Alternatives and similar repositories for RustBird

Users that are interested in RustBird are comparing it to the libraries listed below

• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆153Updated 10 months ago
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆127Updated last month
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆78Updated 4 months ago
• safedv / Rustic64
  64-bit, position-independent implant template for Windows in Rust.
  ☆143Updated 4 months ago
• Octoberfest7 / enumhandles_BOF
  ☆124Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆67Updated last year
• zero2504 / Early-Cryo-Bird-Injections
  Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects
  ☆104Updated 4 months ago
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆91Updated last month
• 0xTriboulet / rssh-rs
  ☆53Updated 3 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆119Updated 9 months ago
• susMdT / ForsHops
  ForsHops
  ☆57Updated 5 months ago
• 0xTriboulet / rdll-rs
  A reflective DLL development template for the Rust programming language
  ☆108Updated 3 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆133Updated last month
• Teach2Breach / stargate
  Locate dlls and function addresses without PEB Walk and EAT parsing
  ☆85Updated last month
• rad9800 / FileRenameJunctionsEDRDisable
  ☆157Updated 8 months ago
• rasta-mouse / Crystal-Loaders
  A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike
  ☆149Updated last month
• Kudaes / CustomEntryPoint
  Select any exported function in a dll as the new dll's entry point.
  ☆81Updated 10 months ago
• Teach2Breach / pool_party_rs
  remote process injections using pool party techniques
  ☆66Updated 2 months ago
• lap1nou / CLR_Heap_encryption
  ☆100Updated last year
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆128Updated 7 months ago
• iilegacyyii / DataInject-BOF
  Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll
  ☆129Updated 4 months ago
• Teach2Breach / snapinject_rs
  A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …
  ☆50Updated 7 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆187Updated 6 months ago
• NoahKirchner / speedloader
  Rust template/library for implementing your own COFF loader
  ☆69Updated 7 months ago
• zarkones / BloodfangC2
  Modern PIC implant for Windows (64 & 32 bit)
  ☆102Updated last month
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆76Updated 7 months ago
• djackreuter / rustlualoader
  Shellcode loader that executes embedded Lua from Rust.
  ☆122Updated 8 months ago
• Maldev-Academy / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆51Updated 3 months ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆130Updated 10 months ago
• 0xJs / BlockEDRTraffic
  Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …
  ☆165Updated last week