Alternatives and similar repositories for ClrAmsiScanPatcher

Users that are interested in ClrAmsiScanPatcher are comparing it to the libraries listed below

• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆77Updated last year
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆65Updated 6 months ago
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆30Updated 7 months ago
• Teach2Breach / stargate
  Locate dlls and function addresses without PEB Walk and EAT parsing
  ☆85Updated last month
• NUL0x4C / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆56Updated 3 months ago
• zero2504 / Early-Cryo-Bird-Injections
  Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects
  ☆104Updated 4 months ago
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆109Updated last week
• 0xJs / BYOVD_EDRKiller
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆65Updated last week
• 0xJs / BYOVD_read_write_primitive
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆161Updated last week
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆65Updated last year
• almounah / go-buena-clr
  Good CLR Host with Native patchless AMSI Bypass
  ☆87Updated 4 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆92Updated 6 months ago
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆76Updated 7 months ago
• ricardojoserf / NativeTokenImpersonate
  Impersonate Tokens using only NTAPI functions
  ☆79Updated 4 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆60Updated 9 months ago
• lsecqt / SharpRedirect
  Simple C# Redirector
  ☆88Updated 8 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆67Updated last year
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆116Updated 8 months ago
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆49Updated 3 months ago
• andreisss / Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
  Remote DLL Injection with Timer-based Shellcode Execution
  ☆95Updated last month
• passthehashbrowns / VectoredExceptionHandling
  ☆88Updated last year
• Shrfnt77 / AmsiBypass
  Bypassing Amsi using LdrLoadDll
  ☆45Updated 7 months ago
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆91Updated last year
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆51Updated last year
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆32Updated last year
• sexyiam / UAC-Bypass
  UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.
  ☆49Updated last year
• jsecu / ModTask
  ☆53Updated 8 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆97Updated 6 months ago
• dmcxblue / NtCreateUserProcessBOF
  An Aggressor Script that utilizes NtCreateUserProcess to run binaries
  ☆30Updated 7 months ago