Alternatives and similar repositories for alca

Users that are interested in alca are comparing it to the libraries listed below

• rad9800 / RansomFS
  ☆31Updated 4 months ago
• Idov31 / NovaHypervisor
  NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…
  ☆137Updated this week
• Slowerzs / KeyJumper
  ☆48Updated 3 months ago
• codedefender-io / sigbreaker
  All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit
  ☆21Updated 2 months ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆126Updated 3 weeks ago
• msrspsvceret / checkm8
  bypassing intel txt's tboot integrity checks via coreboot shim
  ☆70Updated 4 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆65Updated 3 months ago
• Internet-2-0 / Malcore-x64dbg
  This x64dbg plugin allows you to upload your sample to Malcore and view the results.
  ☆37Updated 2 years ago
• rce-3 / xenith
  Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.
  ☆20Updated 3 weeks ago
• thalium / vminer
  ☆88Updated 5 months ago
• hasherezade / flareon2023
  ☆25Updated 8 months ago
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆36Updated last year
• AmitMoshel1 / PatchGuardEncryptorDriver
  An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆70Updated 3 months ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆78Updated 3 weeks ago
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆117Updated last year
• rad9800 / talks
  ☆57Updated 2 months ago
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆35Updated last year
• ic3qu33n / REcon2024-GOP-Complex
  REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""
  ☆13Updated 3 months ago
• Nordgaren / stealth-win
  ☆47Updated last year
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆72Updated last week
• carlos-al / user-kernel-syscall-hook
  ☆91Updated last year
• 20urc3 / Aplos
  Aplos an extremely simple fuzzer for Windows binaries.
  ☆69Updated 4 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆110Updated 2 years ago
• winterknife / EVENSTAR
  Intel 64/Windows low-level experiments
  ☆37Updated last week
• joaoviictorti / dbg-rs
  Safe Rust bindings for the COM interfaces of the Windows debugging engine
  ☆14Updated 3 weeks ago
• mez-0 / citadel
  A Payload Analysis Framework
  ☆30Updated 2 weeks ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆105Updated 2 years ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆113Updated 10 months ago
• mrexodia / RiscyWorkshop
  Payload Obfuscation for Red Teams workshop materials
  ☆48Updated 2 weeks ago
• Invoke-RE / ungarble_bn
  Binary Ninja plugin to deobfuscate strings obfuscated with the Garble project
  ☆24Updated 4 months ago