Alternatives and similar repositories for fileless-elf-exec

Users that are interested in fileless-elf-exec are comparing it to the libraries listed below

• arget13 / DDexec
  A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.
  ☆839Updated last month
• akamai / akamai-security-research
  This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
  ☆500Updated 5 months ago
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆730Updated 5 months ago
• preemptdev / bluffy
  Convert shellcode into different formats!
  ☆352Updated 2 years ago
• anvilsecure / ulexecve
  ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries…
  ☆187Updated last year
• BishopFox / asminject
  Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86…
  ☆130Updated 2 years ago
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆743Updated last year
• ConsciousHacker / WFH
  ☆415Updated 2 years ago
• Idov31 / Venom
  Venom is a library that meant to perform evasive communication using stolen browser socket
  ☆381Updated last year
• janoglezcampos / DeathSleep
  A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…
  ☆511Updated 2 years ago
• deepinstinct / Dirty-Vanity
  A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…
  ☆636Updated 2 years ago
• mgeeky / PackMyPayload
  A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…
  ☆917Updated 11 months ago
• chompie1337 / Linux_LPE_eBPF_CVE-2021-3490
  ☆301Updated last year
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆388Updated this week
• reveng007 / reveng_rtkit
  Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypa…
  ☆250Updated last year
• persistence-info / persistence-info.github.io
  ☆489Updated last year
• 20urc3 / Sekiryu
  Comprehensive toolkit for Ghidra headless.
  ☆356Updated 3 weeks ago
• bananabr / TimeException
  A tool to find folders excluded from AV real-time scanning using a time oracle
  ☆233Updated last year
• eeriedusk / nysm
  nysm is a stealth post-exploitation container.
  ☆246Updated last year
• p3nt4 / Nuages
  A modular C2 framework
  ☆466Updated last month
• RedTeamPentesting / resocks
  mTLS-Encrypted Back-Connect SOCKS5 Proxy
  ☆438Updated last year
• Kudaes / Elevator
  UAC bypass by abusing RPC and debug objects.
  ☆613Updated last year
• guitmz / ezuri
  A Simple Linux ELF Runtime Crypter
  ☆248Updated 2 months ago
• RedTeamOperations / Advanced-Process-Injection-Workshop
  ☆750Updated last year
• Z4kSec / Masky
  Python library with CLI allowing to remotely dump domain user credentials via an ADCS without dumping the LSASS process memory
  ☆388Updated last year
• zblurx / dploot
  DPAPI looting remotely and locally in Python
  ☆467Updated last month
• georgesotiriadis / Chimera
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆473Updated last year
• mhaskar / DNSStager
  Hide your payload in DNS
  ☆613Updated 2 years ago
• irsl / curlshell
  reverse shell using curl
  ☆455Updated last year
• thefLink / Hunt-Sleeping-Beacons
  Aims to identify sleeping beacons
  ☆590Updated 5 months ago