Alternatives and similar repositories for RootKit

Users that are interested in RootKit are comparing it to the libraries listed below

• diegslva / BypassUAC
  ☆19Updated 9 years ago
• SLAUC91 / DLLFinder
  Enumerate the DLLs/Modules using NtQueryVirtualMemory
  ☆32Updated 10 years ago
• brianwrf / CVE-2017-4878-Samples
  CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html
  ☆18Updated 7 years ago
• haidragon / processrefund
  新的注入方式
  ☆11Updated 6 years ago
• wanttobeno / wmifilter
  驱动层拦截web访问源码
  ☆30Updated 7 years ago
• usertoroot / StealthInject
  This tool allows you to stealthily inject a DLL into a process.
  ☆14Updated 10 years ago
• 3gstudent / Catch-specified-file-s-handle
  Enumerate all processes and get specified file's handle,then close it.
  ☆11Updated 7 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆44Updated 12 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆35Updated 8 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• bigric3 / CVE-2018-4901
  crash poc & Leak info PoC
  ☆18Updated 7 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆35Updated 7 years ago
• melardev / XeytanWin32-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆21Updated 5 years ago
• im-bill / linux-rc
  简单的Linux远程控制
  ☆20Updated 8 years ago
• acru3l / HEVD-exploits
  The place where my HackSys Extreme Vulnerable Driver exploits go.
  ☆25Updated 6 years ago
• heikipikker / Ender-Rat
  Remote Administration Tool For Windows
  ☆13Updated 7 years ago
• sgabe / CVE-2019-1253
  AppXSvc Arbitrary File Security Descriptor Overwrite EoP
  ☆20Updated 5 years ago
• rtcrowley / Offensive-Netsh-Helper
  Maintain Windows Persistence with an evil Netshell Helper DLL
  ☆12Updated 7 years ago
• epakskape / greenshellcode
  Green shellcode challenge tools
  ☆22Updated 6 years ago
• houjingyi233 / ALPC-fuzz-study
  ☆26Updated 6 years ago
• John-Yu / Simple_PE_packer
  The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…
  ☆19Updated 7 years ago
• Ma3k4H3d / XuanWu_SecNews
  SecNews
  ☆16Updated 6 years ago
• bigric3 / CAJViewer-LPE-Exploit
  ☆18Updated 7 years ago
• DownWithUp / CVE-2018-16712
  PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)
  ☆25Updated 6 years ago
• NoviceLive / shellcoding
  Introduce you to shellcode development.
  ☆23Updated 9 years ago
• stonedreamforest / re_avdevprot
  逆向小红伞杀毒软件驱动——avdevprot
  ☆24Updated 7 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
  ☆11Updated 6 years ago
• 3gstudent / Shellcode-Generater
  No inline asm,support x86/x64
  ☆66Updated 4 years ago
• aaaddress1 / APCInjector-BYPASS-AV
  ☆19Updated 10 years ago
• sugice / AzusaDefender
  安全卫士项目
  ☆32Updated 8 years ago