Alternatives and similar repositories for skidstorm

Users that are interested in skidstorm are comparing it to the libraries listed below

• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆162Updated 11 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆117Updated last year
• Kudaes / Eclipse
  Activation Context Hijack
  ☆170Updated 3 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆121Updated 11 months ago
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆73Updated last year
• OtterHacker / Hooker
  ☆108Updated last year
• woldann / NThread
  Stealthy x64 thread manipulation library for calling functions inside target processes without creating remote threads or installing hook…
  ☆56Updated last month
• rad9800 / talks
  ☆60Updated 6 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆131Updated 2 months ago
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆120Updated 2 months ago
• Cracked5pider / CodeCave
  A bunch of scripts and code i wrote.
  ☆145Updated last year
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆63Updated 9 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆104Updated 5 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆200Updated 9 months ago
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆104Updated last year
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆100Updated 7 months ago
• itaymigdal / PichichiH0ll0wer
  Nim process hollowing loader
  ☆60Updated 3 months ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆84Updated last year
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆66Updated 3 weeks ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆120Updated 6 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• CarlosG13 / Process-Hypnosis-Debugger-assisted-control-flow-hijack
  ☆39Updated last year
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆48Updated last year
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆50Updated 5 months ago
• 0xtengu / Cloak64
  ☆45Updated last month
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆94Updated 2 months ago
• Slowerzs / CryptDecryptMemory
  ☆31Updated 11 months ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆43Updated 3 weeks ago
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆106Updated 9 months ago
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆51Updated last year