Alternatives and similar repositories for IoctlHunter

Users that are interested in IoctlHunter are comparing it to the libraries listed below

• mansk1es / GhostFart
  ☆136Updated last year
• naksyn / ModuleShifting
  Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctype…
  ☆116Updated last year
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆161Updated 8 months ago
• nettitude / Tartarus-TpAllocInject
  ☆184Updated last year
• xforcered / Being-A-Good-CLR-Host
  ☆106Updated 4 months ago
• OtterHacker / SetProcessInjection
  ☆151Updated last year
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆264Updated 8 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆155Updated 5 months ago
• gabriellandau / EDRSandblast-GodFault
  EDRSandblast-GodFault
  ☆265Updated last year
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆81Updated last year
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆187Updated 6 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated last year
• 0prrr / Malwear-Sweet
  Malware?
  ☆70Updated 7 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• xalicex / Killers
  Exploitation of process killer drivers
  ☆201Updated last year
• rbmm / SC_DEMO
  ☆115Updated 2 months ago
• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆110Updated last year
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆164Updated 11 months ago
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆114Updated 2 years ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated 11 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆99Updated 3 weeks ago
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆83Updated last year
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated last year
• NetSPI / BOF-PE
  An example reference design for a proposed BOF PE
  ☆168Updated last month
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆161Updated last year
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆130Updated 9 months ago
• Mr-Un1k0d3r / AMSI-ETW-Patch
  Patch AMSI and ETW
  ☆239Updated last year
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆85Updated 2 years ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆115Updated 5 months ago
• SaadAhla / D1rkInject
  Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…
  ☆178Updated last year