Alternatives and similar repositories for bin2shellcode

Users that are interested in bin2shellcode are comparing it to the libraries listed below

• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆126Updated last year
• rasta-mouse / SpawnWith
  ☆109Updated 9 months ago
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆102Updated 8 months ago
• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆62Updated 11 months ago
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆102Updated last year
• cpu0x00 / SharpReflectivePEInjection
  reflectively load and execute PEs locally and remotely bypassing EDR hooks
  ☆161Updated last year
• almounah / go-buena-clr
  Good CLR Host with Native patchless AMSI Bypass
  ☆96Updated 7 months ago
• susMdT / SharpAgent
  C# havoc implant
  ☆101Updated 2 years ago
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆85Updated 2 years ago
• casp3r0x0 / LoaderGate
  a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.
  ☆89Updated 6 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆156Updated 2 years ago
• securifybv / BOFRyptor
  ☆122Updated 2 years ago
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆118Updated last year
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆87Updated 9 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆125Updated 2 years ago
• cybersectroll / SharpPersistSD
  ☆91Updated last year
• CultCornholio / RedTeamTP
  ☆86Updated 6 months ago
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆117Updated 4 months ago
• NtDallas / BOF_Spawn
  Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames
  ☆134Updated 2 weeks ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆83Updated last year
• ricardojoserf / SAMDump
  Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation
  ☆194Updated 3 weeks ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆98Updated 7 months ago
• Maldev-Academy / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆53Updated 6 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆140Updated 3 weeks ago
• 0xthirteen / WMI_Proc_Dump
  Dump processes over WMI with MSFT_MTProcess
  ☆78Updated 2 months ago
• nullsection / Sneaky-DLL-Stager
  Reasonably undetected shellcode stager and executer.
  ☆37Updated 6 months ago
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆99Updated 4 months ago
• decoder-it / KrbRelayEx-RPC
  ☆197Updated 8 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆189Updated last year