Alternatives and similar repositories for RTO-Implant

Users that are interested in RTO-Implant are comparing it to the libraries listed below

• yoda66 / MalwareDevTalk
  ☆48Updated 5 years ago
• boku7 / Nobelium-PdfDLRunAesShellcode
  A recreation of the "Nobelium" malware based on Microsofts Malware analysis - Part 1: PDF2Pwn
  ☆101Updated 2 years ago
• boku7 / winx64-InjectAllProcessesMeterpreter-Shellcode
  64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.
  ☆133Updated 2 years ago
• fozavci / WeaponisingCSharp-Fundamentals
  Weaponising C# - Fundamentals Training Content
  ☆70Updated 4 years ago
• N4kedTurtle / LocalDllParse
  ☆55Updated 4 years ago
• NVISOsecurity / brown-bags
  ☆112Updated 2 years ago
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆107Updated 5 years ago
• aahmad097 / BadOutlook
  (kinda) Malicious Outlook Reader
  ☆137Updated 4 years ago
• ustayready / wnfexec
  WNF Code Execution Library Using C#
  ☆111Updated 5 years ago
• fashionproof / RunHijackHunter
  ☆18Updated 4 years ago
• CCob / SylantStrike
  Simple EDR implementation to demonstrate bypass
  ☆181Updated 5 years ago
• matterpreter / SHAPESHIFTER
  Companion PoC for the "Adventures in Dynamic Evasion" blog post
  ☆129Updated 4 years ago
• BC-SECURITY / Offensive-VBA-and-XLS-Entanglement
  ☆132Updated 4 years ago
• fozavci / TradecraftDevelopment-Fundamentals
  Tradecraft Development Fundamentals
  ☆40Updated 4 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆49Updated 4 years ago
• S3cur3Th1sSh1t / Get-System-Techniques
  ☆98Updated 3 years ago
• wsummerhill / Malware_Weaponization
  A curated list of tools and techniques written from experience in weaponization of malware
  ☆40Updated 2 years ago
• o1mate / AppLocker-Bypass
  Bypassing AppLocker with C#
  ☆143Updated 4 years ago
• PorLaCola25 / TransactedSharpMiniDump
  Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…
  ☆71Updated 5 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• byt3bl33d3r / Naga
  A C# stager for SILENTTRINITY (https://github.com/byt3bl33d3r/SILENTTRINITY)
  ☆67Updated 5 years ago
• mantvydasb / Invoke-PowerCloud
  Deliver powershell paylods via DNS TXT via CloudFlare using PowerShell
  ☆62Updated 6 years ago
• skelsec / pypykatz-volatility3
  pypykatz plugin for volatility3 framework
  ☆45Updated 7 months ago
• Adepts-Of-0xCC / VBA-macro-experiments
  Collection of VBA macro published in our twitter / blog
  ☆160Updated 3 years ago
• obscuritylabs / PeFixup
  PE File Blessing - To continue or not to continue
  ☆87Updated 6 years ago
• boku7 / HellsGatePPID
  Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process
  ☆106Updated 2 years ago
• fozavci / petaqc2
  Petaq - Purple Team Command & Control Server
  ☆105Updated 3 years ago
• med0x2e / genxlm
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆91Updated 6 years ago
• CERTCC / privesc
  Process Monitor filter for finding privilege escalation vulnerabilities on Windows
  ☆79Updated 4 years ago
• jfmaes / CSharpReflectionWorkshop
  The repository that complements the From zero to hero: creating a reflective loader in C# workshop
  ☆39Updated 4 years ago