Alternatives and similar repositories for WinPIT

Users that are interested in WinPIT are comparing it to the libraries listed below

• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 5 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆86Updated 2 years ago
• FuzzySecurity / Driver-Template
  Bare template for a Kernel Mode Driver
  ☆51Updated 5 years ago
• perturbed-platypus / UEFIReadCSharp
  ☆33Updated 6 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆42Updated 6 years ago
• padovah4ck / RedSharp
  Penetration Test / Read Team - C# tools repository
  ☆57Updated 3 years ago
• apt69 / RibeyeSpecial
  medium-rare
  ☆28Updated 5 years ago
• marcin-chwedczuk / dll-inject
  Simple DLL injector written in C#
  ☆24Updated 10 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• malcomvetter / UnstoppableService
  A pattern for a self-installing Windows service in C# with the unstoppable attributes in C#.
  ☆66Updated 6 years ago
• cobbr / C2Bridge
  C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant.
  ☆70Updated 4 years ago
• jthuraisamy / av-fingerprints
  Antivirus Emulator Fingerprints
  ☆29Updated 7 years ago
• TheWover / EasyNet
  Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library.…
  ☆93Updated 6 years ago
• slyd0g / SK8PARK
  Python 3 server used to control SK8RAT implant
  ☆36Updated 4 years ago
• SolomonSklash / UnhookingPOC
  A small commented POC for removing API hooks placed by AV/EDR.
  ☆34Updated 5 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆16Updated 7 years ago
• am0nsec / MCGC
  Minimalist Custom .NET Core Garbage Collector
  ☆23Updated 5 years ago
• 0xbadjuju / TellMeYourSecrets
  A C# DLL to Dump LSA Secrets
  ☆57Updated 7 years ago
• sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
  Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
  ☆13Updated 5 years ago
• DoubleLabyrinth / ProcessHollowing
  ☆37Updated 6 years ago
• jackullrich / universal-syscall-64
  Resolve syscall numbers at runtime for all Windows versions.
  ☆61Updated 10 months ago
• limbenjamin / LogServiceCrash
  POC code to crash Windows Event Logger Service
  ☆27Updated 4 years ago
• rvrsh3ll / UACSilentCleanup
  ☆14Updated 6 years ago
• ambray / ProcessHollowing
  Simple Process Hollowing in C#
  ☆69Updated 7 years ago
• RedLectroid / APIunhooker
  C++ function that will automagically unhook a specified Windows API
  ☆62Updated 4 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• FuzzySecurity / SharpSploit
  SharpSploit is a .NET post-exploitation library written in C#
  ☆16Updated 5 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 5 years ago
• xpn / DotNetDebug
  A simple POC to demonstrate the power of .NET debugging for injection
  ☆73Updated 5 years ago
• GrayKernel / GrayFrost
  C++ DLL Bootstrapper for spinning up the CLR for C# Payloads
  ☆44Updated 6 years ago