Alternatives and similar repositories for HijackLibs:

Users that are interested in HijackLibs are comparing it to the libraries listed below

• NUL0x4C / AtomLdr
  A DLL loader with advanced evasive features
  ☆715Updated 2 years ago
• wavestone-cdt / EDRSandblast
  ☆1,643Updated 8 months ago
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆915Updated last month
• kyleavery / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆933Updated 11 months ago
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆743Updated last year
• RedTeamOperations / Advanced-Process-Injection-Workshop
  ☆750Updated last year
• boku7 / BokuLoader
  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
  ☆1,313Updated last year
• Mr-Un1k0d3r / EDRs
  ☆2,098Updated 2 years ago
• deepinstinct / Dirty-Vanity
  A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…
  ☆635Updated 2 years ago
• CCob / SharpBlock
  A method of bypassing EDR's active projection DLL's by preventing entry point exection
  ☆1,142Updated 4 years ago
• Idov31 / Nidhogg
  Nidhogg is an all-in-one simple to use windows kernel rootkit.
  ☆1,962Updated 3 weeks ago
• Wra7h / FlavorTown
  Various ways to execute shellcode
  ☆490Updated last year
• DragoQCC / CrucibleC2
  A C# Command & Control framework
  ☆999Updated last year
• thefLink / Hunt-Sleeping-Beacons
  Aims to identify sleeping beacons
  ☆588Updated 5 months ago
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆730Updated 5 months ago
• Flangvik / NetLoader
  Loads any C# binary in mem, patching AMSI + ETW.
  ☆824Updated 3 years ago
• klezVirus / SysWhispers3
  SysWhispers on Steroids - AV/EDR evasion via direct system calls.
  ☆1,421Updated 9 months ago
• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆967Updated last year
• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,176Updated last year
• FourCoreLabs / EDRHunt
  Scan installed EDRs and AVs on Windows
  ☆583Updated last year
• itm4n / PPLdump
  Dump the memory of a PPL with a userland exploit
  ☆870Updated 2 years ago
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,218Updated last year
• Cracked5pider / Ekko
  Sleep Obfuscation
  ☆749Updated last year
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,037Updated last year
• Yaxser / Backstab
  A tool to kill antimalware protected processes
  ☆1,441Updated 3 years ago
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆744Updated last year
• NUL0x4C / AtomPePacker
  A Highly capable Pe Packer
  ☆699Updated 2 years ago
• Octoberfest7 / Inline-Execute-PE
  Execute unmanaged Windows executables in CobaltStrike Beacons
  ☆665Updated 2 years ago
• Xacone / BestEdrOfTheMarket
  AV/EDR Evasion Lab for Training & Learning Purposes
  ☆1,246Updated last week
• Cracked5pider / Stardust
  A modern 32/64-bit position independent implant template
  ☆1,198Updated last month