Alternatives and similar repositories for HelloWorldXll

Users that are interested in HelloWorldXll are comparing it to the libraries listed below

• Cobalt-Strike / ProxyDLLExample
  code for the Proxy DLL example blog post
  ☆62Updated 3 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆113Updated 4 years ago
• Maff1t / WindowsPermsPoC
  A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows
  ☆53Updated 4 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• oriolOrnaque / VBAObfuscator
  VBA Macro obfuscator
  ☆13Updated 4 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• NVISOsecurity / DInvisibleRegistry
  DInvisibleRegistry
  ☆82Updated 4 years ago
• ctxis / DynamicWrapperEx
  x64 Registration-Free In-Process COM Automation Server.
  ☆48Updated 2 years ago
• plackyhacker / CmdLineSpoofer
  How to spoof the command line when spawning a new process from C#.
  ☆107Updated 3 years ago
• FuzzySecurity / Dendrobate
  Managed code hooking template.
  ☆133Updated 3 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆69Updated 4 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• ch4meleon / vba_obfuscator
  VBA Obfuscator which I used for obfuscating vba codes to embed into Microsoft Word document while I'm doing some signature bypass testing…
  ☆32Updated 5 years ago
• RedLectroid / APIunhooker
  C++ function that will automagically unhook a specified Windows API
  ☆63Updated 4 years ago
• boku7 / HellsGatePPID
  Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process
  ☆103Updated 2 years ago
• tomcarver16 / AmsiHook
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆66Updated 5 years ago
• S3cur3Th1sSh1t / SyscallAmsiScanBufferBypass
  AmsiScanBufferBypass using D/Invoke
  ☆135Updated 4 years ago
• med0x2e / vba2clr
  Running .NET from VBA
  ☆147Updated 2 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆79Updated 4 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆49Updated 4 years ago
• 3xpl01tc0d3r / Minidump
  The program is designed to dump full memory of the process by specifing process name or process id.
  ☆39Updated 6 years ago
• N4kedTurtle / LocalDllParse
  ☆55Updated 3 years ago
• mgeeky / VisualBasicObfuscator
  Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.
  ☆137Updated 3 years ago
• jackullrich / universal-syscall-64
  Resolve syscall numbers at runtime for all Windows versions.
  ☆61Updated 8 months ago
• CERTCC / privesc
  Process Monitor filter for finding privilege escalation vulnerabilities on Windows
  ☆79Updated 4 years ago
• ambray / ProcessHollowing
  Simple Process Hollowing in C#
  ☆69Updated 7 years ago
• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆80Updated 4 years ago
• S3cur3Th1sSh1t / RDPThiefInject
  RDPThief donut shellcode inject into mstsc
  ☆88Updated 4 years ago
• crummie5 / Freshycalls_PoC
  A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯
  ☆39Updated 4 years ago
• TheWover / donut-demos
  Demos of Donut used in conferences, etc. Mostly for my use, but free for others to use as a reference.
  ☆32Updated 5 years ago