Alternatives and similar repositories for hazmat5

Users that are interested in hazmat5 are comparing it to the libraries listed below

• OrShazam / ChainEngine

  View on GitHub
  automates exploits using ROP chains, using ntdll-scraper
  ☆16May 26, 2022Updated 3 years ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• cirosec / warbird-demos

  View on GitHub
  ☆44Nov 7, 2024Updated last year
• Adepts-Of-0xCC / SnoopyOwl

  View on GitHub
  ☆48May 12, 2021Updated 4 years ago
• aniqfakhrul / certifried.py

  View on GitHub
  ☆16May 20, 2022Updated 3 years ago
• ea / xfg_analyzer

  View on GitHub
  A Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes
  ☆16Feb 7, 2024Updated 2 years ago
• Slowerzs / CryptDecryptMemory

  View on GitHub
  ☆31Dec 5, 2024Updated last year
• therealdreg / cgaty

  View on GitHub
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Aug 11, 2023Updated 2 years ago
• diversenok / NtUtilsUI

  View on GitHub
  VCL-based UI components for system tools that use NtUtilsLibrary
  ☆21Nov 20, 2025Updated 2 months ago
• SolomonSklash / netntlm

  View on GitHub
  A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
  ☆37Jul 27, 2021Updated 4 years ago
• lowleveldesign / comon

  View on GitHub
  A WinDbg extension to trace COM interactions
  ☆131Aug 14, 2025Updated 6 months ago
• cocomelonc / 2022-04-02-malware-injection-18

  View on GitHub
  Find kernel32 base and API addresses. Simple C++ implementation
  ☆24Apr 7, 2022Updated 3 years ago
• GetRektBoy724 / SysGate

  View on GitHub
  One gate to all syscalls!
  ☆23Mar 12, 2022Updated 3 years ago
• AzAgarampur / CorsairLLeak

  View on GitHub
  Corsair LL Access driver abuse
  ☆24Apr 16, 2021Updated 4 years ago
• jthuraisamy / ioctlpus

  View on GitHub
  ☆130Sep 14, 2020Updated 5 years ago
• morRubin / PrtToCert

  View on GitHub
  ☆28Aug 19, 2020Updated 5 years ago
• pathtofile / PPLRunner

  View on GitHub
  Run Processes as PPL with ELAM
  ☆175Mar 17, 2022Updated 3 years ago
• arachsys / pocketcrypt

  View on GitHub
  Lightweight cryptography
  ☆14Nov 7, 2022Updated 3 years ago
• uknowsec / SSL

  View on GitHub
  StenographyShellcodeLoader
  ☆43Sep 8, 2020Updated 5 years ago
• Allevon412 / BreadManModuleStomping

  View on GitHub
  ☆44Oct 16, 2023Updated 2 years ago
• xpn / ntlmquic

  View on GitHub
  POC tools for exploring SMB over QUIC protocol
  ☆130Apr 6, 2022Updated 3 years ago
• ch3rn0byl / CVE-2021-21551

  View on GitHub
  ☆25May 21, 2021Updated 4 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• hasherezade / libpeconv_tpl

  View on GitHub
  A ready-made template for a project based on libpeconv.
  ☆51Oct 31, 2025Updated 3 months ago
• Dump-GUY / Python3---Binary-Data-Manipulation

  View on GitHub
  Python 3 - Manipulation and conversation with different data type (Bytes operations)
  ☆28Feb 15, 2022Updated 4 years ago
• audibleblink / davil

  View on GitHub
  leaking net-ntlm with webdav
  ☆26Feb 23, 2021Updated 4 years ago
• joe-desimone / rep-research

  View on GitHub
  ☆79Aug 5, 2024Updated last year
• PwCUK-CTO / BinaryNinja_shellcodehashes

  View on GitHub
  Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja
  ☆11Jul 24, 2024Updated last year
• ByteWhite1x1 / DriverBase

  View on GitHub
  A simple C++ driver base with KD data block
  ☆11Jun 25, 2022Updated 3 years ago
• jonny-jhnson / ProcCallback

  View on GitHub
  An example of how a driver can register a handle creation callback.
  ☆16Jun 12, 2023Updated 2 years ago
• WMSR / utils

  View on GitHub
  ☆11Jun 9, 2020Updated 5 years ago
• SamuelTulach / GetDeviceInterfacesMemoryLeak

  View on GitHub
  Small memory leak PoC that is happening in IopGetDeviceInterfaces
  ☆25Oct 18, 2020Updated 5 years ago
• Wh04m1001 / MSIExecEoP

  View on GitHub
  Arbitrary File Delete in Windows Installer before 10.0.19045.2193
  ☆30Nov 6, 2022Updated 3 years ago
• tyranid / WindowsRpcClients

  View on GitHub
  This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…
  ☆284May 14, 2020Updated 5 years ago
• alfarom256 / CVE-2022-3699

  View on GitHub
  Lenovo Diagnostics Driver EoP - Arbitrary R/W
  ☆177Dec 5, 2022Updated 3 years ago
• t3hbb / citrixphishlet

  View on GitHub
  Citrix Phishlet
  ☆24Feb 2, 2021Updated 5 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• yardenshafir / InformationClasses

  View on GitHub
  Documenting system information classes and their uses
  ☆56Oct 18, 2021Updated 4 years ago
• nlykkei / llvm-ir-obfuscation

  View on GitHub
  Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.
  ☆76Nov 12, 2019Updated 6 years ago