Alternatives and similar repositories for SIGNATURE_TYPE_LUASTANDALONE

Users that are interested in SIGNATURE_TYPE_LUASTANDALONE are comparing it to the libraries listed below

• rbmm / LdrpKernel32DllName
  ☆90Updated last year
• elastic / PPLGuard
  ☆70Updated last year
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆63Updated last year
• t0-retooling / defender-recon24
  ☆59Updated last year
• xpn / ObjectOverloadingPOC
  ☆62Updated 4 years ago
• preludeorg / ThreatIntelligenceConsumer
  Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…
  ☆63Updated 3 weeks ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆81Updated 4 years ago
• listinvest / undonut
  Unpacker for donut shellcode
  ☆21Updated 5 years ago
• hongson11698 / defender-database-extract
  defender_database
  ☆24Updated 2 years ago
• Crypt0s / Ekko_CFG_Bypass
  A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process
  ☆113Updated 3 years ago
• ReCryptLLC / CVE-2022-42045
  ☆39Updated 2 years ago
• MMitsuha / Tajimari
  the Open Source and Pure C++ Packer for eXecutables
  ☆21Updated 2 years ago
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆57Updated last week
• trustedsec / Windows-MS-LSAT-RPC-Example
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆28Updated 2 years ago
• boku7 / x64win-DynamicNoNull-WinExec-PopCalc-Shellcode
  64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free
  ☆65Updated 2 years ago
• RobinFassinaMoschiniForks / TransitionalPeriod
  Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits
  ☆31Updated 3 years ago
• bananabr / Givemeahand
  A PoC tool for exploiting leaked process and thread handles
  ☆32Updated last year
• aahmad097 / Test004
  Persistence via Shell Extensions
  ☆64Updated 2 years ago
• pr0tean / TelemetrySourcerer-patched
  Tiny driver patch to allow kernel callbacks to work on Win10 21h1
  ☆34Updated 4 years ago
• Wra7h / PEResourceInject
  ☆60Updated 3 years ago
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆76Updated last year
• jonny-jhnson / RandomPOCs
  Repo that holds random POCs
  ☆52Updated 2 years ago
• EvilBytecode / Eset-Unload
  Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …
  ☆12Updated 9 months ago
• bytewreck / hook-buster
  Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.
  ☆36Updated 3 years ago
• hid3rx / GhostWriting
  ☆34Updated 2 years ago
• waleedassar / ALPC_CLIENT_SERVER
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Updated 4 years ago
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆39Updated 9 months ago
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆53Updated last year
• eversinc33 / GpuDecryptShellcode
  XOR decrypting shellcode using the GPU with OpenCL.
  ☆120Updated 8 months ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 4 years ago