Alternatives and similar repositories for SignatureGate

Users that are interested in SignatureGate are comparing it to the libraries listed below

• Octoberfest7 / DropSpawn_BOF
  CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
  ☆269Updated 2 years ago
• WKL-Sec / dcomhijack
  Lateral Movement Using DCOM and DLL Hijacking
  ☆294Updated 2 years ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆180Updated 6 months ago
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆238Updated last year
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆203Updated last year
• Mr-Un1k0d3r / AMSI-ETW-Patch
  Patch AMSI and ETW
  ☆240Updated last year
• decoder-it / ADCSCoercePotato
  ☆226Updated last year
• klezVirus / NimlineWhispers3
  A tool for converting SysWhispers3 syscalls for use with Nim projects
  ☆146Updated 3 years ago
• Wh04m1001 / CVE-2023-29343
  ☆163Updated 2 years ago
• cpu0x00 / SharpReflectivePEInjection
  reflectively load and execute PEs locally and remotely bypassing EDR hooks
  ☆155Updated last year
• nettitude / ETWHash
  C# POC to extract NetNTLMv1/v2 hashes from ETW provider
  ☆256Updated 2 years ago
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆182Updated last year
• NVISOsecurity / CobaltWhispers
  CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…
  ☆233Updated 2 years ago
• VoldeSec / PatchlessCLRLoader
  .NET assembly loader with patchless AMSI and ETW bypass
  ☆334Updated 2 years ago
• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆238Updated 2 years ago
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆184Updated last year
• eladshamir / RPC-Backdoor
  A basic emulation of an "RPC Backdoor"
  ☆241Updated 2 years ago
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆146Updated last year
• ipSlav / DirtyCLR
  An App Domain Manager Injection DLL PoC on steroids
  ☆173Updated last year
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆148Updated last year
• kleiton0x00 / RemoteShellcodeExec
  Execute shellcode from a remote-hosted bin file using Winhttp.
  ☆234Updated 2 years ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆188Updated 6 months ago
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆110Updated 11 months ago
• Mr-Un1k0d3r / Elevate-System-Trusted-BOF
  ☆158Updated 2 years ago
• Wra7h / SingleDose
  Generate Shellcode Loaders & Injects
  ☆156Updated 2 years ago
• Octoberfest7 / CVE-2023-36874_BOF
  Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
  ☆206Updated last year
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆279Updated 2 years ago
• MzHmO / psexec_noinstall
  Repository contains psexec, which will help to exploit the forgotten pipe
  ☆170Updated 7 months ago
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆163Updated 9 months ago
• nettitude / Tartarus-TpAllocInject
  ☆186Updated last year