Alternatives and similar repositories for SetupHijack

Users that are interested in SetupHijack are comparing it to the libraries listed below

• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆266Updated 2 months ago
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆287Updated 2 months ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆160Updated 3 months ago
• rad9800 / byor
  ☆158Updated 5 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆153Updated 2 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆202Updated 9 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆120Updated 7 months ago
• 0xNinjaCyclone / AsmLdr
  Dynamic shellcode loader with sophisticated evasion capabilities
  ☆257Updated last month
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆134Updated 3 months ago
• voidvxvi / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆132Updated 11 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆170Updated 3 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆162Updated last year
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆146Updated 2 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆211Updated 10 months ago
• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆140Updated 10 months ago
• dmcxblue / WSL-Payloads
  A small How-To on creating your own weaponized WSL file
  ☆119Updated 4 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 8 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆119Updated 2 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆125Updated 5 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆232Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆159Updated 11 months ago
• andreisss / Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
  Remote DLL Injection with Timer-based Shellcode Execution
  ☆151Updated 4 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques
  ☆246Updated 2 months ago
• whokilleddb / ASPxecute
  Execute shellcode via ASPNET compiler
  ☆58Updated last month
• 0xJs / BlockEDRTraffic
  Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …
  ☆252Updated 2 months ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆250Updated 11 months ago
• 0xflux / Wyrm
  The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
  ☆309Updated last week
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆130Updated 3 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆164Updated 10 months ago