Alternatives and similar repositories for BlackLotus

Users that are interested in BlackLotus are comparing it to the libraries listed below

• Idov31 / Nidhogg
  Nidhogg is an all-in-one simple to use windows kernel rootkit.
  ☆2,151Updated 2 weeks ago
• weak1337 / Alcatraz
  x64 binary obfuscator
  ☆1,919Updated 2 years ago
• vxunderground / VX-API
  Collection of various malicious functionality to aid in malware development
  ☆1,791Updated last year
• memN0ps / redlotus-rs
  Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)
  ☆554Updated 2 years ago
• ZeroMemoryEx / Chaos-Rootkit
  Now You See Me, Now You Don't
  ☆994Updated last week
• ZeroMemoryEx / Blackout
  kill anti-malware protected processes ( BYOVD ) ( Microsoft Won )
  ☆969Updated 2 years ago
• XaFF-XaFF / Cronos-Rootkit
  Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
  ☆928Updated 3 years ago
• XaFF-XaFF / Black-Angel-Rootkit
  Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
  ☆645Updated 2 years ago
• indetectables-net / toolkit
  The essential toolkit for reversing, malware analysis, and cracking
  ☆939Updated 5 months ago
• Xacone / BestEdrOfTheMarket
  EDR Lab for Experimentation Purposes
  ☆1,381Updated 2 weeks ago
• bytecode77 / r77-rootkit
  Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
  ☆2,033Updated last week
• es3n1n / no-defender
  A slightly more fun way to disable windows defender + firewall. (through the WSC api)
  ☆2,038Updated last year
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,335Updated last month
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,214Updated last year
• Cracked5pider / Stardust
  A modern 32/64-bit position independent implant template
  ☆1,267Updated 8 months ago
• hasherezade / pe-bear
  Portable Executable reversing tool with a friendly GUI
  ☆3,359Updated 3 weeks ago
• b1tg / CVE-2023-38831-winrar-exploit
  CVE-2023-38831 winrar exploit generator
  ☆789Updated 2 years ago
• matthieu-hackwitharts / Win32_Offensive_Cheatsheet
  Win32 and Kernel abusing techniques for pentesters
  ☆969Updated 2 years ago
• tkmru / awesome-edr-bypass
  Awesome EDR Bypass Resources For Ethical Hacking
  ☆1,347Updated last month
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,571Updated 2 weeks ago
• hasherezade / exe_to_dll
  Converts a EXE into DLL
  ☆1,347Updated 2 months ago
• JKornev / hidden
  🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
  ☆1,978Updated 3 years ago
• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,196Updated 2 years ago
• matro7sh / BypassAV
  This map lists the essential techniques to bypass anti-virus and EDR
  ☆2,952Updated 8 months ago
• vxunderground / VXUG-Papers
  Research code & papers from members of vx-underground.
  ☆1,325Updated 3 years ago
• am0nsec / HellsGate
  Original C Implementation of the Hell's Gate VX Technique
  ☆1,125Updated 4 years ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,268Updated 3 weeks ago
• moom825 / xeno-rat
  Xeno-RAT is an open-source remote access tool (RAT) developed in C#, providing a comprehensive set of features for remote system manageme…
  ☆1,427Updated last year
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,485Updated 3 weeks ago
• kernelwernel / VMAware
  Advanced VM detection library and tool
  ☆917Updated this week