Alternatives and similar repositories for Rustic64

Users that are interested in Rustic64 are comparing it to the libraries listed below

• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆155Updated 10 months ago
• Kudaes / ADPT
  DLL proxying for lazy people
  ☆187Updated 3 weeks ago
• BlackSnufkin / NyxInvoke
  NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…
  ☆225Updated 7 months ago
• djackreuter / rustlualoader
  Shellcode loader that executes embedded Lua from Rust.
  ☆126Updated 9 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆187Updated 7 months ago
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆128Updated this week
• RWXstoned / LdrShuffle
  Code execution/injection technique using DLL PEB module structure manipulation
  ☆176Updated 3 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆94Updated last week
• NtDallas / Draugr
  BOF with Synthetic Stackframe
  ☆167Updated 6 months ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆192Updated 9 months ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆165Updated last month
• Octoberfest7 / enumhandles_BOF
  ☆124Updated last year
• 0xTriboulet / rdll-rs
  A reflective DLL development template for the Rust programming language
  ☆109Updated 4 months ago
• c2pain / RustBird
  Early Bird APC Injection in Rust
  ☆62Updated 11 months ago
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆102Updated 8 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆99Updated 6 months ago
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆105Updated last year
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆114Updated 2 months ago
• whokilleddb / hoontr
  A hoontr must hoont
  ☆94Updated last month
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆136Updated last week
• rbmm / SC_DEMO
  ☆120Updated 6 months ago
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆78Updated 8 months ago
• xforcered / ForsHops
  ForsHops
  ☆149Updated 5 months ago
• m8sec / Dispatch
  Evasive Payload Delivery Server & C2 Redirector
  ☆101Updated last month
• FalconForceTeam / bof-winrm-client
  ☆119Updated 7 months ago
• TwoSevenOneT / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆190Updated last week
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆80Updated 4 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆199Updated 7 months ago
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆168Updated last year
• 0xJs / BYOVD_read_write_primitive
  Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
  ☆176Updated last month