An advanced C++ framework for WoW64 Heaven’s Gate + Indirect Syscall, X64 Hell's Gate, and EDR evasion. Seamlessly load 64-bit kernel32 and bypass user-land hooks.
☆22May 8, 2026Updated 5 months ago
Alternatives and similar repositories for NtExt
Users that are interested in NtExt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python exploit for ResetNightmare☆14Aug 6, 2026Updated 3 months ago
- 以C++编写的安卓进程内存修改工具☆17Feb 13, 2026Updated 8 months ago
- ☆16Jun 27, 2024Updated 2 years ago
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 6 months ago
- An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.☆35May 8, 2026Updated 5 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Trace Explorer for Reverse Engineers☆28Nov 5, 2025Updated last year
- ☆13Oct 12, 2025Updated last year
- IDA 9.X Python plugin for ops on VTables☆24Sep 9, 2026Updated last month
- IDA Pro plugin for transferring analysis data between different versions of the same binary☆22Oct 24, 2026Updated 2 weeks ago
- Unix Process hollowing in rust☆22Dec 16, 2024Updated last year
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆49Jan 25, 2025Updated last year
- Proxy function calls through the thread pool with ease☆32Feb 27, 2025Updated last year
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- Anti-Rootkit Tool for Windows☆16Mar 24, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Zyrox: LLVM based, compile-time obfuscator plugin.☆101Feb 21, 2026Updated 8 months ago
- ☆20Feb 22, 2021Updated 5 years ago
- This repo contains useful scripts that AI created for me which I would have been too lazy for☆108Jun 30, 2026Updated 4 months ago
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- DLL Hijacking Detection Tool☆18Jun 21, 2025Updated last year
- A powerful shell script for creating custom WSL (Windows Subsystem for Linux) distributions with embedded payloads.☆73Nov 16, 2025Updated 11 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆52May 5, 2025Updated last year
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- Use PKfail to install UEFI Bootkits☆24Aug 16, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆23Oct 15, 2024Updated 2 years ago
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- Rust Artifact Kit is a sophisticated research framework demonstrating advanced evasion techniques through Rust-based artifact loaders.☆14Sep 15, 2025Updated last year
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- Offensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.☆16Sep 19, 2026Updated last month
- Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.☆47Aug 16, 2024Updated 2 years ago
- A high-performance Rust bridge to Unity's IL2CPP runtime — resolve types, invoke methods, and manipulate Unity objects from native code☆20Jul 14, 2026Updated 3 months ago
- SysTrace - Linux System Call Monitor using PTRACE API , It traces system calls, monitors process, file, network, and memory activity, det…☆25Sep 1, 2026Updated 2 months ago
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆34Oct 15, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Arbitrary file read exploit for the Windows UPnP Device Host service.☆20Jun 5, 2026Updated 5 months ago
- ☆13Aug 29, 2025Updated last year
- A hoontr must hoont☆110Nov 27, 2025Updated 11 months ago
- Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extra…☆28Mar 9, 2026Updated 7 months ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆81Feb 17, 2026Updated 8 months ago
- IDA plugin for YARA signature creation☆24Nov 30, 2025Updated 11 months ago
- A comprehensive technical guide with an in-depth analysis of the Windows process lifecycle, from initial user-mode API calls through kern…☆38Nov 26, 2025Updated 11 months ago