Alternatives and similar repositories for Alcatraz:

Users that are interested in Alcatraz are comparing it to the libraries listed below

• zer0condition / ReverseKit
  x64 Dynamic Reverse Engineering Toolkit
  ☆630Updated last year
• XaFF-XaFF / Cronos-Rootkit
  Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.
  ☆886Updated 2 years ago
• ZeroMemoryEx / Chaos-Rootkit
  Now You See Me, Now You Don't
  ☆915Updated 2 months ago
• JKornev / hidden
  🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
  ☆1,880Updated 2 years ago
• es3n1n / obfuscator
  PE bin2bin obfuscator
  ☆651Updated 2 weeks ago
• JustasMasiulis / lazy_importer
  library for importing functions from dlls in a hidden, reverse engineer unfriendly way
  ☆1,716Updated last year
• iPower / KasperskyHook
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,156Updated 11 months ago
• HackOvert / AntiDBG
  A bunch of Windows anti-debugging tricks for x86 and x64.
  ☆780Updated 3 years ago
• hfiref0x / KDU
  Kernel Driver Utility
  ☆2,069Updated 4 months ago
• am0nsec / HellsGate
  Original C Implementation of the Hell's Gate VX Technique
  ☆1,008Updated 3 years ago
• Cracked5pider / Stardust
  A modern 64-bit position independent implant template
  ☆1,116Updated 9 months ago
• skadro-official / skCrypter
  Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+
  ☆728Updated 3 years ago
• mgeeky / ThreadStackSpoofer
  Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…
  ☆1,087Updated 2 years ago
• d35ha / CallObfuscator
  Obfuscate specific windows apis with different apis
  ☆993Updated 4 years ago
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,392Updated last month
• vxlang / vxlang-page
  protector & obfuscator & code virtualizer
  ☆507Updated this week
• matthieu-hackwitharts / Win32_Offensive_Cheatsheet
  Win32 and Kernel abusing techniques for pentesters
  ☆944Updated last year
• scrt / avcleaner
  C/C++ source obfuscator for antivirus bypass
  ☆1,024Updated 3 years ago
• EquiFox / KsDumper
  Dumping processes using the power of kernel space !
  ☆1,002Updated last year
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆694Updated 8 months ago
• can1357 / NoVmp
  A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
  ☆1,992Updated 3 years ago
• frkngksl / Shoggoth
  Shoggoth: Asmjit Based Polymorphic Encryptor
  ☆706Updated 11 months ago
• memN0ps / redlotus-rs
  Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)
  ☆525Updated last year
• wbenny / injdrv
  proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
  ☆1,200Updated 10 months ago
• aaaddress1 / RunPE-In-Memory
  Run a Exe File (PE Module) in memory (like an Application Loader)
  ☆881Updated 3 years ago
• archercreat / titan
  Titan is a VMProtect devirtualizer
  ☆15Updated last year
• winsiderss / phnt
  Native API header files for the System Informer project.
  ☆1,130Updated last month
• hasherezade / pe_to_shellcode
  Converts PE into a shellcode
  ☆2,478Updated last year
• XaFF-XaFF / Black-Angel-Rootkit
  Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.
  ☆636Updated last year
• crvvdev / MasterHide
  A x64 Windows Rootkit using SSDT or Hypervisor hook
  ☆533Updated 2 months ago