Alternatives and similar repositories for SyscallHide:

Users that are interested in SyscallHide are comparing it to the libraries listed below

• leoloobeek / COMRunner
  A simple COM server which provides a component to run shellcode
  ☆133Updated 4 years ago
• mdsecactivebreach / Execute-GithubAssembly-Aggressor
  Aggressor Script to Execute Assemblies from Github
  ☆68Updated 4 years ago
• checkymander / CoreSploit
  Initial Commit of Coresploit
  ☆56Updated 3 years ago
• last-byte / HppDLL
  Source code for HppDLL - local password dumping using MsvpPasswordValidate hooks
  ☆2Updated 4 years ago
• rvrsh3ll / SharpExcel4-DCOM
  Port of Invoke-Excel4DCOM
  ☆103Updated 5 years ago
• med0x2e / genxlm
  A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4M…
  ☆88Updated 5 years ago
• rvrsh3ll / Sharp-Suite
  My musings with C#
  ☆28Updated 2 years ago
• slyd0g / SK8RAT
  C++ implant that interfaces with a SK8PARK server
  ☆48Updated 3 years ago
• djhohnstein / wlbsctrl_poc
  C++ POC code for the wlbsctrl.dll hijack on IKEEXT
  ☆53Updated 5 years ago
• djhohnstein / TSMSISrv_poc
  C# POC code for the SessionEnv dll hijack by utilizing called functions of TSMSISrv.dll
  ☆57Updated 5 years ago
• homjxi0e / ReaCOM
  ReaCOM has got a lot of tools to use and is related to component object model
  ☆74Updated 5 years ago
• dmchell / Sniper
  A simple proof of concept for detecting use of Cobalt Strike's execute-assembly
  ☆59Updated 2 years ago
• N4kedTurtle / LocalDllParse
  ☆55Updated 3 years ago
• Adepts-Of-0xCC / MiniDumpWriteDumpPoC
  MiniDumpWriteDump behavior modification hook
  ☆50Updated 4 years ago
• rmdavy / WordAmsiBypass
  ☆37Updated 5 years ago
• curi0usJack / rubeus2ccache
  Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.
  ☆66Updated 4 years ago
• sailay1996 / SECOMN_EoP
  Sound Research SECOMN service Privilege Escalation (windows 10)
  ☆39Updated 4 years ago
• icebearfriend / Quickrundown
  Smart overlay for Cobalt Strike PS function
  ☆31Updated 5 years ago
• slyd0g / SK8PARK
  Python 3 server used to control SK8RAT implant
  ☆35Updated 4 years ago
• jfmaes / Backdoorplz
  adding a backdooruser using win32api
  ☆79Updated 4 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 6 years ago
• boku7 / HellsGatePPID
  Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process
  ☆100Updated last year
• rmdavy / HeapsOfFun
  AMSI Bypass Via the Heap
  ☆105Updated 4 years ago
• limbenjamin / LogServiceCrash
  POC code to crash Windows Event Logger Service
  ☆26Updated 4 years ago
• decoder-it / BadBackupOperator
  ☆36Updated 7 years ago
• offsecginger / AES-PowerShellCode
  Standalone version of my AES Powershell payload for Cobalt Strike.
  ☆108Updated 5 years ago
• mdsecactivebreach / Browser-ExternalC2
  External C2 Using IE COM Objects
  ☆98Updated 5 years ago
• secgroundzero / tetanus
  Helper script for mangling CS payloads
  ☆52Updated 5 years ago
• rasta-mouse / CollectorService
  ☆52Updated 5 years ago
• Soledge / BlockEtw
  .Net Assembly to block ETW telemetry in current process
  ☆76Updated 4 years ago