Alternatives and similar repositories for injection-stuff

Users that are interested in injection-stuff are comparing it to the libraries listed below

• aaaddress1 / RunPE-In-Memory
  Run a Exe File (PE Module) in memory (like an Application Loader)
  ☆913Updated 4 years ago
• killeven / DllToShellCode
  Fast Conversion Windows Dynamic Link Library To ShellCode
  ☆400Updated 3 years ago
• sud01oo / ProcessInjection
  Some ways to inject a DLL into a alive process
  ☆362Updated 7 years ago
• alphaSeclab / obfuscation-stuff
  Source Code Obfuscation And Binary Obfuscation, Multiple Languages And Multiple Platforms. Including 250+ Tools and 600+ Posts
  ☆371Updated 4 years ago
• iPower / KasperskyHook
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,216Updated last year
• hasherezade / process_ghosting
  Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…
  ☆665Updated last year
• d35ha / CallObfuscator
  Obfuscate specific windows apis with different apis
  ☆1,007Updated 4 years ago
• mgeeky / ThreadStackSpoofer
  Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…
  ☆1,146Updated 3 years ago
• czs108 / Windows-PE-Packer
  🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engine…
  ☆345Updated 9 months ago
• strivexjun / AheadLib-x86-x64
  hijack dll Source Code Generator. support x86/x64
  ☆816Updated 4 years ago
• tothi / dll-hijack-by-proxying
  Exploiting DLL Hijacking by DLL Proxying Super Easily
  ☆523Updated 2 years ago
• FiYHer / InfinityHookPro
  InfinityHookPro Win7 -> Win11 latest
  ☆538Updated 2 years ago
• BeneficialCode / WinArk
  Windows Anti-Rootkit Tool
  ☆507Updated 4 months ago
• am0nsec / HellsGate
  Original C Implementation of the Hell's Gate VX Technique
  ☆1,079Updated 4 years ago
• XaFF-XaFF / Cronos-Rootkit
  Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
  ☆912Updated 3 years ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆402Updated 6 months ago
• 0xlane / BypassUAC
  Use ICMLuaUtil to Bypass UAC!
  ☆573Updated 5 years ago
• alphaSeclab / hooking
  Resources About Hooking. For All Platforms. Currently 300+ Tools And 600+ Posts.
  ☆336Updated 5 years ago
• med0x2e / SigFlip
  SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…
  ☆1,179Updated last year
• ciyze0101 / Windows-Rootkits
  ☆490Updated 4 years ago
• anhkgg / SuperDllHijack
  SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技…
  ☆971Updated 3 years ago
• AzureGreen / InjectCollection
  A collection of injection via vc++ in ring3
  ☆242Updated 8 years ago
• hzqst / unicorn_pe
  Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
  ☆855Updated last year
• LloydLabs / delete-self-poc
  A way to delete a locked file, or current running executable, on disk.
  ☆552Updated 11 months ago
• alal4465 / Win_Rootkit
  A kernel-mode rootkit with remote control
  ☆217Updated 4 years ago
• mai1zhi2 / SysWhispers2_x86
  X86 version of syswhispers2 / x86 direct system call
  ☆325Updated 4 years ago
• tishion / mmLoader
  A library for loading dll module bypassing windows PE loader from memory (x86/x64)
  ☆555Updated last month
• lainswork / shellcode-factory
  shellcode 生成框架
  ☆271Updated 3 years ago
• crvvdev / MasterHide
  A x64 Windows Rootkit using SSDT or Hypervisor hook
  ☆547Updated 6 months ago
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆713Updated last year