Alternatives and similar repositories for keebcap

Users that are interested in keebcap are comparing it to the libraries listed below

• susMdT / ForsHops
  ForsHops
  ☆53Updated 2 months ago
• decoder-it / RelabelAbuse
  ☆61Updated last year
• rbmm / SC
  shell code example
  ☆49Updated 3 weeks ago
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆130Updated 9 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆63Updated last month
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆70Updated this week
• lap1nou / CLR_Heap_encryption
  ☆99Updated last year
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆72Updated 2 months ago
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆77Updated last year
• RedTeamOperations / VEH-PoC
  ☆115Updated 2 years ago
• passthehashbrowns / VectoredExceptionHandling
  ☆86Updated 9 months ago
• HulkOperator / CallStackSpoofer
  ☆31Updated 5 months ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆76Updated last month
• zzhsec / NlsCodeInjectionThroughRegistry
  Dll injection through code page id modification in registry. Based on jonas lykk research
  ☆17Updated 2 years ago
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆51Updated 4 months ago
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆71Updated 6 months ago
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆49Updated last year
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆123Updated 4 months ago
• 0xPrimo / KMDllInjector
  kernel-mode DLL Injector
  ☆82Updated last month
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆61Updated last year
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆48Updated last year
• Octoberfest7 / enumhandles_BOF
  ☆125Updated 9 months ago
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆75Updated 5 months ago
• mansk1es / GhostFart
  ☆136Updated last year
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated 2 years ago
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated 10 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆78Updated 3 months ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆58Updated 6 months ago
• Retr0-code / hash-dumper
  Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…
  ☆62Updated last year
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆89Updated 11 months ago