Alternatives and similar repositories for Protect_Loader:

Users that are interested in Protect_Loader are comparing it to the libraries listed below

• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆105Updated 4 months ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆72Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆63Updated 8 months ago
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆78Updated 2 years ago
• rbmm / SC
  shell code example
  ☆46Updated last week
• HulkOperator / AuthStager
  ☆54Updated 6 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated 10 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆76Updated 2 months ago
• JayGLXR / RustyMirage
  A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆32Updated last month
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆44Updated last year
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆76Updated 2 weeks ago
• almounah / superdeye
  Indirect Syscall with TartarusGate Approach in Go
  ☆119Updated 4 months ago
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆119Updated this week
• ngn13 / shrk
  LKM rootkit for modern kernels, with DNS C2 and a simple web interface
  ☆65Updated 2 weeks ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆74Updated 8 months ago
• S12cybersecurity / NinjaInjector
  Classic Process Injection with Memory Evasion Techniques implemantation
  ☆69Updated last year
• ameenalkurdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆63Updated 2 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated 8 months ago
• S3N4T0R-0X0 / Hunter
  Охотник (Hunter) is a simple Adversary Simulation tool developed for achieves stealth through API unhooking, direct and indirect syscalls…
  ☆38Updated this week
• NtDallas / Ulfberht
  Shellcode loader
  ☆81Updated 5 months ago
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆89Updated 10 months ago
• JayGLXR / Rusty-Stardust
  A modern Rust implementation of the original Stardust project, providing a sophisticated 32/64-bit shellcode template that features posit…
  ☆53Updated last month
• susMdT / ForsHops
  ForsHops
  ☆41Updated last month
• 0xRedpoll / SignalKeyBOF
  BOF to decrypt Signal Desktop chat logs
  ☆65Updated 2 months ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆77Updated last year
• silentwarble / Hannibal
  Mythic C2 Agent written in x64 PIC C
  ☆71Updated 2 months ago
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆55Updated 3 months ago
• 0xRedpoll / WhatsAppKeyBOF
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆74Updated last month
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated 9 months ago
• EvilBytecode / Shellcode-Loader
  This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.
  ☆60Updated this week