Alternatives and similar repositories for SetupHijack

Users that are interested in SetupHijack are comparing it to the libraries listed below

• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆279Updated 4 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆160Updated 5 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆281Updated last month
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated 11 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 5 months ago
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆331Updated last month
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆291Updated 4 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆138Updated 5 months ago
• 0xNinjaCyclone / AsmLdr
  Dynamic shellcode loader with sophisticated evasion capabilities
  ☆280Updated 4 months ago
• rad9800 / byor
  ☆163Updated 7 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆206Updated 5 months ago
• warpnet / COM-Fuzzer
  Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…
  ☆154Updated 2 months ago
• andreisss / Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
  Remote DLL Injection with Timer-based Shellcode Execution
  ☆152Updated 6 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆122Updated 5 months ago
• voidvxvi / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆136Updated last year
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆265Updated 4 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆150Updated 4 months ago
• mez-0 / citadel
  A Payload Analysis Framework
  ☆114Updated 3 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆124Updated 7 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆166Updated last year
• loosehose / SilentButDeadly
  SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…
  ☆431Updated 2 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆123Updated 9 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆205Updated last year
• jakobfriedl / conquest
  Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
  ☆255Updated last week
• sensepost / pipetap
  A Windows Named Pipe Multi-tool / Proxy
  ☆283Updated last month
• TwoSevenOneT / EDRStartupHinder
  EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.
  ☆172Updated 3 weeks ago
• 0xJs / BlockEDRTraffic
  Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …
  ☆257Updated 4 months ago