Alternatives and similar repositories for relocatable

Users that are interested in relocatable are comparing it to the libraries listed below

• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆93Updated this week
• susMdT / ForsHops
  ForsHops
  ☆58Updated 5 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆99Updated 6 months ago
• rbmm / SC
  shell code example
  ☆62Updated 3 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆93Updated last year
• NoahKirchner / speedloader
  Rust template/library for implementing your own COFF loader
  ☆69Updated 7 months ago
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆105Updated last year
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆120Updated 9 months ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆43Updated last year
• Teach2Breach / stargate
  Locate dlls and function addresses without PEB Walk and EAT parsing
  ☆87Updated last month
• passthehashbrowns / Being-A-Good-CLR-Host
  ☆78Updated 7 months ago
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆128Updated this week
• xforcered / Being-A-Good-CLR-Host
  ☆122Updated 7 months ago
• lap1nou / CLR_Heap_encryption
  ☆100Updated last year
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆65Updated 6 months ago
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆38Updated last year
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆161Updated 9 months ago
• Teach2Breach / noldr
  Dynamically resolve API function addresses at runtime in a secure manner.
  ☆68Updated 4 months ago
• Teach2Breach / dll2shell
  converts sRDI compatible dlls to shellcode
  ☆31Updated 7 months ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆84Updated last year
• 2x7EQ13 / CreateProcessAsPPL
  This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
  ☆182Updated this week
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆74Updated 8 months ago
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆131Updated last year
• Teach2Breach / hollow_rs
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Updated 7 months ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆65Updated last month
• decoder-it / RelabelAbuse
  ☆61Updated last year
• Mr-Un1k0d3r / DotnetNoVirtualProtectShellcodeLoader
  load shellcode without P/D Invoke and VirtualProtect call.
  ☆115Updated last week
• Teach2Breach / moonwalk
  find dll base addresses without PEB WALK
  ☆144Updated 2 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• JayGLXR / Rusty-Stardust
  A modern Rust implementation of the original Stardust project, providing a sophisticated 32/64-bit shellcode template that features posit…
  ☆58Updated 5 months ago