Alternatives and similar repositories for talks

Users that are interested in talks are comparing it to the libraries listed below

• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆89Updated 5 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆157Updated 8 months ago
• OtterHacker / Hooker
  ☆107Updated 9 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆117Updated 8 months ago
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆52Updated last year
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆83Updated 3 weeks ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆76Updated 11 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆113Updated 10 months ago
• rbmm / SC
  shell code example
  ☆61Updated 2 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated 11 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆65Updated 3 months ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆64Updated 2 weeks ago
• 0xJs / EnumMitigations
  Reports on Driver, LSASS and other security services mitigations
  ☆27Updated last week
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆102Updated 2 years ago
• passthehashbrowns / VectoredExceptionHandling
  ☆87Updated 11 months ago
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆50Updated 3 years ago
• zzhsec / NlsCodeInjectionThroughRegistry
  Dll injection through code page id modification in registry. Based on jonas lykk research
  ☆17Updated 3 years ago
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆53Updated 6 months ago
• Teach2Breach / hollow_rs
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Updated 5 months ago
• rbmm / TL-TASK
  ☆19Updated 2 months ago
• Slowerzs / CryptDecryptMemory
  ☆30Updated 8 months ago
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆50Updated last year
• ghostbyt3 / BYOVDFinder
  Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.
  ☆60Updated last week
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆61Updated last year
• r0keb / TrashFormer
  A 64 bit executable junk code engine for polymorphic malware.
  ☆64Updated last month
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated last year
• 0prrr / Malwear-Sweet
  Malware?
  ☆72Updated 9 months ago
• decoder-it / RelabelAbuse
  ☆61Updated last year
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆64Updated 5 months ago