Alternatives and similar repositories for LogMeInPoCHandleDup

Users that are interested in LogMeInPoCHandleDup are comparing it to the libraries listed below

• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆73Updated 4 months ago
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆49Updated last year
• xforcered / Being-A-Good-CLR-Host
  ☆106Updated 4 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆80Updated last year
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated 11 months ago
• decoder-it / RelabelAbuse
  ☆61Updated 11 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆109Updated 8 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆154Updated 5 months ago
• mansk1es / GhostFart
  ☆136Updated last year
• xpn / CloudInject
  ☆110Updated 5 months ago
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆164Updated 11 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆114Updated 5 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆29Updated last year
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆103Updated last year
• 0prrr / Malwear-Sweet
  Malware?
  ☆70Updated 7 months ago
• dsnezhkov / shutter
  ☆117Updated 4 years ago
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆101Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated 9 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆86Updated 8 months ago
• iamagarre / BadExclusionsNWBO
  BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
  ☆76Updated last year
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆154Updated 5 months ago
• morRubin / NegoExRelay
  ☆88Updated 2 years ago
• lap1nou / CLR_Heap_encryption
  ☆99Updated last year
• Wh04m1001 / GamingServiceEoP
  ☆147Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆94Updated last week
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆114Updated 2 years ago
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆98Updated last year
• zblurx / impersonate-rs
  Rusty Impersonate
  ☆95Updated last year
• xforcered / ForsHops
  ForsHops
  ☆131Updated last month