Alternatives and similar repositories for gonut:

Users that are interested in gonut are comparing it to the libraries listed below

• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Updated 2 years ago
• D00Movenok / goMalleable
  🔎🪲 Malleable C2 profiles parser and assembler written in golang
  ☆65Updated 11 months ago
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆51Updated 2 years ago
• Binject / exec2shell
  Extracts TEXT section of a PE, ELF, or Mach-O executable to shellcode
  ☆103Updated last year
• CBLabresearch / PhantomExecution
  Self Cleanup in post-ex job
  ☆55Updated 7 months ago
• Adaptix-Framework / Extension-Kit
  AdaptixFramework Extension Kit
  ☆55Updated this week
• secur30nly / go-self-delete
  Go implementation of the self-deletion of an running executable from disk
  ☆107Updated last year
• BambiZombie / ThreadlessSpawn
  A Simple PoC
  ☆21Updated 10 months ago
• WafflesExploits / CobaltStrike-YARA-Bypass-f0b627fc
  Repository of scripts from my blog post on bypassing the YARA rule Windows_Trojan_CobaltStrike_f0b627fc by generating alternative shellco…
  ☆37Updated 6 months ago
• ShadowMccc / MemoryEvasion
  A Cobalt Strike memory evasion loader for redteamers
  ☆99Updated 2 years ago
• kyxiaxiang / AV_EDR_EPP_Notes
  ☆47Updated last year
• timwhitez / ReturnGate
  ReturnGate, just like HellsGate.
  ☆66Updated 2 years ago
• yzddmr6 / SharpAlternativeShellcodeExec
  Alternative Shellcode Execution Via Callbacks Rewrite In C#
  ☆88Updated last year
• evilashz / Visual-Studio-BOF-template
  more conveniently Visual-Studio-BOF-template
  ☆62Updated last year
• XiaoliChan / LDAPShell
  A wrapper of ldap_shell.py module which in ntlmrelayx
  ☆62Updated 2 years ago
• HackerCalico / SigLocator
  Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.
  ☆38Updated 5 months ago
• 0x00Check / Amaterasu
  Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…
  ☆71Updated last year
• kyxiaxiang / CrackSleeve4.9
  ☆40Updated last year
• dreamkinn / go-ThreadlessInject
  Golang implementation of @CCob's C# ThreadlessInject
  ☆32Updated 11 months ago
• timwhitez / Doge-Assembly
  Golang evasion tool, execute-assembly .Net file
  ☆97Updated 2 years ago
• timwhitez / Doge-CLRLoad
  load assembly executable file in memory
  ☆40Updated last year
• Octoberfest7 / KillDefender_BOF
  Beacon Object File implementation of pwn1sher's KillDefender
  ☆65Updated 2 years ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆58Updated last year
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆65Updated 2 years ago
• Ridter / netsync
  Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.
  ☆48Updated last month
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆54Updated last year
• kyxiaxiang / Safetasklist
  Help red teams find opsec processes during engagements
  ☆36Updated 4 months ago
• Ridter / MSSQL_CLR
  MSSQL CLR for pentest.
  ☆53Updated last year
• outflanknl / linux_bof_template
  ELF Beacon Object File (BOF) Template
  ☆50Updated 5 months ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆43Updated 2 years ago