Alternatives and similar repositories for gonut

Users that are interested in gonut are comparing it to the libraries listed below

• parzel / GoBofRunner

  View on GitHub
  A BOF/COFF loader implemented in Go and CGO.
  ☆23Jan 16, 2024Updated 2 years ago
• qwqdanchun / ScreenShot-BOF

  View on GitHub
  ☆41Jul 10, 2023Updated 2 years ago
• KINGSABRI / AssemblyLoader

  View on GitHub
  Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()
  ☆35Feb 10, 2021Updated 5 years ago
• jborean93 / AmsiProvider

  View on GitHub
  Test AMSI Provider implementation in C#
  ☆42Dec 18, 2024Updated last year
• BambiZombie / ThreadlessSpawn

  View on GitHub
  A Simple PoC
  ☆22May 24, 2024Updated last year
• timwhitez / BinHol

  View on GitHub
  Binary Hollowing
  ☆94Sep 10, 2024Updated last year
• thiagomayllart / DarkMelkor

  View on GitHub
  Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.
  ☆28Sep 8, 2021Updated 4 years ago
• EspressoCake / ReadRemoteProcessCommandline_BOF

  View on GitHub
  ☆29May 10, 2024Updated last year
• susMdT / clr-thing

  View on GitHub
  rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.
  ☆17Jan 6, 2024Updated 2 years ago
• mosajjal / dnsconn

  View on GitHub
  DNS Tunneling as net.Conn
  ☆16Dec 22, 2024Updated last year
• D3Ext / Hooka

  View on GitHub
  Shellcode loader generator with multiples features
  ☆507Dec 31, 2024Updated last year
• xzxxzzzz000 / impacket-programming-manual

  View on GitHub
  impacket编程手册
  ☆103Oct 13, 2023Updated 2 years ago
• yzddmr6 / SharpAlternativeShellcodeExec

  View on GitHub
  Alternative Shellcode Execution Via Callbacks Rewrite In C#
  ☆90Apr 28, 2023Updated 2 years ago
• meigui637 / iotsec_tools

  View on GitHub
  ☆15Jul 21, 2025Updated 6 months ago
• INotGreen / Invoke-SharpOffensive

  View on GitHub
  ☆15Nov 19, 2023Updated 2 years ago
• mertdas / RedPersist

  View on GitHub
  ☆222Mar 10, 2024Updated last year
• praetorian-inc / goffloader

  View on GitHub
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆265Feb 22, 2025Updated 11 months ago
• wolfcod / lsassdump

  View on GitHub
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆84Oct 18, 2024Updated last year
• Ridter / atexec-pro

  View on GitHub
  Fileless atexec, no more need for port 445
  ☆404Mar 28, 2024Updated last year
• chroblert / JSigThief

  View on GitHub
  Golang 版SigThief
  ☆85Jan 30, 2022Updated 4 years ago
• EvilBytecode / SsnRetrieval

  View on GitHub
  Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name,…
  ☆15Apr 21, 2025Updated 9 months ago
• Gh057Pr1nc3 / smb_scanner

  View on GitHub
  Tool scan EternalBlue by golang
  ☆21Sep 13, 2019Updated 6 years ago
• d0ub1ec0d3 / SharpEmailC2

  View on GitHub
  ☆18Nov 23, 2023Updated 2 years ago
• VoldeSec / PatchlessInlineExecute-Assembly

  View on GitHub
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆271Apr 17, 2023Updated 2 years ago
• mertdas / SharpLateral

  View on GitHub
  Lateral Movement
  ☆125Nov 14, 2023Updated 2 years ago
• StarfireLab / BrowserPivot

  View on GitHub
  ☆31Oct 23, 2023Updated 2 years ago
• WKL-Sec / LayeredSyscall

  View on GitHub
  Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …
  ☆296Jul 31, 2024Updated last year
• Octoberfest7 / Inline-Execute-PE

  View on GitHub
  Execute unmanaged Windows executables in CobaltStrike Beacons
  ☆714Mar 4, 2023Updated 2 years ago
• M0nster3 / RpcsDemo

  View on GitHub
  关于RPC一些绕EDR的tips
  ☆198Mar 3, 2023Updated 2 years ago
• Niiiiko / Finev10Memshell

  View on GitHub
  针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能（部分环境缺少依赖无法成功）
  ☆24Oct 17, 2023Updated 2 years ago
• EvilBytecode / Evilbytecode-Shellcode-Go-Tactics

  View on GitHub
  A mutliple tactics to execute shellcode in go :}
  ☆23Apr 21, 2025Updated 9 months ago
• mertdas / SharpTerminator

  View on GitHub
  Terminate AV/EDR Processes using kernel driver
  ☆352Jun 12, 2023Updated 2 years ago
• wh0amitz / SharpADWS

  View on GitHub
  Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).
  ☆585Mar 19, 2024Updated last year
• icyguider / LightsOut

  View on GitHub
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆329Jul 15, 2024Updated last year
• mabangde / ChromeHistory_bof

  View on GitHub
  获取chrome 浏览器记录
  ☆43Sep 6, 2025Updated 5 months ago
• NtDallas / Draugr

  View on GitHub
  BOF with Synthetic Stackframe
  ☆220Oct 30, 2025Updated 3 months ago
• bcvgh / deserialization_payload_generator

  View on GitHub
  一个简易的woodpecker反序列化插件
  ☆44Jun 7, 2024Updated last year
• EvilBytecode / Nyx-Full-Dll-Unhook

  View on GitHub
  (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.
  ☆50May 22, 2025Updated 8 months ago
• EvilBytecode / Enable-All-Tokens

  View on GitHub
  Enable-All-Tokens is a Go-based project designed to adjust and enable a list of specified privileges for the current process token on a W…
  ☆10Apr 21, 2025Updated 9 months ago