Alternatives and similar repositories for onefile_python:

Users that are interested in onefile_python are comparing it to the libraries listed below

• zimnyaa / fiber-stager
  A simple Nim stager (w/ fiber execution)
  ☆16Updated 2 years ago
• oXis / NimWinAPICustom
  Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim
  ☆32Updated 3 years ago
• m8sec / EAPrimer
  C# project to Reflectively load .Net assemblies in memory
  ☆17Updated 6 months ago
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆28Updated 3 years ago
• OffenseTeacher / Steganim
  ☆47Updated last year
• jrrgimenez / Nim-HalosGate-Injector
  Shellcode Injector that obtains system call opcodes using the Halo's Gate method to evade EDR Hooks.
  ☆19Updated 2 years ago
• plackyhacker / AMSI-Bypass
  Another AMSI bypass - but in C++.
  ☆23Updated last year
• thesnoom / extps-cobalt-strike-bof
  Extended Process List (Search functionality)
  ☆29Updated 3 years ago
• S3cur3Th1sSh1t / NimShellcodeFluctuation
  ShellcodeFluctuation PoC ported to Nim
  ☆75Updated 2 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated 2 years ago
• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated last year
• jnqpblc / SharpReg
  SharpReg is a simple code set to interact with the Remote Registry service api and is compatible with Cobalt Strike.
  ☆26Updated 4 years ago
• guervild / InlineZipper
  ☆22Updated 2 years ago
• zimnyaa / nim-noload-dll-hollowing
  Unused DLL hollowing PoC in Nim
  ☆16Updated 2 years ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• deepinstinct / VSTO-POC
  A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously
  ☆31Updated last year
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆54Updated 2 years ago
• zimnyaa / inmembof.py
  A small example of loading BOFs in Python with pure reflection
  ☆17Updated last year
• passthehashbrowns / DInvokeProcessHollowing
  ☆26Updated 4 years ago
• improsec / CaddyStager
  ☆35Updated 2 years ago
• KINGSABRI / DotNetToJScriptMini
  A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.
  ☆47Updated 3 years ago
• trainr3kt / Readfile_BoF
  ☆19Updated 2 years ago
• realoriginal / krbdump
  A way to extract tickets in case I need to purge and restore tickets on the fly.
  ☆17Updated 8 months ago
• passthehashbrowns / suspendedunhook
  ☆37Updated 3 years ago
• kensh1ro / NimTeleBackdoor
  a simple backdoor in Nim
  ☆17Updated 3 years ago
• maninwire / nimLoader
  load dumped csharp binaries as assemblies and launch them in memory
  ☆26Updated 11 months ago
• Allevon412 / BreadManModuleStomping
  ☆42Updated last year
• mobdk / Sigma
  Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
  ☆14Updated 3 years ago