Alternatives and similar repositories for HEVD-CSharpKernelPwn

Users that are interested in HEVD-CSharpKernelPwn are comparing it to the libraries listed below

• CryptoBreach / UnhookPoC

  View on GitHub
  A small PoC using DInvoke, dynamically mapping a DLL and executing Win32 APIs for process injection.
  ☆10Dec 16, 2021Updated 4 years ago
• waleedassar / SyscallNumberExtractor

  View on GitHub
  ☆24Sep 26, 2021Updated 4 years ago
• daem0nc0re / SharpWnfSuite

  View on GitHub
  C# Utilities for Windows Notification Facility
  ☆159Apr 14, 2025Updated 10 months ago
• Mr-Un1k0d3r / WindowsDllsExport

  View on GitHub
  A list of all the DLLs export in C:\windows\system32\
  ☆221Dec 22, 2021Updated 4 years ago
• 12end / cargs

  View on GitHub
  crypto args for golang
  ☆17Feb 14, 2022Updated 3 years ago
• paranoidninja / Process-Instrumentation-Syscall-Hook

  View on GitHub
  A simple program to hook the current process to identify the manual syscall executions on windows
  ☆265Nov 18, 2022Updated 3 years ago
• EspressoCake / NativeFunctionStaticMap

  View on GitHub
  A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.
  ☆28Dec 16, 2021Updated 4 years ago
• daem0nc0re / AtomicSyscall

  View on GitHub
  Tools and PoCs for Windows syscall investigation.
  ☆368Dec 2, 2025Updated 2 months ago
• jsecu / ElevatedEvents

  View on GitHub
  ☆30Nov 7, 2022Updated 3 years ago
• EspressoCake / DLL-Hijack-Search-Order-BOF

  View on GitHub
  DLL Hijack Search Order Enumeration BOF
  ☆150Nov 3, 2021Updated 4 years ago
• TheWover / ProcessManager

  View on GitHub
  ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.
  ☆13Aug 12, 2019Updated 6 years ago
• cube0x0 / ParallelSyscalls

  View on GitHub
  C# version of MDSec's ParallelSyscalls
  ☆141Jan 9, 2022Updated 4 years ago
• bhassani / doublepulsar

  View on GitHub
  DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)
  ☆28Mar 11, 2020Updated 5 years ago
• mobdk / WinBoost

  View on GitHub
  Execute Mimikatz with different technique
  ☆51Nov 8, 2021Updated 4 years ago
• EgeBalci / meterpreter

  View on GitHub
  Basic multi platform meterpreter loader module.
  ☆16Jul 21, 2020Updated 5 years ago
• slyd0g / SharpCryptUnprotectData

  View on GitHub
  ☆15Feb 9, 2022Updated 4 years ago
• lab52io / StealAllTokens

  View on GitHub
  This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…
  ☆57Nov 4, 2021Updated 4 years ago
• ceramicskate0 / BOF-Builder

  View on GitHub
  C# .Net 5.0 project to build BOF (Beacon Object Files) in mass
  ☆25Jul 25, 2023Updated 2 years ago
• N4kedTurtle / LocalDllParse

  View on GitHub
  ☆55Nov 11, 2021Updated 4 years ago
• frkngksl / HintInject

  View on GitHub
  A PoC project for embedding shellcode to Hint/Name Table
  ☆113May 16, 2022Updated 3 years ago
• shlyuz / implant_go

  View on GitHub
  Golang Shlyuz Implant Implementation
  ☆13May 23, 2025Updated 8 months ago
• ioncodes / rw

  View on GitHub
  allowing um r/w through km from um ioctl ™
  ☆11Jan 2, 2022Updated 4 years ago
• alfarom256 / StinkyLoader

  View on GitHub
  It stinks
  ☆105Apr 22, 2022Updated 3 years ago
• V3ded / ToolDump-v1

  View on GitHub
  Some of my custom "tools".
  ☆28Feb 21, 2022Updated 3 years ago
• waleedassar / RestrictedKernelLeaks

  View on GitHub
  ☆163Sep 18, 2021Updated 4 years ago
• SecuProject / DLLHijackingScanner

  View on GitHub
  This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.
  ☆279Aug 4, 2021Updated 4 years ago
• mdsecactivebreach / ParallelSyscalls

  View on GitHub
  ☆169Jan 7, 2022Updated 4 years ago
• mistymntncop / CVE-2022-26485

  View on GitHub
  ☆19Jan 31, 2023Updated 3 years ago
• S3cur3Th1sSh1t / OffensiveNim

  View on GitHub
  My experiments in weaponizing Nim (https://nim-lang.org/)
  ☆17Mar 1, 2023Updated 2 years ago
• lwch / crpc

  View on GitHub
  golang rpc框架，支持数据加密传输
  ☆13Jan 19, 2026Updated 3 weeks ago
• code-scan / DirGo

  View on GitHub
  Dirfuzz by golang
  ☆15Feb 28, 2023Updated 2 years ago
• safe6Sec / tp3

  View on GitHub
  tp3注入总结
  ☆19Jan 6, 2022Updated 4 years ago
• EspressoCake / PPLDump_BOF

  View on GitHub
  A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.
  ☆143Sep 24, 2021Updated 4 years ago
• iammaguire / Gotato

  View on GitHub
  Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.
  ☆115Jun 7, 2021Updated 4 years ago
• t3hbb / NSGenCS

  View on GitHub
  Extendable payload obfuscation and delivery framework
  ☆146Nov 4, 2022Updated 3 years ago
• nettitude / RunPE

  View on GitHub
  C# Reflective loader for unmanaged binaries.
  ☆447Jan 25, 2023Updated 3 years ago
• rxwx / chlonium

  View on GitHub
  Chromium Cookie import / export tool
  ☆310Jun 20, 2023Updated 2 years ago
• mttaggart / quasar

  View on GitHub
  quASAR: ASAR manipulation made easy
  ☆38Sep 7, 2022Updated 3 years ago
• joe-desimone / patriot

  View on GitHub
  ☆153Jul 31, 2022Updated 3 years ago