Alternatives and similar repositories for nEkko

Users that are interested in nEkko are comparing it to the libraries listed below

• zimnyaa / xyrella
  PoC XLL builder in Python/Nim
  ☆48Updated 3 years ago
• zimnyaa / fiber-stager
  A simple Nim stager (w/ fiber execution)
  ☆20Updated 4 years ago
• zimnyaa / nim-noload-dll-hollowing
  Unused DLL hollowing PoC in Nim
  ☆17Updated 4 years ago
• itaymigdal / GhostNap
  Sleep obfuscation for shellcode implants and their reflective shit
  ☆53Updated 2 years ago
• OffenseTeacher / NimRekey
  ☆39Updated 2 years ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated 2 years ago
• OffenseTeacher / Steganim
  ☆47Updated 2 years ago
• m4ul3r / malware
  malware written for educational purposes
  ☆71Updated last month
• S3cur3Th1sSh1t / NimShellcodeFluctuation
  ShellcodeFluctuation PoC ported to Nim
  ☆79Updated 3 years ago
• oXis / NimWinAPICustom
  Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim
  ☆32Updated 4 years ago
• rasta-mouse / LibGate
  A Crystal Palace shared library to resolve & perform syscalls
  ☆54Updated 3 months ago
• SECFORCE / NimWhispers
  ☆13Updated 3 years ago
• N4kedTurtle / SharpTeamsDump
  Dump Teams conversations
  ☆19Updated 4 years ago
• iamagarre / BadExclusions
  BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR
  ☆20Updated last year
• synap5e / onefile_python
  Run python from a single exe
  ☆35Updated 3 years ago
• p0dalirius / pdbdownload
  An utility to download PDB files associated with a Portable Executable (PE).
  ☆14Updated 11 months ago
• Helixo32 / NimReflectiveLoader
  NimReflectiveLoader is a Nim-based tool for in-memory DLL execution using Reflective DLL Loading.
  ☆30Updated 2 years ago
• Allevon412 / SyscallTempering
  ☆31Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆58Updated 2 years ago
• hlldz / misc
  miscellaneous codes
  ☆36Updated 2 years ago
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆45Updated 3 years ago
• sakkis91 / SandboxPPL
  Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.
  ☆12Updated 8 months ago
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆25Updated 2 years ago
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆21Updated 2 years ago
• zimnyaa / inmembof.py
  A small example of loading BOFs in Python with pure reflection
  ☆19Updated 3 years ago
• S3cur3Th1sSh1t / nim-strenc
  string encryption in Nim
  ☆20Updated last year
• Kharos102 / interceptor
  Sample Rust Hooking Engine
  ☆36Updated last year
• chryzsh / linux_bof
  ELF Beacon Object File (BOF) Template
  ☆19Updated last year
• Patrick-DE / C2-logparser
  Parses logs created by Cobalt Strike or Brute Ratel and creates an SQLite DB which can be used to create custom reports.
  ☆23Updated 2 weeks ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆55Updated last year