Alternatives and similar repositories for HelloWorldXll

Users that are interested in HelloWorldXll are comparing it to the libraries listed below

• Cobalt-Strike / ProxyDLLExample
  code for the Proxy DLL example blog post
  ☆62Updated 4 years ago
• p3nt4 / RunDLL.Net
  Execute .Net assemblies using Rundll32.exe
  ☆114Updated 4 years ago
• NVISOsecurity / DInvisibleRegistry
  DInvisibleRegistry
  ☆82Updated 5 years ago
• oriolOrnaque / VBAObfuscator
  VBA Macro obfuscator
  ☆13Updated 5 years ago
• Maff1t / WindowsPermsPoC
  A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows
  ☆52Updated 4 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• RedLectroid / APIunhooker
  C++ function that will automagically unhook a specified Windows API
  ☆62Updated 5 years ago
• tomcarver16 / AmsiHook
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆67Updated 5 years ago
• plackyhacker / CmdLineSpoofer
  How to spoof the command line when spawning a new process from C#.
  ☆110Updated 4 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆70Updated 4 years ago
• jackullrich / universal-syscall-64
  Resolve syscall numbers at runtime for all Windows versions.
  ☆61Updated last year
• CERTCC / privesc
  Process Monitor filter for finding privilege escalation vulnerabilities on Windows
  ☆79Updated 4 years ago
• FuzzySecurity / Dendrobate
  Managed code hooking template.
  ☆134Updated 4 years ago
• dtrizna / DInvoke_PoC
  Hardened Proof of Concept of D/Invoke Process Injection malware
  ☆42Updated 5 years ago
• N4kedTurtle / LocalDllParse
  ☆55Updated 4 years ago
• med0x2e / vba2clr
  Running .NET from VBA
  ☆149Updated 2 years ago
• med0x2e / NoAmci
  Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
  ☆218Updated 5 years ago
• S3cur3Th1sSh1t / SyscallAmsiScanBufferBypass
  AmsiScanBufferBypass using D/Invoke
  ☆136Updated 4 years ago
• bitsadmin / revbshell
  ReVBShell - Reverse VBS Shell
  ☆83Updated 3 months ago
• topotam / SharpWeb
  .NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.
  ☆22Updated 7 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 4 years ago
• ch4meleon / vba_obfuscator
  VBA Obfuscator which I used for obfuscating vba codes to embed into Microsoft Word document while I'm doing some signature bypass testing…
  ☆32Updated 5 years ago
• thesp0nge / shellerate
  A shellcode generator with encryption, encoding and polymorphism facilities built-in
  ☆34Updated 3 years ago
• TheWover / donut-demos
  Demos of Donut used in conferences, etc. Mostly for my use, but free for others to use as a reference.
  ☆32Updated 6 years ago
• PorLaCola25 / TransactedSharpMiniDump
  Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…
  ☆71Updated 5 years ago
• S3cur3Th1sSh1t / SharpByeBear
  AppXSVC Service race condition - privilege escalation
  ☆29Updated 6 years ago
• rmdavy / VBAFunctionPointers
  ☆19Updated 5 years ago
• S3cur3Th1sSh1t / RDPThiefInject
  RDPThief donut shellcode inject into mstsc
  ☆88Updated 4 years ago
• rasta-mouse / MinHook.NET
  A C# port of the MinHook API hooking library
  ☆56Updated 3 years ago
• boku7 / HellsGatePPID
  Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process
  ☆107Updated 2 years ago