☆392Updated 2 years ago
• SaadAhla / D1rkLdr
  Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…
  ☆319Updated 2 years ago
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆170Updated 2 years ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆201Updated 2 years ago
• Cobalt-Strike / bof_template
  A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use int…
  ☆239Updated last month
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆214Updated last year
• Mr-Un1k0d3r / AMSI-ETW-Patch
  Patch AMSI and ETW
  ☆250Updated last year
• Maldev-Academy / Christmas
  ☆257Updated last year
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆166Updated last year
• itm4n / PPLmedic
  Dump the memory of any PPL with a Userland exploit chain
  ☆349Updated 2 years ago
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆210Updated 2 years ago
• oldboy21 / RflDllOb
  Reflective DLL Injection Made Bella
  ☆248Updated last year
• xalicex / Killers
  Exploitation of process killer drivers
  ☆201Updated 2 years ago
• gabriellandau / EDRSandblast-GodFault
  EDRSandblast-GodFault
  ☆271Updated 2 years ago
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆263Updated 9 months ago
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆430Updated 2 years ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆260Updated last year
• nettitude / Tartarus-TpAllocInject
  ☆207Updated 2 years ago
• OmriBaso / RToolZ
  A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.
  ☆324Updated 2 years ago
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆286Updated 2 months ago
• CognisysGroup / HadesLdr
  Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2
  ☆293Updated 2 years ago
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆227Updated last year