Alternatives and similar repositories for XenoStealerLib

Users that are interested in XenoStealerLib are comparing it to the libraries listed below

• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆18Updated 4 years ago
• jsecu / ElevatedEvents
  ☆31Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆47Updated 2 years ago
• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆37Updated 4 months ago
• RCStep / RedTeam_Tools_n_Stuff
  Collection of self-made Red Team tools that have come in handy
  ☆12Updated last year
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 3 years ago
• ASkyeye / CobaltPatch
  Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…
  ☆40Updated 5 years ago
• 0x3rhy / GetClipboard
  Cobalt Strike Get clipboard plugin
  ☆15Updated 2 years ago
• artemy-ccrsky / DecryptRecoveryLAPS_RPC
  A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.
  ☆26Updated 3 months ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆55Updated 3 years ago
• MaorSabag / fileSearcher
  A simple BOF (Beacon Object File) to search files in the system
  ☆14Updated last year
• ProcessusT / HavocHub
  PoC for a Havoc agent/handler setup with all C2 traffic routed through GitHub. No direct connections: all commands and responses are rela…
  ☆39Updated 2 months ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆55Updated 2 years ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆48Updated last year
• DragoQCC / ShellcodeEncryption
  Used to AES encrypt shellcode, can take password or use built in default should be used with Iron Injector to generate and execute shellc…
  ☆15Updated 3 years ago
• DragoQCC / Iron-Injector
  Interactive program for loading AES encrypted shellcode with Dynamic Invocation, and interactive .NET assemblies in memory.
  ☆13Updated 3 years ago
• BOFs / BOFs
  Beacon Object Files.
  ☆37Updated last year
• EspressoCake / Toggle_Token_Privileges_BOF
  Syscall BOF to arbitrarily add/detract process token privilege rights.
  ☆58Updated last year
• Gr1mmie / SharpShellCodeObfus
  Caeser Cipher your shellcode!
  ☆21Updated 3 years ago
• sliverarmory / COFFLoader
  ☆45Updated 5 months ago
• EspressoCake / DLL-Exports-Extraction-BOF
  DLL Exports Extraction BOF with optional NTFS transactions.
  ☆82Updated 3 years ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆22Updated 2 years ago
• cocomelonc / 2022-04-02-malware-injection-18
  Find kernel32 base and API addresses. Simple C++ implementation
  ☆24Updated 3 years ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆37Updated 3 years ago
• FuzzySecurity / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆33Updated 2 years ago
• timwhitez / Doge-PX
  DPX - the Doge Packer for eXecutables
  ☆29Updated 3 years ago
• MrAle98 / BOF-RunPE
  ☆56Updated 2 years ago
• S12cybersecurity / ETWEvasionToolkit
  Toolkit of Projects to attack and evade Event Trace for Windows
  ☆17Updated 3 weeks ago
• An00bRektn / gopher47
  A third-party Gopher Assassin for the Havoc Framework.
  ☆44Updated last year
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆77Updated 2 years ago