Alternatives and similar repositories for APIHookingDetector:

Users that are interested in APIHookingDetector are comparing it to the libraries listed below

• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆44Updated last year
• Offensive-Panda / D3MPSEC
  "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…
  ☆24Updated 4 months ago
• paranoidninja / BRC4-Seminar-Stage-I
  These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…
  ☆19Updated last year
• Bl4ckM1rror / PEAs
  ☆58Updated last year
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆38Updated 7 months ago
• OtterHacker / Cerbere
  ☆46Updated 2 years ago
• HulkOperator / AuthStager
  ☆52Updated 3 months ago
• gerbsec / SmokeyObfuscator
  Rewrite to fit my needs
  ☆27Updated 6 months ago
• OffenseTeacher / Steganim
  ☆47Updated last year
• Helixo32 / DetectHooks
  Detect userland hooks placed by AV/EDR
  ☆26Updated last year
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆39Updated last year
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated 6 months ago
• nullsection / Sneaky-DLL-Stager
  Reasonably undetected shellcode stager and executer.
  ☆35Updated 5 months ago
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆25Updated 10 months ago
• VirtualAlllocEx / DSC_SVC_REMOTE
  This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for loc…
  ☆51Updated last year
• Octoberfest7 / Cohab_Processes
  A small Aggressor script to help Red Teams identify foreign processes on a host machine
  ☆83Updated 2 years ago
• silentwarble / Hannibal
  Mythic C2 Agent written in x64 PIC C
  ☆67Updated 2 weeks ago
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆28Updated 10 months ago
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆16Updated last year
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆46Updated 9 months ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆76Updated 3 months ago
• ps1337 / Lastenzug
  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level
  ☆25Updated 2 years ago
• CompassSecurity / TokenPhisher
  ☆25Updated this week
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆39Updated 3 months ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆52Updated last year
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆54Updated 2 months ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆38Updated last year