Alternatives and similar repositories for anti_defender

Users that are interested in anti_defender are comparing it to the libraries listed below

• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆100Updated 6 months ago
• xelemental / Mal-LNK-Generator
  ☆38Updated 9 months ago
• pulpocaminante / gui-pwn
  GUI-based UAC bypass
  ☆29Updated 11 months ago
• nbaertsch / Shrike
  Hunting and injecting RWX 'mockingjay' DLLs in pure nim
  ☆59Updated last year
• zarkones / ControlSTUDIO
  Adversary Simulation Framework
  ☆38Updated 4 months ago
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆90Updated last year
• bot984397 / eepy
  ☆38Updated 8 months ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆74Updated last year
• OtterHacker / Hooker
  ☆106Updated last year
• HulkOperator / AuthStager
  ☆59Updated last year
• Workday / raw-disk-parser
  A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs
  ☆102Updated 4 months ago
• pard0p / LibWinHttp
  LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…
  ☆40Updated 2 months ago
• D4rthMaulCop / DumpKernel-S1
  A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80
  ☆21Updated 9 months ago
• patrickt2017 / VEHNetLoader
  Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies
  ☆49Updated 6 months ago
• tehstoni / tryharder
  C++ Staged Shellcode Loader with Evasion capabilities.
  ☆99Updated last year
• dis0rder0x00 / stillepost
  Using Chromium-based browsers as a proxy for C2 traffic.
  ☆134Updated last month
• EvilBytecode / HandleHijacker
  HandleHijacker is a low-level Windows utility written in Go that lets you inspect running processes, extract files that processes have op…
  ☆40Updated last week
• Teach2Breach / schtask
  Rust implementation, creating a scheduled task programmatically with user logon trigger.
  ☆47Updated 7 months ago
• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆24Updated 8 months ago
• nbaertsch / PoolProxy
  Proxy function calls through the thread pool with ease
  ☆31Updated 10 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆102Updated 9 months ago
• olafhartong / ETWLocksmith
  A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…
  ☆61Updated 5 months ago
• Offensive-Panda / C2_Elevated_Shell_DLL_Hijcking
  DLL Hijacking and Mock directories technique to bypass Windows UAC security feature and getting high-level privileged reverse shell. Secu…
  ☆44Updated last year
• yo-yo-yo-jbo / commandline_spoofing
  Commandline spoofing on Windows
  ☆89Updated last month
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• mez-0 / citadel
  A Payload Analysis Framework
  ☆112Updated 3 months ago
• Karkas66 / EarlyCascadeImprooved
  an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code
  ☆22Updated 10 months ago
• EvilBytecode / ExitPatcher
  Prevent in-process process termination by patching exit APIs
  ☆62Updated 2 months ago
• Faran-17 / EarlyBird-APC-Injection
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆35Updated 2 years ago
• OffenseTeacher / Steganim
  ☆47Updated 2 years ago