Alternatives and similar repositories for windows-sandbox-init

Users that are interested in windows-sandbox-init are comparing it to the libraries listed below

• zzhsec / NlsCodeInjectionThroughRegistry

  View on GitHub
  Dll injection through code page id modification in registry. Based on jonas lykk research
  ☆17Jun 18, 2022Updated 3 years ago
• djolertrk / kovid-obfuscation-passes

  View on GitHub
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆138Oct 20, 2025Updated 3 months ago
• Danukeru / llvm-obfs-str-pass-2024

  View on GitHub
  An example of an external LLVM plugin module transform pass for the latest versions.
  ☆14Oct 21, 2025Updated 3 months ago
• bitStream93 / Shellcode-Test-Harness

  View on GitHub
  A lightweight test harness designed to speed up shellcode development by providing an execution environment with integrated crash diagnos…
  ☆42Jan 15, 2026Updated last month
• synacktiv / keebcap

  View on GitHub
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆53Dec 21, 2023Updated 2 years ago
• NetSPI / BOF-PE

  View on GitHub
  An example reference design for a proposed BOF PE
  ☆197Jan 23, 2026Updated 3 weeks ago
• chasingboy / mapsx

  View on GitHub
  mapsx 是一款端口扫描｜网段探测｜弱口令爆破工具
  ☆21Nov 14, 2025Updated 3 months ago
• Cracked5pider / unguard-eat

  View on GitHub
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆42Aug 6, 2024Updated last year
• 0x4d5a-ctf / 38c3_com_talk

  View on GitHub
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆74Jan 3, 2025Updated last year
• reecdeep / hollowise

  View on GitHub
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Feb 20, 2025Updated 11 months ago
• gsmith257-cyber / better-sliver

  View on GitHub
  Adversary Emulation Framework
  ☆129Jul 1, 2025Updated 7 months ago
• rad9800 / BootExecuteEDR

  View on GitHub
  ☆409Dec 8, 2024Updated last year
• S12cybersecurity / FreeThreadHijacking

  View on GitHub
  Perform Thread Hijacking Shellcode Injection without OpenProcess and OpenThread mapping all the free handles in memory
  ☆16Jul 16, 2024Updated last year
• DragoQCC / ShellcodeEncryption

  View on GitHub
  Used to AES encrypt shellcode, can take password or use built in default should be used with Iron Injector to generate and execute shellc…
  ☆15Mar 18, 2022Updated 3 years ago
• joaoviictorti / runas

  View on GitHub
  A runas implementation with extra features in Rust
  ☆53Nov 15, 2025Updated 2 months ago
• boku7 / StringReaper

  View on GitHub
  Reaping treasures from strings in remote processes memory
  ☆285Feb 8, 2025Updated last year
• nbaertsch / PoolProxy

  View on GitHub
  Proxy function calls through the thread pool with ease
  ☆31Feb 27, 2025Updated 11 months ago
• Archie-osu / PowerHook

  View on GitHub
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Apr 13, 2025Updated 10 months ago
• trustedsec / DitExplorer

  View on GitHub
  Tool for viewing NTDS.dit
  ☆191Mar 14, 2025Updated 11 months ago
• Teach2Breach / pool_party_rs

  View on GitHub
  remote process injections using pool party techniques
  ☆70Jun 29, 2025Updated 7 months ago
• SamuelTulach / SecureGame

  View on GitHub
  Proof-of-concept game using VBS enclaves to protect itself from cheating
  ☆49Nov 10, 2024Updated last year
• tijme / conferences

  View on GitHub
  Some of the presentations, workshops, and labs I gave at public conferences.
  ☆34Oct 24, 2025Updated 3 months ago
• boku7 / patchwerk

  View on GitHub
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆195Feb 6, 2025Updated last year
• CodeXTF2 / WebcamBOF

  View on GitHub
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆156Mar 26, 2025Updated 10 months ago
• T3nb3w / ComDotNetExploit

  View on GitHub
  A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …
  ☆332Mar 6, 2025Updated 11 months ago
• rbmm / SC

  View on GitHub
  shell code example
  ☆67Dec 12, 2025Updated 2 months ago
• 7eRoM / tutorials

  View on GitHub
  ☆17May 7, 2025Updated 9 months ago
• AmitMoshel1 / PatchGuardEncryptorDriver

  View on GitHub
  A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆78Mar 29, 2025Updated 10 months ago
• wolfcod / beacondbg

  View on GitHub
  Beacon Debugger
  ☆55Oct 28, 2024Updated last year
• 0xRedpoll / SignalKeyBOF

  View on GitHub
  BOF to decrypt Signal Desktop chat logs
  ☆72Feb 20, 2025Updated 11 months ago
• joaoviictorti / rustbof

  View on GitHub
  A Rust template for writing Beacon Object Files (BOFs)
  ☆87Updated this week
• EvanMcBroom / sleepy

  View on GitHub
  A lexer and parser for Sleep
  ☆20May 14, 2025Updated 9 months ago
• rad9800 / RansomFS

  View on GitHub
  ☆31Feb 28, 2025Updated 11 months ago
• 0xRedpoll / WhatsAppKeyBOF

  View on GitHub
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.
  ☆88Mar 2, 2025Updated 11 months ago
• jsecu / ModTask

  View on GitHub
  ☆53Sep 23, 2025Updated 4 months ago
• g0h4n / REC2

  View on GitHub
  REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs…
  ☆163Feb 22, 2024Updated last year
• Teach2Breach / hollow_rs

  View on GitHub
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Feb 7, 2025Updated last year
• MalwareTech / EDR-Preloader

  View on GitHub
  An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer
  ☆539Feb 13, 2024Updated 2 years ago
• 0xTriboulet / rdll-rs

  View on GitHub
  A reflective DLL development template for the Rust programming language
  ☆113Nov 4, 2025Updated 3 months ago