Alternatives and similar repositories for keebcap:

Users that are interested in keebcap are comparing it to the libraries listed below

• decoder-it / RelabelAbuse
  ☆60Updated 8 months ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆73Updated 10 months ago
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆50Updated 3 months ago
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆70Updated last month
• passthehashbrowns / VectoredExceptionHandling
  ☆84Updated 6 months ago
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆45Updated 2 years ago
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆125Updated 6 months ago
• ngn13 / shrk
  LKM rootkit for modern kernels, with DNS C2 and a simple web interface
  ☆64Updated this week
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆74Updated last year
• JanielDary / weetabix
  A C++ PoC implementation for enumerating Windows Fibers directly from memory
  ☆17Updated 9 months ago
• lap1nou / CLR_Heap_encryption
  ☆97Updated last year
• eversinc33 / GpuDecryptShellcode
  XOR decrypting shellcode using the GPU with OpenCL.
  ☆93Updated last year
• mansk1es / GhostFart
  ☆134Updated last year
• RedTeamOperations / VEH-PoC
  ☆112Updated 2 years ago
• NtDallas / Fenrir
  stack spoofing
  ☆80Updated 3 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆93Updated last month
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆99Updated last year
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆53Updated 3 months ago
• fortra / CVE-2024-6769
  Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)
  ☆61Updated 4 months ago
• gmh5225 / rust-mordor-rs
  Rusty Hell's Gate / Halo's Gate / Tartarus' Gate / FreshyCalls / Syswhispers2 Library
  ☆26Updated 2 years ago
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆54Updated last month
• uf0o / windows-ps-callbacks-experiments
  Files for http://blog.deniable.org/posts/windows-callbacks/
  ☆69Updated 2 years ago
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆93Updated 10 months ago
• 0prrr / Malwear-Sweet
  Malware?
  ☆69Updated 4 months ago
• NVISOsecurity / Interceptor
  Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
  ☆122Updated 2 years ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆70Updated last year
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆58Updated last year
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆51Updated last month