Alternatives and similar repositories for shellcode

Users that are interested in shellcode are comparing it to the libraries listed below

• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• DanusMinimus / Injections
  A repository where I share my injection implemintations
  ☆29Updated 5 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 4 years ago
• ethereal-vx / Persistence
  Recreating and reviewing the Windows persistence methods
  ☆39Updated 3 years ago
• connormcgarr / An-Intro-2-Win-ED
  "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …
  ☆41Updated 5 years ago
• perturbed-platypus / LinooxMalware
  ☆28Updated 6 years ago
• redcode-labs / Solaris
  A local LKM rootkit loader/dropper that lists available security mechanisms
  ☆52Updated 4 years ago
• OccamsXor / sim-ba
  (Sim)ulate (Ba)zar Loader
  ☆29Updated 4 years ago
• fozavci / ransoblin
  Ransoblin (Ransomware Bokoblin)
  ☆18Updated 5 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆23Updated 4 years ago
• vineetgaurav / WIN_JELLY
  Windows GPU rootkit PoC by Team Jellyfish
  ☆37Updated 10 years ago
• SolomonSklash / UnhookingPOC
  A small commented POC for removing API hooks placed by AV/EDR.
  ☆34Updated 5 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆25Updated 4 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• vyrus001 / ebowla-2
  reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support
  ☆23Updated 4 years ago
• cys3c / Siofra
  DLL hijacking vulnerability scanner and PE infector tool
  ☆20Updated 8 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• Apr4h / GetInjectedThreads
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆54Updated 4 years ago
• OmerYa / ROP-From-Zero-to-Nation-State-In-25-Minutes
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆15Updated 5 years ago
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆22Updated 5 years ago
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆31Updated 5 years ago
• xoreaxecx / PEmimic
  A PE morphing tool that allows you to mimic one executable file to another.
  ☆11Updated last year
• FuzzySecurity / IBM-RedCON-2020
  IBM RedCON 2020 - Throwing an AquaWrench into the Kernel
  ☆44Updated 5 years ago
• connormcgarr / Kernel-Escalation-of-Privileges-Payloads
  NT AUTHORITY\SYSTEM
  ☆42Updated 5 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆24Updated 5 years ago
• djhohnstein / HookDetector
  Playing with PE's and Building Structures by Hand
  ☆22Updated 3 years ago
• threatexpress / procdot_sandbox
  ProcDot Malware Sandbox
  ☆25Updated 2 months ago
• rmdavy / AmsiPEBWalkVBAx64
  ☆16Updated 5 years ago
• OmerYa / ROPInjector
  Rite Of Passage ROP Injector
  ☆34Updated 6 years ago