Alternatives and similar repositories for RunPE:

Users that are interested in RunPE are comparing it to the libraries listed below

• GetRektBoy724 / SharpUnhooker
  C# Based Universal API Unhooker
  ☆393Updated 3 years ago
• kyleavery / inject-assembly
  Inject .NET assemblies into an existing process
  ☆486Updated 3 years ago
• med0x2e / ExecuteAssembly
  Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…
  ☆554Updated 3 years ago
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆696Updated 5 months ago
• antonioCoco / MalSeclogon
  A little tool to play with the Seclogon service
  ☆310Updated 2 years ago
• anthemtotheego / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆642Updated last year
• FatRodzianko / SharpBypassUAC
  C# tool for UAC bypasses
  ☆418Updated 3 years ago
• mgeeky / UnhookMe
  UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …
  ☆344Updated 2 years ago
• TheWover / DInvoke
  Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.
  ☆715Updated 2 years ago
• Accenture / CLRvoyance
  Managed assembly shellcode generation
  ☆266Updated 3 years ago
• BinaryScary / NET-Obfuscate
  Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI
  ☆232Updated last year
• ajpc500 / BOFs
  Collection of Beacon Object Files
  ☆572Updated 2 years ago
• boku7 / HOLLOW
  EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…
  ☆273Updated last year
• plackyhacker / Shellcode-Injection-Techniques
  A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this proje…
  ☆451Updated 3 years ago
• boku7 / AsmHalosGate
  x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks
  ☆202Updated last year
• Hagrid29 / PELoader
  PE loader with various shellcode injection techniques
  ☆401Updated 2 years ago
• jhalon / SharpCall
  Simple PoC demonstrating syscall execution in C#
  ☆154Updated 4 years ago
• trustedsec / COFFLoader
  ☆494Updated 3 months ago
• VirtualAlllocEx / Create-Thread-Shellcode-Fetcher
  This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and down…
  ☆246Updated last year
• mgeeky / ElusiveMice
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆441Updated last year
• 0xthirteen / SharpStay
  .NET project for installing Persistence
  ☆464Updated 7 months ago
• itm4n / PPLmedic
  Dump the memory of any PPL with a Userland exploit chain
  ☆332Updated last year
• S3cur3Th1sSh1t / Nim-RunPE
  A Nim implementation of reflective PE-Loading from memory
  ☆274Updated 5 months ago
• D4stiny / ForkPlayground
  An implementation and proof-of-concept of Process Forking.
  ☆223Updated 3 years ago
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆580Updated 2 years ago
• knight0x07 / ImpulsiveDLLHijack
  C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can…
  ☆510Updated 3 years ago
• etormadiv / HostingCLR
  Executing a .NET Assembly from C++ in Memory (CLR Hosting)
  ☆188Updated 8 years ago
• am0nsec / SharpHellsGate
  C# Implementation of the Hell's Gate VX Technique
  ☆210Updated 4 years ago
• netero1010 / ScheduleRunner
  A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation
  ☆328Updated last month
• iilegacyyii / ThreadlessInject-BOF
  BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…
  ☆371Updated last year