Alternatives and similar repositories for Ox-C2

Users that are interested in Ox-C2 are comparing it to the libraries listed below

• gmh5225 / rust-mordor-rs
  Rusty Hell's Gate / Halo's Gate / Tartarus' Gate / FreshyCalls / Syswhispers2 Library
  ☆31Updated 2 years ago
• aancw / DllProxy-rs
  Rust Implementation of SharpDllProxy for DLL Proxying Technique
  ☆30Updated 2 years ago
• Kudaes / RustHollow
  Inject a shellcode in a remote process using Process Hollowing.
  ☆52Updated 3 years ago
• postrequest / donut-rs
  Donut generator in rust.
  ☆27Updated 3 years ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆50Updated 2 years ago
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆71Updated last month
• 0xTriboulet / rdll-rs
  A reflective DLL development template for the Rust programming language
  ☆97Updated last month
• frank2 / oxide
  A PoC packer written in Rust!
  ☆73Updated 3 years ago
• joaoviictorti / rustclr
  Host CLR and run .NET binaries using Rust
  ☆109Updated this week
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆116Updated this week
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆77Updated last year
• lap1nou / CLR_Heap_encryption
  ☆99Updated last year
• ZeroMemoryEx / Overlord
  abusing Process Hacker driver to terminate other processes (BYOVD)
  ☆82Updated 2 years ago
• joaoviictorti / coffeeldr
  A COFF Loader written in Rust
  ☆102Updated this week
• Shrfnt77 / DynamicSyscalls
  DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
  ☆66Updated 2 years ago
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆70Updated last year
• Teach2Breach / pool_party_rs
  remote process injections using pool party techniques
  ☆62Updated 4 months ago
• x42en / sysplant
  Your syscall factory
  ☆123Updated last week
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆72Updated 2 months ago
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆84Updated 2 years ago
• JayGLXR / RustyMirage
  A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆35Updated 3 months ago
• Kudaes / CustomEntryPoint
  Select any exported function in a dll as the new dll's entry point.
  ☆80Updated 8 months ago
• Teach2Breach / rekkoex
  ☆17Updated 10 months ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆100Updated 2 years ago
• 0xflux / Rust-Hells-Gate
  Rust malware EDR evasion via direct syscalls, fully implemented as an example in Rust
  ☆56Updated last year
• thiagopeixoto / massayo
  Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL
  ☆65Updated 2 years ago
• CymulateResearch / Blindside
  Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms
  ☆129Updated 2 years ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆59Updated 7 months ago
• joaoviictorti / dinvk
  Dynamically invoke arbitrary code and use various tricks written idiomatically in Rust (Dinvoke)
  ☆79Updated this week
• whokilleddb / exe_who
  Executables on Disk? Bleh 🤮
  ☆100Updated 2 years ago