Alternatives and similar repositories for Test004

Users that are interested in Test004 are comparing it to the libraries listed below

• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆55Updated 2 years ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆102Updated 2 years ago
• florianib / rusty_drivers
  BYOVD collection
  ☆23Updated last year
• dosxuz / PerunsFart
  This is my own implementation of the Perun's Fart technique by Sektor7
  ☆71Updated 3 years ago
• OtterHacker / CoffLoader
  ☆56Updated 2 years ago
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆56Updated last year
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆38Updated 2 years ago
• wolfcod / beacondbg
  Beacon Debugger
  ☆54Updated 10 months ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated 2 years ago
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆64Updated 2 years ago
• AzAgarampur / byeintegrity9-uac
  ☆38Updated 2 years ago
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆37Updated 2 years ago
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆23Updated last year
• MrAle98 / BOF-RunPE
  ☆56Updated 2 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆69Updated last year
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆48Updated last year
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆29Updated 2 years ago
• jonny-jhnson / RandomPOCs
  Repo that holds random POCs
  ☆51Updated last year
• xct / CVE-2024-27460
  Plantronics Desktop Hub LPE
  ☆36Updated last year
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆45Updated 2 years ago
• Cobalt-Strike / obfuscator-llvm
  ☆57Updated last year
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆41Updated 2 years ago
• shantanu561993 / DLL-Sideload
  ☆41Updated 2 years ago
• hackerhouse-opensource / Gigabyte_ElevatePersist
  Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…
  ☆31Updated 2 years ago
• xpn / ObjectOverloadingPOC
  ☆62Updated 3 years ago
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆85Updated 2 years ago
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆43Updated last year
• waawaa / breakcyserver
  ☆50Updated 3 years ago
• y00ga-sec / Forensike
  Remotely dump NT hashes through Windows Crash dumps
  ☆36Updated 10 months ago
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆56Updated 3 years ago