Alternatives and similar repositories for ClrAmsiScanPatcher

Users that are interested in ClrAmsiScanPatcher are comparing it to the libraries listed below

• ricardojoserf / SharpNado
  Repository to gather the .NET malware I will be developing
  ☆18Updated 3 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆60Updated 8 months ago
• dmcxblue / NtCreateUserProcessBOF
  An Aggressor Script that utilizes NtCreateUserProcess to run binaries
  ☆30Updated 5 months ago
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆29Updated 5 months ago
• ricardojoserf / SharpSelfDelete
  PoC to self-delete a binary in C#
  ☆33Updated last year
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆63Updated 4 months ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆75Updated 11 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated 11 months ago
• NUL0x4C / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆53Updated 2 months ago
• Idov31 / NidhoggCSharpApi
  C# API for Nidhogg rootkit
  ☆17Updated last year
• Teach2Breach / stargate
  Locate dlls and function addresses without PEB Walk and EAT parsing
  ☆35Updated this week
• lsecqt / SharpRedirect
  Simple C# Redirector
  ☆88Updated 7 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆41Updated 8 months ago
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆28Updated 4 months ago
• Offensive-Panda / D3MPSEC
  "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…
  ☆24Updated 10 months ago
• Shrfnt77 / AmsiBypass
  Bypassing Amsi using LdrLoadDll
  ☆45Updated 6 months ago
• leftp / BackupCreds
  A C# implementation of dumping credentials from Windows Credential Manager
  ☆59Updated last year
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆66Updated 5 months ago
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆63Updated last year
• rasta-mouse / PacketAlchemy
  Playing with packets in C#
  ☆14Updated 11 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆86Updated 10 months ago
• outflanknl / unmanaged-dotnet-patch
  Modify managed functions from unmanaged code
  ☆52Updated last year
• ibaiC / FriendlyFireBOF
  A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.
  ☆53Updated 3 months ago
• Sh3lldon / HellsVectoredGate
  ☆42Updated 3 weeks ago
• HulkOperator / AuthStager
  ☆55Updated 8 months ago
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆39Updated 10 months ago
• casp3r0x0 / CortexRansomBypass
  Cortex EDR Ransomware protection Bypass
  ☆24Updated 5 months ago
• jsecu / ModTask
  ☆52Updated 6 months ago
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆50Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated 11 months ago