Alternatives and similar repositories for funcryptor:

Users that are interested in funcryptor are comparing it to the libraries listed below

• HadarShahar / process-hiders
  Hides processes from the windows task manager using IAT hooking.
  ☆19Updated 3 years ago
• daem0nc0re / HEVD-CSharpKernelPwn
  CSharp Writeups for HackSys Extreme Vulnerable Driver
  ☆43Updated 3 years ago
• therealdreg / nasm_linux_x86_64_pure_sharedlib
  NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
  ☆30Updated last year
• 0vercl0k / CVE-2021-32537
  PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.
  ☆57Updated 3 years ago
• trickster0 / Brave_Browser_1Day_POC
  This is a crash for Brave Browser I found in New Years Eve, used to be a 0day when I found it
  ☆16Updated last year
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆39Updated 3 years ago
• MaherAzzouzi / VMExploitation
  VM escape (QEMU, VirtualBox, VMware)
  ☆17Updated 2 years ago
• bhassani / doublepulsar
  DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)
  ☆26Updated 4 years ago
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆24Updated 4 years ago
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆31Updated 5 years ago
• yardenshafir / conference_talks
  Slides from various conference talks
  ☆36Updated last year
• NtRaiseHardError / Windows-Binary-Exploitation
  Resources from my journey into Windows binary exploitation
  ☆22Updated 6 years ago
• w1u0u1 / kt
  Kernel file/process/object tool
  ☆64Updated 3 years ago
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆31Updated 4 years ago
• EgeBalci / MapPE
  PE file mapping and manipulation package.
  ☆36Updated 2 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 3 years ago
• DimopoulosElias / Primitives
  ☆31Updated 4 years ago
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆22Updated 4 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆65Updated 3 years ago
• sevagas / MagicLib
  Non organized Cpp code files I used for my research on Windows
  ☆18Updated 4 years ago
• whokilleddb / A-Study-in-Obfuscation
  A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines
  ☆41Updated 2 years ago
• tandasat / CVE-2022-25949
  A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.
  ☆36Updated 2 years ago
• xpn / ObjectOverloadingPOC
  ☆59Updated 2 years ago
• ASkyeye / CVE-2018-19320
  Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)
  ☆20Updated 4 years ago
• Jb05s / Exploit-Dev-C
  ☆23Updated 4 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 2 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆38Updated 4 years ago
• EspressoCake / NativeFunctionStaticMap
  A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.
  ☆27Updated 3 years ago
• DownWithUp / CVE-Stockpile
  Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.
  ☆48Updated 4 years ago
• riskydissonance / Ridgway
  A quick tool for hiding a new process running shellcode.
  ☆56Updated 4 years ago