Alternatives and similar repositories for LexiCrypt:

Users that are interested in LexiCrypt are comparing it to the libraries listed below

• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆105Updated 4 months ago
• NtDallas / Svartalfheim
  Stage 0
  ☆159Updated 4 months ago
• DarkSpaceSecurity / RunAs-Stealer
  RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
  ☆186Updated 2 months ago
• EvilBytecode / Shellcode-Loader
  This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.
  ☆61Updated last week
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆92Updated last week
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆222Updated 4 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆189Updated 3 months ago
• django-88 / NomadScanner
  ☆90Updated 2 weeks ago
• ZERODETECTION / MSC_Dropper
  ☆154Updated 9 months ago
• CICADA8-Research / Penetration
  Our Tips&Tricks
  ☆117Updated 2 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated last year
• deepinstinct / ShimMe
  ☆141Updated 6 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆179Updated 3 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆63Updated 10 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆116Updated 3 weeks ago
• andreisss / Ghosting-AMSI
  Ghosting-AMSI
  ☆159Updated 2 weeks ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆154Updated 5 months ago
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆237Updated last month
• Maldev-Academy / LsassHijackingViaReg
  Injecting DLL into LSASS at boot
  ☆93Updated last week
• tehstoni / tryharder
  C++ Staged Shellcode Loader with Evasion capabilities.
  ☆90Updated 7 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆198Updated 11 months ago
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆163Updated last month
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆151Updated last year
• Maldev-Academy / GhostlyHollowingViaTamperedSyscalls
  Implementing the ghostly hollowing PE injection technique using tampered syscalls.
  ☆147Updated 2 months ago
• CICADA8-Research / COMThanasia
  A set of programs for analyzing common vulnerabilities in COM
  ☆213Updated 8 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆178Updated 3 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆154Updated 4 months ago
• Thunter-HackTeam / EvilentCoerce
  ☆40Updated this week
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated last month
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 9 months ago