Alternatives and similar repositories for SetupHijack

Users that are interested in SetupHijack are comparing it to the libraries listed below

• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆241Updated last month
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆141Updated last month
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆155Updated 2 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆127Updated last month
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆279Updated last month
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆160Updated 7 months ago
• rad9800 / byor
  ☆157Updated 4 months ago
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆126Updated 9 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆120Updated 6 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆162Updated 10 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆201Updated 8 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆170Updated 2 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆136Updated 3 weeks ago
• OtterHacker / Hooker
  ☆108Updated 11 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆123Updated 3 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆99Updated 4 months ago
• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆141Updated 9 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆117Updated last month
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆201Updated 7 months ago
• woldann / NThread
  Stealthy x64 thread manipulation library for calling functions inside target processes without creating remote threads or installing hook…
  ☆55Updated last week
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆70Updated 5 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆47Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆160Updated 10 months ago
• andreisss / Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
  Remote DLL Injection with Timer-based Shellcode Execution
  ☆145Updated 3 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆210Updated 9 months ago
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆50Updated 5 months ago
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆249Updated last month
• 0xflux / Wyrm
  The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
  ☆236Updated this week
• Maldev-Academy / AlphabeticalPolyShellGen
  Generate an Alphabetical Polymorphic Shellcode
  ☆126Updated 2 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆101Updated 6 months ago