Alternatives and similar repositories for macho-loader:

Users that are interested in macho-loader are comparing it to the libraries listed below

• lap1nou / CLR_Heap_encryption
  ☆97Updated last year
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆47Updated last year
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆59Updated 11 months ago
• grayhatkiller / SharpExShell
  SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.
  ☆68Updated 9 months ago
• zimnyaa / noWatch
  Implant drop-in for EDR testing
  ☆134Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• Fitretech-Security / dylight
  macOS dylib stager
  ☆31Updated 3 weeks ago
• rasta-mouse / KerbApp
  ☆28Updated 8 months ago
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆70Updated last month
• xforcered / VectoredExceptionHandling
  ☆28Updated 6 months ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆76Updated 4 months ago
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆74Updated last month
• rkbennett / pybof
  Python module for running BOFs
  ☆68Updated last year
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆39Updated last year
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆25Updated last year
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆39Updated last year
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆74Updated last year
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆79Updated 3 months ago
• antroguy / LocklessBof
  Lockless BOF
  ☆65Updated 2 weeks ago
• EspressoCake / BOF_Development_Docker
  A VSCode devcontainer for development of COFF files with batteries included.
  ☆47Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆63Updated 6 months ago
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆43Updated 2 years ago
• trustedsec / CS_COFFLoader
  ☆127Updated last year
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆78Updated 2 years ago
• xforcered / Being-A-Good-CLR-Host
  ☆94Updated last month
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆31Updated last year