Alternatives and similar repositories for skidstorm

Users that are interested in skidstorm are comparing it to the libraries listed below

• OtterHacker / Hooker
  ☆108Updated 10 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆199Updated 7 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆47Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆114Updated last year
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated 5 months ago
• rad9800 / byor
  ☆157Updated 3 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆122Updated 9 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆115Updated last month
• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆110Updated 2 years ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆98Updated 3 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆161Updated 9 months ago
• woldann / NThread
  Stealthy x64 thread manipulation library for calling functions inside target processes without creating remote threads or installing hook…
  ☆55Updated 3 weeks ago
• Kudaes / Eclipse
  Activation Context Hijack
  ☆165Updated last month
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆105Updated last year
• whokilleddb / function-collections
  A collection of PoCs to do common things in unconventional ways
  ☆111Updated 3 weeks ago
• rad9800 / talks
  ☆59Updated 5 months ago
• naksyn / Embedder
  Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies
  ☆120Updated last year
• EvilBytecode / Lifetime-AmsiBypass
  Lifetime AMSI bypass.
  ☆35Updated 5 months ago
• Cracked5pider / CodeCave
  A bunch of scripts and code i wrote.
  ☆144Updated 10 months ago
• KingOfTheNOPs / Get-NetNTLM
  Internal Monologue BOF
  ☆29Updated 8 months ago
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆50Updated 4 months ago
• xforcered / Being-A-Good-CLR-Host
  ☆122Updated 8 months ago
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆52Updated last year
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆155Updated last month
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆73Updated last year
• kapellos / LNKSmuggler
  A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.
  ☆87Updated 8 months ago
• nothingspecialforu / EvtPsst
  EvtPsst
  ☆55Updated last year
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆94Updated 2 weeks ago
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆192Updated 9 months ago
• patrickt2017 / VEHNetLoader
  Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies
  ☆47Updated 2 months ago