Alternatives and similar repositories for Cave-Finder:

Users that are interested in Cave-Finder are comparing it to the libraries listed below

• 0xjbb / vehspoof
  Callstack spoofing using a VEH because VEH all the things.
  ☆21Updated last month
• maziland / StackBombing
  Next gen process injection technique
  ☆52Updated 4 years ago
• xalicex / Get-DLL-and-Function-Addresses
  GetModuleHandle (via PEB) and GetProcAddress (via EAT) like
  ☆32Updated 3 years ago
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆46Updated 7 months ago
• knight0x07 / BumbleCrypt
  A Bumblebee-inspired Crypter
  ☆80Updated 2 years ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆74Updated last week
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated 9 months ago
• Reijaff / offensive_c
  ☆42Updated 2 years ago
• mrexodia / lolbin-poc
  Small PoC of using a Microsoft signed executable as a lolbin.
  ☆137Updated 2 years ago
• XaFF-XaFF / ZwProcessHollowing
  ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption
  ☆85Updated 2 years ago
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆38Updated 7 months ago
• ameenalkurdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆63Updated 2 months ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆69Updated 6 months ago
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆90Updated 10 months ago
• HulkOperator / CallStackSpoofer
  ☆29Updated 4 months ago
• rad9800 / VehApiResolve
  ☆108Updated 2 years ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆89Updated 2 years ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆57Updated 2 weeks ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆72Updated last year
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆57Updated 2 years ago
• zimnyaa / insomnia
  a stage1 DLL loader with sleep obfuscation
  ☆35Updated 2 years ago
• ZeroMemoryEx / Hooks_Hunter
  Simple API Hooks detector
  ☆73Updated 2 years ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆99Updated last year
• GetRektBoy724 / DCMB
  Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!
  ☆231Updated 9 months ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆100Updated last year
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆49Updated 3 months ago
• 0xTriboulet / Cycotic
  A python polymorphic engine for C programs
  ☆12Updated last year
• passthehashbrowns / VectoredExceptionHandling
  ☆86Updated 8 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆109Updated 7 months ago
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆29Updated last year