Alternatives and similar repositories for RootKit

Users that are interested in RootKit are comparing it to the libraries listed below

• wanttobeno / wmifilter
  驱动层拦截web访问源码
  ☆29Updated 7 years ago
• melardev / XeytanWin32-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆18Updated 5 years ago
• SLAUC91 / DLLFinder
  Enumerate the DLLs/Modules using NtQueryVirtualMemory
  ☆32Updated 9 years ago
• diegslva / BypassUAC
  ☆19Updated 9 years ago
• ze0r / cve-2019-1422
  ☆14Updated 5 years ago
• byck01 / KernelBugTest
  KernelBugTest
  ☆15Updated 7 years ago
• usertoroot / StealthInject
  This tool allows you to stealthily inject a DLL into a process.
  ☆14Updated 9 years ago
• haidragon / processrefund
  新的注入方式
  ☆11Updated 6 years ago
• John-Yu / Simple_PE_packer
  The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…
  ☆19Updated 7 years ago
• sin5678 / hidedir
  使用SSDT HOOK 在windows上隐藏指定文件或者文件夹
  ☆26Updated 4 years ago
• go-spider / CVE-2018-3252
  ☆18Updated 6 years ago
• wwh1004 / MethodsMap
  A tool to show the method info at runtime
  ☆13Updated 5 years ago
• wolk-1024 / CrossInject
  x86/x64 dll injector
  ☆30Updated 3 years ago
• OsandaMalith / ShellCode-Extractor
  This tool will extract the opcodes from the .text section and display in different hex formats for different syntaxes. Works only with va…
  ☆15Updated 9 years ago
• haidragon / thread_inline_hook
  稳定多线程中的inline hook
  ☆16Updated 5 years ago
• toringzhang / MemoryModule
  自己实现LoadLirbrary，GetProcAdd，FreeLirbrary等函数的功能，比特币病毒wcry就是用了这一功能
  ☆17Updated 8 years ago
• aaaddress1 / Lexa
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Updated 5 years ago
• bigric3 / CVE-2018-4901
  crash poc & Leak info PoC
  ☆18Updated 7 years ago
• brianwrf / CVE-2017-4878-Samples
  CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
  ☆18Updated 7 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
  ☆11Updated 6 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆43Updated 11 years ago
• ohjeongwook / REPack
  Reverse engineering toolkit for exploit/malware analysis
  ☆35Updated 5 years ago
• r00tk1ts / exploit-database-papers-translation
  Use to collect translations of the exp-db-papers
  ☆9Updated 7 years ago
• rtcrowley / Offensive-Netsh-Helper
  Maintain Windows Persistence with an evil Netshell Helper DLL
  ☆12Updated 6 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆20Updated 6 years ago
• imagemlt / EasyKnife
  a simple app like CKnife
  ☆12Updated 6 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆35Updated 7 years ago
• houjingyi233 / windows-BSOD
  ☆22Updated 6 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆35Updated 7 years ago
• wyexe / PELoader
  ☆20Updated 7 years ago