Alternatives and similar repositories for basilisk

Users that are interested in basilisk are comparing it to the libraries listed below

• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆121Updated 11 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆117Updated last year
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆260Updated last year
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆106Updated last year
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 7 months ago
• connormcgarr / Vtl1Mon
  Virtual Trust Level (VTL 1) secure call tracing
  ☆83Updated 3 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆211Updated 10 months ago
• Idov31 / EtwLeakKernel
  Leaking kernel addresses from ETW consumers. Requires Administrator privileges.
  ☆85Updated 3 weeks ago
• hasherezade / thread_namecalling
  Process Injection using Thread Name
  ☆281Updated 7 months ago
• symeonp / Lenovo-CVE-2025-8061
  PoC for popping a system shell against the LnvMSRIO.sys driver
  ☆113Updated last month
• XaFF-XaFF / Kernel-Process-Hollowing
  Windows x64 kernel mode rootkit process hollowing POC.
  ☆189Updated 2 years ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆162Updated last year
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆106Updated 10 months ago
• CX330Blake / Shellcode-IDE
  Shellcode IDE — makes developing and analyzing shellcode much more convenient.
  ☆104Updated last week
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆315Updated last year
• 0xHossam / KernelCallbackTable-Injection-PoC
  Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…
  ☆260Updated last year
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated last month
• r0keb / TrashFormer
  A 64 bit executable junk code engine for polymorphic malware.
  ☆72Updated 5 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆100Updated 2 weeks ago
• mrexodia / RiscyWorkshop
  Payload Obfuscation for Red Teams workshop materials
  ☆76Updated this week
• TheMalwareGuardian / Awesome-Bootkits-Rootkits-Development
  A curated compilation of extensive resources dedicated to bootkit and rootkit development.
  ☆136Updated 3 months ago
• rad9800 / talks
  ☆60Updated 7 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆170Updated 3 months ago
• 0xPrimo / KMDllInjector
  kernel-mode DLL Injector
  ☆117Updated 7 months ago
• TheMalwareGuardian / Bootkits-Rootkits-Development-Environment
  Automated environment setup for Bootkit & Rootkit development.
  ☆25Updated 3 months ago
• tanc7 / skidstorm
  ☆26Updated 8 months ago
• Idov31 / Jormungandr
  Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
  ☆241Updated 2 years ago
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆276Updated last year
• vmsplit / icekit
  I/O Cache-As-Ram + AMD x86_64 cache line locking | Mirror of https://codeberg.org/3itch/icekit
  ☆18Updated 8 months ago
• rad9800 / hwbp4mw
  ☆267Updated 2 years ago