Alternatives and similar repositories for NADLLI:

Users that are interested in NADLLI are comparing it to the libraries listed below

• wwh1004 / MethodsMap
  A tool to show the method info at runtime
  ☆13Updated 5 years ago
• craids / AresFramework
  Win32 PE Anti-RE and Anti-debugging Framework
  ☆13Updated 5 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 6 years ago
• Viralmaniar / Reg-Hives
  This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. Use it to copy SY…
  ☆15Updated 8 years ago
• DavidXanatos / HideTS
  DLL and API hooking example to hide running in a Terminal Session
  ☆18Updated 4 years ago
• HFaeiro / Remote-Admin-Tool
  Simple remote administration tool. Written in c++ and MASM.
  ☆18Updated 6 years ago
• melardev / XeytanWin32-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆18Updated 5 years ago
• arsium / BypassGetModuleBaseAddressAndGetExportAddress
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆20Updated 2 years ago
• danielkrupinski / Bleak
  A Windows native DLL injection library written in C# that supports several methods of injection.
  ☆13Updated 6 years ago
• eternalklaus / EternalAntirootkit
  Anti-rootkit works as a Windows system driver.
  ☆13Updated 3 years ago
• AzAgarampur / byeintegrity-lite
  Bypass UAC by abusing shell protocol handlers
  ☆14Updated 3 years ago
• ameeracle / 3rdEye
  Monitor Files and Folders for Changes in Real Time .
  ☆10Updated 6 years ago
• nattyr / Crypt
  POC runtime crypter
  ☆9Updated 6 years ago
• VoidSec / ida-helpers
  Collection of IDA helpers
  ☆15Updated 2 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆16Updated 6 years ago
• melardev / XeytanWin32-Async-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆9Updated 5 years ago
• Mantraufo / Kanoninjector
  Runpe + DInvoke + Syscall
  ☆16Updated 3 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
  ☆11Updated 6 years ago
• Noxtal / tetrodotoxin
  A Rust malware controlled by a Go web interface, API and socket server.
  ☆10Updated 2 years ago
• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆19Updated 5 years ago
• ethanmoffat / PELoaderLib
  ☆8Updated 5 months ago
• 1M50RRY / runpe-native-loader
  Loader and RunPE file executer
  ☆17Updated 5 years ago
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆19Updated 7 years ago
• zodiacon / AccessMask
  ☆20Updated 5 years ago
• SlowsieNT / TorFlow
  Conquer the deep ocean, host an .onion site fast!
  ☆15Updated 2 years ago
• own2pwn / r0ak
  r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
  ☆26Updated 6 years ago
• XaFF-XaFF / AMSI-Bypass
  Rasta's mouse AMSI patch but with function that makes it undetectable.
  ☆13Updated 4 years ago
• benmoss / CreateProcessAsUser
  CreateProcessAsUser experiments
  ☆6Updated 9 years ago
• guibacellar / BisquillaRansomware
  The evolution of NxRansomware
  ☆10Updated 5 years ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago