Alternatives and similar repositories for native-dotnet-code-injection

Users that are interested in native-dotnet-code-injection are comparing it to the libraries listed below

• perturbed-platypus / UEFIReadCSharp
  ☆33Updated 6 years ago
• GrayKernel / GrayFrost
  C++ DLL Bootstrapper for spinning up the CLR for C# Payloads
  ☆44Updated 6 years ago
• djhohnstein / CSharpCreateThreadExample
  C# code to run PIC using CreateThread
  ☆17Updated 6 years ago
• perturbed-platypus / UEFIWriteCSharp
  ☆42Updated 6 years ago
• m4mm0n / WinPIT
  Windows Process Injection Toolkit - plain and simple :)
  ☆27Updated 7 years ago
• TheWover / Manager
  Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
  ☆64Updated 5 years ago
• malcomvetter / AntiDebug
  PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
  ☆32Updated 7 years ago
• OmerYa / ROP-From-Zero-to-Nation-State-In-25-Minutes
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆15Updated 4 years ago
• ashr / netrefject
  Inject .Net payloads into other .Net assemblies on disk
  ☆61Updated 5 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• marcin-chwedczuk / dll-inject
  Simple DLL injector written in C#
  ☆24Updated 9 years ago
• FuzzySecurity / DotNetToJScript-LanguageModeBreakout
  ☆26Updated 6 years ago
• TheWover / ModuleMonitor
  Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…
  ☆42Updated 6 years ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆86Updated 2 years ago
• DoubleLabyrinth / ProcessHollowing
  ☆36Updated 6 years ago
• X-C3LL / wfp-reader
  Proof of concept - Covert Channel using Windows Filtering Platform (C#)
  ☆21Updated 4 years ago
• FuzzySecurity / Driver-Template
  Bare template for a Kernel Mode Driver
  ☆51Updated 5 years ago
• jthuraisamy / av-fingerprints
  Antivirus Emulator Fingerprints
  ☆29Updated 6 years ago
• jackullrich / universal-syscall-64
  Resolve syscall numbers at runtime for all Windows versions.
  ☆61Updated 9 months ago
• xfox64x / AppDomainExample
  A .NET tool that uses AppDomain's to enable dynamic execution and escape detection.
  ☆29Updated 5 years ago
• aaaddress1 / dnLauncher
  ☆36Updated 3 years ago
• apt69 / RibeyeSpecial
  medium-rare
  ☆28Updated 5 years ago
• obscuritylabs / PeFixup
  PE File Blessing - To continue or not to continue
  ☆87Updated 5 years ago
• guibacellar / BisquillaRansomware
  The evolution of NxRansomware
  ☆11Updated 6 years ago
• dsnezhkov / RunDllMShim
  Run Managed Assemblies with RunDll
  ☆17Updated 7 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 6 years ago
• TheWover / ProcessManager
  ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.
  ☆13Updated 6 years ago
• trustedsec / inProc_Evade_Get-InjectedThread
  PoC code from blog
  ☆16Updated 5 years ago
• fullmetalcache / CsharpMMNiceness
  Files for generating a C# source file that allows for memory-mapping "niceness" and then executing said "niceness"
  ☆31Updated 6 years ago
• SolomonSklash / UnhookingPOC
  A small commented POC for removing API hooks placed by AV/EDR.
  ☆34Updated 5 years ago