Alternatives and similar repositories for knownDlls_Poison

Users that are interested in knownDlls_Poison are comparing it to the libraries listed below

• klezVirus / DCKFinder

  View on GitHub
  Dangling COM Keys Finder
  ☆17Nov 16, 2021Updated 4 years ago
• TomOS3 / UserModeUnhooking

  View on GitHub
  This project is created for research into antivirus evasion by unhooking.
  ☆18Sep 2, 2021Updated 4 years ago
• bananabr / Givemeahand

  View on GitHub
  A PoC tool for exploiting leaked process and thread handles
  ☆32Feb 13, 2024Updated 2 years ago
• Alien177 / WINAPI

  View on GitHub
  ☆11Jun 24, 2024Updated last year
• jsecu / ElevatedEvents

  View on GitHub
  ☆30Nov 7, 2022Updated 3 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• veil-ivy / Utils

  View on GitHub
  collection of code snippets,windbg,python scripts and resources
  ☆14Jul 11, 2022Updated 3 years ago
• hackerhouse-opensource / envschtasksuacbypass

  View on GitHub
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆57Feb 2, 2026Updated last week
• Anal-Repair / gigabyte_gdrv3_exploit

  View on GitHub
  Rust program for interfacing with the gigabyte driver to gain access to powerful primitives such as arbitrary kernel memcpy.
  ☆17Nov 26, 2022Updated 3 years ago
• Allevon412 / PPL_Sandboxer

  View on GitHub
  ☆82Feb 12, 2022Updated 4 years ago
• ACE-Responder / ace-proctree

  View on GitHub
  Create a cool process tree like https://twitter.com/ACEResponder.
  ☆35Mar 1, 2023Updated 2 years ago
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Jun 4, 2022Updated 3 years ago
• notdodo / adduser-dll

  View on GitHub
  Simple DLL that add a user to the local Administrators group
  ☆77Jan 4, 2022Updated 4 years ago
• muturikaranja / kernel-windowless-wndproc-hook

  View on GitHub
  hooks gServerHandlers xxxEventWndProc
  ☆13May 1, 2022Updated 3 years ago
• batteryshark / stfu_wow64

  View on GitHub
  A Generic WOW64 Process Blocker
  ☆14Jul 16, 2021Updated 4 years ago
• timwhitez / Doge-HeapAlloc

  View on GitHub
  ☆14Sep 2, 2021Updated 4 years ago
• djhohnstein / CSharpCreateThreadExample

  View on GitHub
  C# code to run PIC using CreateThread
  ☆17Apr 19, 2019Updated 6 years ago
• WithSecureLabs / TickTock

  View on GitHub
  ☆113Oct 10, 2022Updated 3 years ago
• ReCryptLLC / CVE-2022-42045

  View on GitHub
  ☆39Jun 10, 2023Updated 2 years ago
• AnubisSec / GodeInjection

  View on GitHub
  ☆27Jan 16, 2021Updated 5 years ago
• Allevon412 / BreadManModuleStomping

  View on GitHub
  ☆44Oct 16, 2023Updated 2 years ago
• timwhitez / Doge-ScreenShot

  View on GitHub
  desktop screenshot
  ☆29Apr 26, 2023Updated 2 years ago
• xpn / NautilusProject

  View on GitHub
  A collection of weird ways to execute unmanaged code in .NET
  ☆174May 4, 2021Updated 4 years ago
• EspressoCake / PPLDump_BOF

  View on GitHub
  A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.
  ☆143Sep 24, 2021Updated 4 years ago
• timwhitez / Spoofing-Gate

  View on GitHub
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆45Mar 9, 2022Updated 3 years ago
• morph3 / Windows-RPC-Backdoor

  View on GitHub
  Simple windows rpc server for research purposes only
  ☆83May 29, 2022Updated 3 years ago
• fortra / CreateProcess

  View on GitHub
  A small PoC that creates processes in Windows
  ☆187Jun 6, 2024Updated last year
• waldo-irc / MalMemDetect

  View on GitHub
  Detect strange memory regions and DLLs
  ☆185Jan 20, 2022Updated 4 years ago
• RedTeamOperations / Journey-to-McAfee

  View on GitHub
  ☆113May 24, 2022Updated 3 years ago
• nettitude / RunOF

  View on GitHub
  ☆152Jan 6, 2023Updated 3 years ago
• Narumiii / phantommap

  View on GitHub
  Phantom DLL Hollowing method implemented in modmap
  ☆18Jun 9, 2021Updated 4 years ago
• Tw1sm / HTTPS-MalleableC2-Config

  View on GitHub
  Create Cobalt Strike malleable C2 profiles with HTTPS configs
  ☆18May 23, 2020Updated 5 years ago
• M-Arman / AutoAD

  View on GitHub
  Simple python script for AD enumeration
  ☆31Apr 5, 2021Updated 4 years ago
• Kara-4search / Fiber_ShellcodeExecution

  View on GitHub
  Using fibers to execute shellcode in a local process via csharp
  ☆28Jan 2, 2022Updated 4 years ago
• moloch-- / DarkLoadLibrary

  View on GitHub
  LoadLibrary for offensive operations
  ☆33Dec 14, 2021Updated 4 years ago
• stephenbradshaw / shellcode

  View on GitHub
  Various shell code I have written
  ☆17Oct 9, 2020Updated 5 years ago
• aaaddress1 / wowInjector

  View on GitHub
  PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)
  ☆167May 27, 2021Updated 4 years ago
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• SolomonSklash / netntlm

  View on GitHub
  A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
  ☆37Jul 27, 2021Updated 4 years ago