Alternatives and similar repositories for alca

Users that are interested in alca are comparing it to the libraries listed below

• connormcgarr / Vtl1Mon
  Virtual Trust Level (VTL 1) secure call tracing
  ☆86Updated 5 months ago
• rad9800 / RansomFS
  ☆31Updated 11 months ago
• Internet-2-0 / Malcore-x64dbg
  This x64dbg plugin allows you to upload your sample to Malcore and view the results.
  ☆36Updated 2 years ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆138Updated 3 months ago
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆30Updated 2 years ago
• m3rcer / IRvana
  Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution
  ☆130Updated last month
• vmsplit / checkm8
  bypassing intel txt's tboot integrity checks via coreboot shim
  ☆82Updated 10 months ago
• thalium / vminer
  ☆89Updated 11 months ago
• connormcgarr / SkBridge
  Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1
  ☆70Updated 4 months ago
• mrexodia / RiscyWorkshop
  Payload Obfuscation for Red Teams workshop materials
  ☆78Updated 2 months ago
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆92Updated 6 months ago
• zx0CF1 / shredder-rs
  A high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation.
  ☆107Updated 2 weeks ago
• Slowerzs / KeyJumper
  ☆52Updated 10 months ago
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆41Updated 2 years ago
• codedefender-io / sigbreaker
  All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit
  ☆25Updated 8 months ago
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆39Updated last year
• winterknife / EVENSTAR
  Intel 64/Windows low-level experiments
  ☆63Updated 5 months ago
• carlos-al / user-kernel-syscall-hook
  ☆93Updated last year
• rbmm / TPM
  Easy encrypt/decrypt data with TPM
  ☆25Updated last year
• eversinc33 / drvtrace
  WinDbg plugin to trace module transitions from a debugged driver.
  ☆38Updated last month
• ic3qu33n / REcon2024-GOP-Complex
  REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""
  ☆14Updated 10 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 9 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆120Updated last year
• hasherezade / flareon2023
  ☆24Updated last year
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆124Updated last year
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆38Updated 2 years ago
• AaLl86 / WindowsInternals
  Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book
  ☆115Updated last year
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆120Updated 3 years ago
• jonaslyk / temp
  ☆72Updated 2 years ago
• AmitMoshel1 / PatchGuardEncryptorDriver
  A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆78Updated 10 months ago