Alternatives and similar repositories for r0ak

Users that are interested in r0ak are comparing it to the libraries listed below

• Microwave89 / createuserprocess

  View on GitHub
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆89Nov 9, 2015Updated 10 years ago
• rbapat / KernelInjector

  View on GitHub
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆38Dec 10, 2018Updated 7 years ago
• HFaeiro / Remote-Admin-Tool

  View on GitHub
  Simple remote administration tool. Written in c++ and MASM.
  ☆18May 16, 2018Updated 7 years ago
• SamuelTulach / vmcheck

  View on GitHub
  ☆23Oct 28, 2020Updated 5 years ago
• ionescu007 / r0ak

  View on GitHub
  ☆34Sep 24, 2018Updated 7 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• NtRaiseHardError / NINA

  View on GitHub
  NINA: No Injection, No Allocation x64 Process Injection Technique
  ☆227Jun 9, 2020Updated 5 years ago
• 0xcpu / dijuno

  View on GitHub
  POC for a race condition exploit using directory junctions in Windows
  ☆17Apr 26, 2020Updated 5 years ago
• DimopoulosElias / Primitives

  View on GitHub
  ☆31Jul 27, 2020Updated 5 years ago
• DownWithUp / DynamicKernelShellcode

  View on GitHub
  An example of how x64 kernel shellcode can dynamically find and use APIs
  ☆104May 14, 2020Updated 5 years ago
• JustasMasiulis / wow64pp

  View on GitHub
  A modern c++ implementation of windows heavens gate
  ☆244Sep 19, 2020Updated 5 years ago
• x-super-rat / x-rat

  View on GitHub
  ☆10Aug 16, 2019Updated 6 years ago
• decay88 / WinXRunPE-x86_x64

  View on GitHub
  Two C# RunPE's capable of x86 and x64 injections
  ☆11Dec 2, 2018Updated 7 years ago
• redplait / pexphide

  View on GitHub
  PoC for hiding PE exports
  ☆67Dec 19, 2020Updated 5 years ago
• JustasMasiulis / nt_wrapper

  View on GitHub
  A wrapper library around native windows sytem APIs
  ☆447Feb 2, 2021Updated 5 years ago
• h4xu3lyn / NTLib

  View on GitHub
  Headers for linking your software with ntdll.dll
  ☆15Nov 4, 2020Updated 5 years ago
• OSRDrivers / kmexts

  View on GitHub
  Simple driver to register all available process, thread, image, Registry, and Object callbacks
  ☆124Oct 5, 2017Updated 8 years ago
• JaanusKaapPublic / BlogHyperV

  View on GitHub
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆57Jun 21, 2020Updated 5 years ago
• IgorKorkin / AllMemPro

  View on GitHub
  AllMemPro
  ☆46Jan 15, 2018Updated 8 years ago
• btbd / umap

  View on GitHub
  UEFI bootkit for driver manual mapping
  ☆583Jan 1, 2024Updated 2 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• 0xcpu / WinAltSyscallHandler

  View on GitHub
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆239Nov 6, 2019Updated 6 years ago
• vmcall / MapDetection

  View on GitHub
  Detect manualmapped images remotely, without hassle
  ☆152Nov 3, 2017Updated 8 years ago
• HoShiMin / Avanguard

  View on GitHub
  The Win32 Anti-Intrusion Library
  ☆213May 30, 2019Updated 6 years ago
• hasherezade / module_overloading

  View on GitHub
  A more stealthy variant of "DLL hollowing"
  ☆363Mar 8, 2024Updated last year
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• vmcall / owned_alignment

  View on GitHub
  Hooking kernel functions by abusing alignment
  ☆248Jan 5, 2021Updated 5 years ago
• 0xMegaByte / COM-Explained

  View on GitHub
  ☆26Sep 29, 2022Updated 3 years ago
• RedSiege / SqlClient

  View on GitHub
  POC for .NET mssql client for accessing database data through beacon
  ☆64Sep 12, 2023Updated 2 years ago
• Professor-plum / Reflective-Driver-Loader

  View on GitHub
  ☆409Mar 1, 2017Updated 8 years ago
• btbd / wpp

  View on GitHub
  Intercepting DeviceControl via WPP
  ☆138Nov 18, 2019Updated 6 years ago
• HoShiMin / EnjoyTheRing0

  View on GitHub
  Шаблон полнофункционального драйвера и обёртки над ядерным API
  ☆114Aug 28, 2016Updated 9 years ago
• passthehashbrowns / hook-integrity-checks

  View on GitHub
  ☆24May 28, 2021Updated 4 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• JustasMasiulis / memory_signature

  View on GitHub
  A small wrapper class providing an unified interface to search for various memory signatures
  ☆79Feb 2, 2022Updated 4 years ago
• avakar / vcrtl

  View on GitHub
  C++ Exceptions in Windows Drivers
  ☆221Dec 21, 2020Updated 5 years ago
• 0xcpu / ExecutiveCallbackObjects

  View on GitHub
  Research on Windows Kernel Executive Callback Objects
  ☆315Feb 22, 2020Updated 5 years ago
• KelvinMsft / NoTruth

  View on GitHub
  ☆99Oct 6, 2017Updated 8 years ago
• forrest-orr / phantom-dll-hollower-poc

  View on GitHub
  Phantom DLL hollowing PoC
  ☆370May 23, 2022Updated 3 years ago