Alternatives and similar repositories for Unhook-BitDefender

Users that are interested in Unhook-BitDefender are comparing it to the libraries listed below

• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆32Updated 5 years ago
• Wra7h / PEResourceInject
  ☆58Updated 3 years ago
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆40Updated 4 years ago
• Kara-4search / MappingInjection_CSharp
  MappingInjection via csharp
  ☆40Updated 4 years ago
• TheKevinWang / HellsRunPE
  RunPE using Hell's Gate technique.
  ☆32Updated 5 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆138Updated 3 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆45Updated 4 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆103Updated 3 years ago
• N4kedTurtle / HellsGatePoC
  ☆50Updated 5 years ago
• pwn1sher / uuid-loader
  UUID based Shellcode loader for your favorite C2
  ☆85Updated 4 years ago
• mez-0 / winrmdll
  C++ WinRM API via Reflective DLL
  ☆145Updated 4 years ago
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆31Updated 4 years ago
• lab52io / StealAllTokens
  This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…
  ☆57Updated 4 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆77Updated 4 years ago
• Kara-4search / ProcessHollowing_CSharp
  ProcessHollowing via csharp
  ☆13Updated 4 years ago
• oxfemale / LogonCredentialsSteal
  LOCAL AND REMOTE HOOK msv1_0!SpAcceptCredentials from LSASS.exe and DUMP DOMAIN/LOGIN/PASSWORD IN CLEARTEXT to text file.
  ☆122Updated 5 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆65Updated 2 years ago
• Wra7h / ARCInject
  Overwrite a process's recovery callback and execute with WER
  ☆103Updated 3 years ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆55Updated 3 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆83Updated 3 years ago
• Octoberfest7 / Mutants_Sessions_Self-Deletion
  Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.
  ☆129Updated 3 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆65Updated last year
• Kara-4search / PEB-PPIDspoofing_Csharp
  Command line & PPID spoofing
  ☆27Updated 2 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 4 years ago
• N4kedTurtle / ExecuteAssembly_Mailslot
  ☆38Updated 5 years ago
• Allevon412 / PPL_Sandboxer
  ☆82Updated 3 years ago
• aaaddress1 / sakeInject
  Windows PE - TLS (Thread Local Storage) Injector in C/C++
  ☆106Updated 4 years ago
• arsium / ShellCodeExec
  My personal shellcode loader
  ☆32Updated 2 years ago