Alternatives and similar repositories for Alcatraz

Users that are interested in Alcatraz are comparing it to the libraries listed below

• zer0condition / ReverseKit
  x64 Dynamic Reverse Engineering Toolkit
  ☆648Updated last year
• JustasMasiulis / lazy_importer
  library for importing functions from dlls in a hidden, reverse engineer unfriendly way
  ☆1,752Updated last year
• hfiref0x / KDU
  Kernel Driver Utility
  ☆2,126Updated 6 months ago
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,424Updated 2 weeks ago
• XaFF-XaFF / Cronos-Rootkit
  Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
  ☆902Updated 3 years ago
• iPower / KasperskyHook
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,180Updated last year
• JKornev / hidden
  🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
  ☆1,904Updated 2 years ago
• vxlang / vxlang-page
  protector & obfuscator & code virtualizer
  ☆524Updated this week
• es3n1n / obfuscator
  PE bin2bin obfuscator
  ☆690Updated last month
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,098Updated last year
• hasherezade / exe_to_dll
  Converts a EXE into DLL
  ☆1,305Updated last week
• ZeroMemoryEx / Chaos-Rootkit
  Now You See Me, Now You Don't
  ☆939Updated 4 months ago
• d35ha / CallObfuscator
  Obfuscate specific windows apis with different apis
  ☆999Updated 4 years ago
• aaaddress1 / RunPE-In-Memory
  Run a Exe File (PE Module) in memory (like an Application Loader)
  ☆896Updated 4 years ago
• XaFF-XaFF / Black-Angel-Rootkit
  Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
  ☆639Updated last year
• HackOvert / AntiDBG
  A bunch of Windows anti-debugging tricks for x86 and x64.
  ☆785Updated 4 years ago
• wbenny / injdrv
  proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
  ☆1,217Updated last year
• skadro-official / skCrypter
  Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+
  ☆752Updated 3 years ago
• Air14 / HyperHide
  Hypervisor based anti anti debug plugin for x64dbg
  ☆1,383Updated 10 months ago
• am0nsec / HellsGate
  Original C Implementation of the Hell's Gate VX Technique
  ☆1,041Updated 3 years ago
• mrexodia / TitanHide
  Hiding kernel-driver for x86/x64.
  ☆2,289Updated 2 months ago
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆705Updated 10 months ago
• mgeeky / ThreadStackSpoofer
  Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…
  ☆1,120Updated 2 years ago
• Idov31 / Nidhogg
  Nidhogg is an all-in-one simple to use windows kernel rootkit.
  ☆1,975Updated 3 weeks ago
• Cracked5pider / Stardust
  A modern 32/64-bit position independent implant template
  ☆1,210Updated last month
• guidedhacking / GuidedHacking-Injector
  The BEST DLL Injector Library.
  ☆1,145Updated 2 weeks ago
• ac3ss0r / obfusheader.h
  Obfusheader.h is a portable header file for C++14 compile-time obfuscation.
  ☆707Updated 8 months ago
• EquiFox / KsDumper
  Dumping processes using the power of kernel space !
  ☆1,016Updated last year
• matthieu-hackwitharts / Win32_Offensive_Cheatsheet
  Win32 and Kernel abusing techniques for pentesters
  ☆950Updated last year
• jthuraisamy / SysWhispers2
  AV/EDR evasion via direct system calls.
  ☆1,663Updated 2 years ago