Alternatives and similar repositories for EternalAntirootkit

Users that are interested in EternalAntirootkit are comparing it to the libraries listed below

• HFaeiro / Remote-Admin-Tool
  Simple remote administration tool. Written in c++ and MASM.
  ☆18Updated 7 years ago
• melardev / XeytanWin32-RAT
  WORK IN PROGRESS. RAT written in C++ using Win32 API
  ☆21Updated 5 years ago
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆19Updated 7 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• Darkabode / 0lib
  Zerokit shared code
  ☆17Updated 6 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆15Updated 7 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆22Updated 6 years ago
• mq1n / ForceThreadSuspend
  Windows hidden thread suspend POC with code injection
  ☆12Updated 8 years ago
• zodiacon / AccessMask
  ☆20Updated 6 years ago
• aaaddress1 / Lexa
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Updated 5 years ago
• carlospolop / MalwarePoC
  Windows Malware Probe of Concept
  ☆21Updated 3 years ago
• aaaddress1 / APCInjector-BYPASS-AV
  ☆19Updated 10 years ago
• KbaHaxor / Ammyy-v3
  Ammyy v3 Source Code leak , with ❤️ <3
  ☆40Updated 8 years ago
• d35ha / RunPE
  An example of PE hollowing injection technique
  ☆24Updated 6 years ago
• apriorit / antirootkit-anti-splicer
  The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
  ☆34Updated 8 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
  ☆11Updated 6 years ago
• usertoroot / StealthInject
  This tool allows you to stealthily inject a DLL into a process.
  ☆14Updated 10 years ago
• silentsignal / av-breaking
  Bare Knuckled AV Breaking
  ☆58Updated 6 years ago
• wwh1004 / MethodsMap
  A tool to show the method info at runtime
  ☆13Updated 6 years ago
• John-Yu / Simple_PE_packer
  The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…
  ☆19Updated 7 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆17Updated 6 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆35Updated 7 years ago
• TalBlum / Anti-Disassembly
  A collection of anti disassembly techniques
  ☆19Updated 8 years ago
• SLAUC91 / DLLFinder
  Enumerate the DLLs/Modules using NtQueryVirtualMemory
  ☆32Updated 10 years ago
• gyje / BIOS_Rootkit
  来自Freebuf评论区,一个UEFI马.
  ☆49Updated 8 years ago
• OSRDrivers / deleteex
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Updated 7 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• zwclose / veeamon
  ☆16Updated 5 years ago
• roman-allen / FSFilterDriver
  Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)
  ☆10Updated 2 years ago
• umair-7x / Remote-Access-Tool
  Access windows machine remotely on HTTP
  ☆12Updated 4 years ago