Alternatives and similar repositories for siph0n-rootkit

Users that are interested in siph0n-rootkit are comparing it to the libraries listed below

• cys3c / Siofra
  DLL hijacking vulnerability scanner and PE infector tool
  ☆18Updated 8 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆25Updated 4 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago
• py7hagoras / OfficeMacro64
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆21Updated 5 years ago
• blinkenl1ghts / donloader
  donLoader is a shellcode loader creation tool that uses donut to convert executable payloads into shellcode to evade detection on disk.
  ☆20Updated 3 years ago
• DanusMinimus / Injections
  A repository where I share my injection implemintations
  ☆29Updated 5 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆41Updated 2 years ago
• byt3bl33d3r / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆20Updated 4 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• paranoidninja / 0xdarkvortex-red-team-ttps-part-2
  Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2
  ☆18Updated 4 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 7 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• vletoux / Bluekeep-scanner
  BlueKeep powershell scanner (based on c# code)
  ☆39Updated 5 years ago
• matterpreter / getDA.sh
  Identify common attack paths to get Domain Administrator
  ☆22Updated 6 years ago
• tobiohlala / PSMemory
  Automation Capable Multi Search 64 Bit Windows Memory Scanner
  ☆28Updated 4 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 4 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆86Updated 2 years ago
• klecko / Rootkit
  Let's try to create a rootkit!
  ☆20Updated 5 years ago
• shantanu561993 / heroku-reverse-proxy
  Spin up a reverse proxy quickly on Heroku
  ☆14Updated 4 years ago
• xenoscr / compressedCredBandit
  A variation CredBandit that uses compression to reduce the size of the data that must be trasnmitted.
  ☆19Updated 4 years ago
• offsecginger / PythonAESObfuscate
  Obfuscates a Python Script and the accompanying Shellcode.
  ☆57Updated 5 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• ahhh / GoRedShell
  A cross platform tool for verifying credentials and executing single commands
  ☆32Updated 6 years ago
• sneakerhax / C2PE
  Red Team C2 and Post Exploitation code
  ☆36Updated 2 months ago
• limbenjamin / LogServiceCrash
  POC code to crash Windows Event Logger Service
  ☆27Updated 4 years ago
• rvrsh3ll / FlaskRedirectorProtector
  Protect your servers with a secret header
  ☆29Updated 5 years ago
• DimopoulosElias / SimpleMimikatzObfuscator
  A set of commands to bypass Defender (and some other AVs)
  ☆20Updated 6 years ago