Alternatives and similar repositories for winsos-poc:

Users that are interested in winsos-poc are comparing it to the libraries listed below

• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆76Updated last year
• lap1nou / CLR_Heap_encryption
  ☆96Updated last year
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆69Updated last year
• realoriginal / shellcode-template
  A cmkr based win32 shellcode template for a unified build platform and more production friendly structure/testing.
  ☆66Updated 2 months ago
• decoder-it / RelabelAbuse
  ☆60Updated 8 months ago
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆51Updated 5 months ago
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆125Updated 5 months ago
• xpn / CloudInject
  ☆106Updated 2 months ago
• x0reaxeax / PageSplit
  Splitting and executing shellcode across multiple pages
  ☆99Updated last year
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆68Updated 3 weeks ago
• mansk1es / GhostFart
  ☆134Updated last year
• NtDallas / sharp-execute
  Execute dotnet app from unmanaged process
  ☆68Updated last month
• 0x00Check / ExploitLeakedHandle
  Identify and exploit leaked handles for local privilege escalation.
  ☆105Updated last year
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• realoriginal / grimreaper
  A improved memory obfuscation primitive using a combination of special and 'normal' Asynchronous Procedural Calls
  ☆105Updated 4 months ago
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆106Updated 6 months ago
• Kudaes / CustomEntryPoint
  Select any exported function in a dll as the new dll's entry point.
  ☆75Updated 3 months ago
• securifybv / BOFRyptor
  ☆120Updated last year
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆103Updated 3 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆83Updated 5 months ago
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆98Updated last year
• trustedsec / CS_COFFLoader
  ☆127Updated last year
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆149Updated last year
• ZeroPointSecurity / PInvoke
  ☆53Updated 2 weeks ago
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆77Updated 3 months ago
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆39Updated last year
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆61Updated 7 months ago
• xalicex / LOLDrivers_finder
  ☆73Updated last year
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆75Updated last year
• xforcered / Being-A-Good-CLR-Host
  ☆87Updated 2 weeks ago