Alternatives and similar repositories for SkeletonKey

Users that are interested in SkeletonKey are comparing it to the libraries listed below

• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆44Updated 2 years ago
• brosck / APIHookingDetector
  「⚙️」Detect which native Windows API's (NtAPI) are being hooked
  ☆38Updated last year
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆24Updated 2 years ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated 2 years ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆32Updated 2 years ago
• ricardojoserf / NativeNtdllRemap
  Remap ntdll.dll using only NTAPI functions with a suspended process
  ☆26Updated 8 months ago
• waawaa / Hooked-Injector
  Hooked create process injection for meterpreter
  ☆23Updated 4 years ago
• oldboy21 / SHGenOb
  Python based tool for generating Shellcode from PIC C
  ☆41Updated last month
• Bl4ckM1rror / PEAs
  ☆61Updated 2 years ago
• OffenseTeacher / Steganim
  ☆47Updated 2 years ago
• rxOred / process-hollowing
  process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread
  ☆31Updated 3 years ago
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆23Updated 2 years ago
• FalconForceTeam / bof-winrm-plugin-jump
  ☆32Updated 10 months ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆51Updated 2 years ago
• farfella / in-memory-cpython
  An In-memory Embedding of CPython
  ☆31Updated 4 years ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated 2 years ago
• xelemental / Mal-LNK-Generator
  ☆38Updated 8 months ago
• susMdT / fictional-invention
  idk man this was the default github name
  ☆35Updated 2 years ago
• HulkOperator / AuthStager
  ☆59Updated last year
• ChoiSG / havoc2nginx
  havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…
  ☆12Updated 2 years ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆24Updated last year
• kyleavery / pendulum
  Linux Sleep Obfuscation
  ☆106Updated last year
• bot984397 / eepy
  ☆38Updated 8 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆22Updated 2 years ago
• whokilleddb / funcshenanigans
  A bunch of shenanigans using functions, VEH and more
  ☆37Updated 6 months ago
• iDigitalFlame / XrMT
  e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!
  ☆27Updated last year
• OtterHacker / CoffLoader
  ☆58Updated 2 years ago
• outflanknl / unmanaged-dotnet-patch
  Modify managed functions from unmanaged code
  ☆53Updated last year
• deepinstinct / VSTO-POC
  A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously
  ☆31Updated 2 years ago
• MaorSabag / Paruns-Fart
  Just another ntdll unhooking using Parun's Fart technique
  ☆76Updated 2 years ago