Alternatives and similar repositories for talks

Users that are interested in talks are comparing it to the libraries listed below

• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆159Updated 8 months ago
• OtterHacker / Hooker
  ☆108Updated 9 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆119Updated 8 months ago
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆53Updated last year
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆76Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆114Updated 11 months ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆101Updated 2 years ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• rbmm / SC
  shell code example
  ☆62Updated 3 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆92Updated 6 months ago
• 0xJs / EnumMitigations
  Reports on Driver, LSASS and other security services mitigations
  ☆31Updated last week
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆87Updated last month
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated last year
• passthehashbrowns / VectoredExceptionHandling
  ☆88Updated last year
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆64Updated 6 months ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆65Updated last month
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆49Updated 3 years ago
• decoder-it / RelabelAbuse
  ☆61Updated last year
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆22Updated this week
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆51Updated last year
• Slowerzs / CryptDecryptMemory
  ☆31Updated 8 months ago
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆50Updated last year
• 0prrr / Malwear-Sweet
  Malware?
  ☆74Updated 10 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆81Updated 2 years ago
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆99Updated last year
• lleon1435 / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆14Updated 2 years ago
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆63Updated last year
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆67Updated 4 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆157Updated 8 months ago
• 0xjbb / vehspoof
  Callstack spoofing using a VEH because VEH all the things.
  ☆23Updated 5 months ago