Alternatives and similar repositories for SharpDllLoader:

Users that are interested in SharpDllLoader are comparing it to the libraries listed below

• advanced-threat-research / DotDumper
  An automatic unpacker and logger for DotNet Framework targeting files
  ☆252Updated last year
• malwarefrank / dnfile
  Parse .NET executable files.
  ☆76Updated 2 months ago
• jeremybeaume / packer-tutorial
  Files for the packer tutorial
  ☆72Updated 4 years ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆114Updated 2 years ago
• hasherezade / antianalysis_demos
  Set of antianalysis techniques found in malware
  ☆132Updated last year
• pan-unit42 / dotnetfile
  ☆105Updated last year
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆151Updated last year
• jackullrich / syscall-detect
  PoC capable of detecting manual syscalls from usermode.
  ☆193Updated 4 months ago
• synacktiv / dotNIET
  ☆104Updated 3 years ago
• hasherezade / pe_unmapper
  Small tool to convert beteween the PE alignments (raw and virtual).
  ☆87Updated 2 years ago
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆311Updated 6 months ago
• d35ha / xLogger
  Simple windows API logger
  ☆101Updated 5 years ago
• mandiant / jitm
  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
  ☆52Updated 4 years ago
• PI-Defender / pi-defender
  Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
  ☆152Updated 2 years ago
• idan1288 / ProcessHollowing32-64
  Process Hollowing for 32 bit and 64 bit
  ☆79Updated 7 years ago
• airbus-cert / comida
  An IDA Plugin that help analyzing module that use COM
  ☆208Updated last year
• enkomio / RunDotNetDll
  A simple utility to list all methods of a given .NET Assembly and to invoke them
  ☆73Updated 3 years ago
• LloydLabs / Windows-API-Hashing
  This is a simple example and explanation of obfuscating API resolution via hashing
  ☆235Updated 4 years ago
• repnz / autochk-rootkit
  Reverse engineered source code of the autochk rootkit
  ☆201Updated 5 years ago
• etormadiv / HostingCLR
  Executing a .NET Assembly from C++ in Memory (CLR Hosting)
  ☆192Updated 8 years ago
• repnz / apc-research
  APC Internals Research Code
  ☆164Updated 4 years ago
• hasherezade / masm_shc
  A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
  ☆174Updated 4 months ago
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆116Updated 9 months ago
• therealdreg / DbgChild
  Debug Child Process Tool (auto attach)
  ☆281Updated last year
• aaaddress1 / wowGrail
  PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)
  ☆103Updated 3 years ago
• LAC-Japan / IDA_Plugin_AntiDebugSeeker
  Automatically identify and extract potential anti-debugging techniques used by malware.
  ☆153Updated 4 months ago
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆209Updated 5 years ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆115Updated this week
• xuanxuan0 / TiEtwAgent
  PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
  ☆271Updated 4 years ago
• Signal-Labs / IOCTLDump
  ☆143Updated last year