Alternatives and similar repositories for SetupHijack

Users that are interested in SetupHijack are comparing it to the libraries listed below

• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆280Updated 4 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆161Updated 5 months ago
• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆289Updated last month
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆138Updated 5 months ago
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆292Updated 4 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 6 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆122Updated 5 months ago
• 0xNinjaCyclone / AsmLdr
  Dynamic shellcode loader with sophisticated evasion capabilities
  ☆282Updated 4 months ago
• rad9800 / byor
  ☆163Updated 7 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆123Updated 9 months ago
• voidvxvi / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆136Updated last year
• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆142Updated last year
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated last year
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆177Updated last year
• 3lp4tr0n / SessionHop
  Windows Session Hijacking via COM
  ☆335Updated last month
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆268Updated 4 months ago
• sensepost / pipetap
  A Windows Named Pipe Multi-tool / Proxy
  ☆287Updated 2 months ago
• andreisss / Remote-DLL-Injection-with-Timer-based-Shellcode-Execution
  Remote DLL Injection with Timer-based Shellcode Execution
  ☆153Updated 6 months ago
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆150Updated 4 months ago
• dis0rder0x00 / DbgNexum
  Shellcode injection using the Windows Debugging API
  ☆164Updated last month
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• xM0kht4r / AV-EDR-Killer
  AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)
  ☆176Updated 2 weeks ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆214Updated last year
• OtterHacker / Hooker
  ☆108Updated last year
• TwoSevenOneT / EDRStartupHinder
  EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.
  ☆180Updated 3 weeks ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆125Updated 7 months ago
• loosehose / SilentButDeadly
  SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connecti…
  ☆432Updated 3 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆205Updated last year
• SaadAhla / dark-kill
  A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Cal…
  ☆254Updated 7 months ago