Alternatives and similar repositories for winhook:

Users that are interested in winhook are comparing it to the libraries listed below

• 17ms / airborne
  Shellcode reflective DLL injection in Rust
  ☆19Updated last year
• diljith369 / nim4Pentest
  My nim learning experiments
  ☆11Updated 2 years ago
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆17Updated last year
• thalpius / Microsoft-Defender-for-Identity-Encrypted-Password
  ☆36Updated 10 months ago
• Ne0nd0g / go-coff
  Load and execute a common object file format (COFF) in the current process
  ☆28Updated last year
• deepinstinct / VSTO-POC
  A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously
  ☆31Updated 2 years ago
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• dxxzero / rusty_drivers
  BYOVD collection
  ☆23Updated last year
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆31Updated 5 years ago
• wsummerhill / IPv4Fuscation-Encrypted
  ☆19Updated last year
• ricardojoserf / http-protocol-exfil
  Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)
  ☆23Updated 3 years ago
• MythicC2Profiles / http
  Simple HTTP async comms using standard GET/POST requests
  ☆32Updated last month
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 2 years ago
• atabetnouhaila / API-hashing
  ☆18Updated 6 months ago
• ricardojoserf / NativeNtdllRemap
  Remap ntdll.dll using only NTAPI functions with a suspended process
  ☆20Updated last week
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆20Updated 2 years ago
• shlyuz / teamserver
  ☆12Updated 2 years ago
• cocomelonc / 2022-04-02-malware-injection-18
  Find kernel32 base and API addresses. Simple C++ implementation
  ☆24Updated 3 years ago
• knight0x07 / WinRAR-Code-Execution-Vulnerability-CVE-2023-38831
  Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)
  ☆41Updated last year
• snovvcrash / RemoteRegSave
  A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host
  ☆39Updated last year
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated 9 months ago
• zimnyaa / LEOPARDSEAL
  A simple Linux in-memory .so loader
  ☆30Updated 2 years ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆32Updated 2 years ago
• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆29Updated last month
• matro7sh / havoc-gosecdump
  ☆18Updated 4 months ago
• CodeXTF2 / HavocNotion
  A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …
  ☆85Updated 2 years ago
• Allevon412 / BreadBear
  A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/
  ☆31Updated last year
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆46Updated 2 years ago
• Adepts-Of-0xCC / SnoopyOwl
  ☆48Updated 3 years ago
• ExAndroidDev / rtlo-attack
  Right-To-Left Override POC
  ☆34Updated 3 years ago