Alternatives and similar repositories for lolmil

Users that are interested in lolmil are comparing it to the libraries listed below

• Teach2Breach / noldr
  Dynamically resolve API function addresses at runtime in a secure manner.
  ☆72Updated last month
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆42Updated last year
• kleiton0x00 / RtlHijack
  Alternative Read and Write primitives using Rtl* functions the unintended way.
  ☆78Updated 3 months ago
• Print3M / epic
  Extensible Position Independent Code – shellcode (C/C++) development and building toolkit designed for developer experience, predictabili…
  ☆100Updated last month
• 0xjbb / vehspoof
  Callstack spoofing using a VEH because VEH all the things.
  ☆23Updated 8 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆61Updated last year
• bitdefender / hypervinject-poc
  ☆52Updated 4 months ago
• nbaertsch / nimHeapEnc
  Heap encryption in Nim
  ☆20Updated last year
• bot984397 / eepy
  ☆38Updated 7 months ago
• pard0p / LibWinHttp
  LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…
  ☆41Updated last month
• JayGLXR / RustySpy
  A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …
  ☆19Updated 9 months ago
• hwbp / LazyHook
  Evade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.
  ☆72Updated this week
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆51Updated 2 years ago
• HulkOperator / Spoof-RetAddr
  ☆34Updated last year
• zero2504 / FrostLock-Injection
  FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…
  ☆41Updated 8 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆98Updated last year
• winterknife / SILVERPICK
  Windows User-Mode Shellcode Development Framework (WUMSDF)
  ☆117Updated 3 weeks ago
• zzhsec / NlsCodeInjectionThroughRegistry
  Dll injection through code page id modification in registry. Based on jonas lykk research
  ☆17Updated 3 years ago
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆67Updated 9 months ago
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆91Updated 5 months ago
• JayGLXR / Rusty-Stardust
  A modern Rust implementation of the original Stardust project, providing a sophisticated 32/64-bit shellcode template that features posit…
  ☆60Updated 8 months ago
• whokilleddb / funcshenanigans
  A bunch of shenanigans using functions, VEH and more
  ☆37Updated 6 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• lap1nou / CLR_Heap_encryption
  ☆100Updated 2 years ago
• silentwarble / hbin_template
  Post-Ex BOF tooling for Hannibal
  ☆24Updated last year
• C5Hackr / c_syscalls
  https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.
  ☆34Updated last year
• Teach2Breach / snapinject_rs
  A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …
  ☆50Updated 10 months ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated 2 months ago
• mdsecactivebreach / functionpeekaboo
  ☆57Updated last month
• 0xTriboulet / scepter-rs
  A hacky way of getting cross-arch/platform support in Cobalt Strike
  ☆38Updated 3 months ago