Alternatives and similar repositories for commandline_cloaking:

Users that are interested in commandline_cloaking are comparing it to the libraries listed below

• therealdreg / nasm_linux_x86_64_pure_sharedlib
  NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
  ☆29Updated last year
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated last year
• fashionproof / RunHijackHunter
  ☆16Updated 4 years ago
• aahmad097 / ZoomPersistence
  Zoom Persistence Aggressor and Handler
  ☆55Updated 4 years ago
• magisterquis / bin2memfd
  Loads a program into a memfd and runs it.
  ☆12Updated 2 years ago
• xforcered / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆54Updated 3 years ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• redcode-labs / Solaris
  A local LKM rootkit loader/dropper that lists available security mechanisms
  ☆52Updated 3 years ago
• hosom / honeycred
  Utility to inject honey tokens into lsass.
  ☆28Updated 8 years ago
• asaurusrex / Forblaze
  Forblaze - A Python Mac Steganography Payload Generator
  ☆57Updated 3 years ago
• cedowens / Mythic-Macro-Generator
  Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
  ☆47Updated 4 years ago
• HuskyHacks / the-crown-defcon615
  Repo for The Crown: Exploratory Analysis of Nim Malware DEF CON 615 talk
  ☆45Updated 3 years ago
• its-a-feature / macos_execute_from_memory
  PoC of macho loading from memory
  ☆56Updated 5 months ago
• sandflysecurity / sandfly-processdecloak
  Sandfly Linux Stealth Rootkit Decloaking Utility
  ☆99Updated 2 years ago
• vulnwarex / bin2sc
  Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF
  ☆73Updated 4 years ago
• dsnezhkov / elfpack
  ☆47Updated 2 years ago
• jfmaes / DeepSleep
  all credits go to @mgeeky
  ☆64Updated 3 years ago
• inguardians / ivanti-VPN-issues-2024-research
  Invanti VPN Vulnerabilities for Jan - Feb 2024 - Links to Keep it all Organized
  ☆16Updated last year
• skelsec / pypykatz-volatility3
  pypykatz plugin for volatility3 framework
  ☆40Updated last year
• RITRedteam / Headshot
  NGINX module to allow for RCE through a specific header
  ☆27Updated 2 years ago
• moloch-- / poc-cve-2021-4034
  PoC for CVE-2021-4034 dubbed pwnkit
  ☆35Updated 3 years ago
• synacktiv / AMSI-Bypass
  Lists of AMSI triggers (VBA, JScript / VBScript)
  ☆33Updated 5 years ago
• io-tl / Mara
  Mara is a userland pty/tty sniffer
  ☆53Updated last year
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆22Updated 4 years ago
• thiagomayllart / Covenant_Alternate
  Covenant is a collaborative .NET C2 framework for red teamers.
  ☆22Updated 4 years ago
• xpcmdshell / electron-probe
  ☆31Updated 3 years ago
• magisterquis / pcapknock
  Watches for trigger packets, runs commands or spawns a shell
  ☆24Updated 5 years ago
• shogunlab / Sukoshi
  Sukoshi is a proof-of-concept Python/C++ implant that leverages the MQTT protocol for C2 and uses AWS IoT Core as infrastructure.
  ☆46Updated 3 years ago
• BinaryDefense / beacon-fronting
  A simple command line program to help defender test their detections for network beacon patterns and domain fronting
  ☆69Updated 3 years ago
• riesha / drv-vuln-scanner
  Finds imports that could be exploited, still requires manual analysis.
  ☆27Updated 2 years ago