Alternatives and similar repositories for Zone

Users that are interested in Zone are comparing it to the libraries listed below

• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆106Updated last year
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆101Updated last month
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆121Updated last year
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated 2 months ago
• rbmm / SC_DEMO
  ☆123Updated last week
• xforcered / Being-A-Good-CLR-Host
  ☆135Updated 11 months ago
• Maldev-Academy / LsassHijackingViaReg
  Injecting DLL into LSASS at boot
  ☆155Updated 7 months ago
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆206Updated last month
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆166Updated last year
• Kudaes / Eclipse
  Activation Context Hijack
  ☆169Updated 4 months ago
• NtDallas / Draugr
  BOF with Synthetic Stackframe
  ☆200Updated last month
• klezVirus / Moonwalk--
  Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption
  ☆98Updated this week
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆234Updated last year
• 0xJs / BYOVD_read_write_primitive
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆198Updated 3 months ago
• zero2504 / COMouflage
  COM-based DLL Surrogate Injection
  ☆137Updated last week
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆277Updated last year
• CheckPointSW / VectoredOverloading
  ☆75Updated last week
• winterknife / SILVERPICK
  Windows User-Mode Shellcode Development Framework (WUMSDF)
  ☆119Updated last month
• RWXstoned / LdrShuffle
  Code execution/injection technique using DLL PEB module structure manipulation
  ☆217Updated 6 months ago
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆285Updated last month
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆211Updated 11 months ago
• HackLike-co / Cloak
  Generate Secure, Polymorphic, Evasive (lol) Payloads
  ☆28Updated 2 months ago
• VirtualAlllocEx / HWBP-DEP-Bypass
  Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulati…
  ☆91Updated 2 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆103Updated 9 months ago
• susMdT / LoudSunRun
  Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven
  ☆251Updated last year
• MythicAgents / Kharon
  C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, p…
  ☆191Updated 2 weeks ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆76Updated last month
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆114Updated 11 months ago
• hwbp / CLR-Unhook
  Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan …
  ☆173Updated last week
• nilripper / ptrguard
  A pointer encryption library intended for Red Team implant design in Rust.
  ☆63Updated 2 months ago