Alternatives and similar repositories for SyscallHookBypass

Users that are interested in SyscallHookBypass are comparing it to the libraries listed below

• x0reaxeax / SysCook64

  View on GitHub
  Indirect Syscall invocation via thread hijacking
  ☆26May 5, 2023Updated 2 years ago
• x0reaxeax / Fetch-n-Exec

  View on GitHub
  An x64 binary executing code that's not inside of it.
  ☆17Feb 28, 2023Updated 2 years ago
• florylsk / AmsiBypass123

  View on GitHub
  ☆13Feb 25, 2023Updated 2 years ago
• lennyRBLX / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd
  ☆14Jul 9, 2020Updated 5 years ago
• demon-i386 / binarybinarybinary

  View on GitHub
  some AV / EDR / analysis studies
  ☆10May 21, 2023Updated 2 years ago
• Nariod / ronflex

  View on GitHub
  Attempts to suspend all known AV/EDRs processes on Windows using syscalls and the undocumented NtSuspendProcess API. Made with <3 for pen…
  ☆13May 11, 2023Updated 2 years ago
• redt1de / MaldevEDR

  View on GitHub
  EDR/AV Simulation for Malware Development
  ☆13Oct 21, 2023Updated 2 years ago
• x0reaxeax / rwlazer64

  View on GitHub
  Win64 UEFI Driver-based tool for unrestricted memory R/W
  ☆30Feb 8, 2022Updated 4 years ago
• hiatus / NtGate

  View on GitHub
  Transparently call NTAPI via Halo's Gate with indirect syscalls.
  ☆15Apr 26, 2024Updated last year
• zha0 / BloodyAv

  View on GitHub
  BloodyAv is Custom Shell Code loader to Bypass Av and Edr.
  ☆14Mar 21, 2022Updated 3 years ago
• janoglezcampos / FindItByCalls

  View on GitHub
  Hacky code for extracting calls in DLLs by function
  ☆17Jun 3, 2022Updated 3 years ago
• mis-team / rsockspipe

  View on GitHub
  Tool for pivoting over SMB pipes
  ☆16Jul 20, 2019Updated 6 years ago
• elddy / Windows-NTAPI-Injector

  View on GitHub
  Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses
  ☆40Dec 9, 2020Updated 5 years ago
• x0reaxeax / SilentWrite

  View on GitHub
  PoC arbitrary WPM without a process handle
  ☆21Jul 22, 2023Updated 2 years ago
• oldboy21 / CGPL

  View on GitHub
  Yet, Another Packer/Loader
  ☆25Feb 26, 2023Updated 2 years ago
• SolomonSklash / TokenStealingDriver

  View on GitHub
  ☆22Jul 29, 2021Updated 4 years ago
• AbdulRhmanAlfaifi / lnk_parser

  View on GitHub
  lnk_parser is a full rust implementation to parse windows LNK files
  ☆22Jul 12, 2025Updated 7 months ago
• Cesusius / Dse-Patcher

  View on GitHub
  Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData
  ☆22Feb 9, 2024Updated 2 years ago
• ProDefense / Avocado

  View on GitHub
  Avocado is a powerful C2 framework written in Python with stageless implants in Rust. Avocado's implant runs seamlessly on both Linux and…
  ☆26Apr 28, 2023Updated 2 years ago
• boku7 / x64win-DynamicNoNull-WinExec-PopCalc-Shellcode

  View on GitHub
  64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free
  ☆65Mar 8, 2023Updated 2 years ago
• florylsk / active-directory-hacktools

  View on GitHub
  Small collection of Active Directory pentesting tools.
  ☆32Jan 29, 2024Updated 2 years ago
• mis-team / rsockstun

  View on GitHub
  reverse socks tunneler with ntlm and proxy support
  ☆28Nov 24, 2019Updated 6 years ago
• neex / tcp-over-http

  View on GitHub
  Shadowsocks-like proxy written in Go
  ☆37Dec 18, 2019Updated 6 years ago
• fortra / Reversing-and-Exploiting-with-Free-Tools-Series

  View on GitHub
  Tips and tricks on reversing and exploiting Windows using free and easy to get tools.
  ☆33Mar 21, 2023Updated 2 years ago
• H4K6 / FilelessPELoader

  View on GitHub
  将PE文件进行AES加密，然后从远程拉取加载内存中实现免杀
  ☆37Mar 1, 2023Updated 2 years ago
• peiga / DumpThatLSASS

  View on GitHub
  Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation
  ☆31Sep 24, 2022Updated 3 years ago
• nyaThoi / nEShit

  View on GitHub
  External Hack for Aura Kingdom TO
  ☆14Feb 17, 2023Updated 2 years ago
• VirtualAlllocEx / Direct-Syscalls-A-journey-from-high-to-low

  View on GitHub
  Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low…
  ☆147May 6, 2023Updated 2 years ago
• S12cybersecurity / LokiRAT

  View on GitHub
  Multi-component Remote Access Trojan: C++ client (victim), C# server, and Angular frontend.
  ☆49May 4, 2025Updated 9 months ago
• inb1ts / birdnet-poc

  View on GitHub
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆41Jul 9, 2023Updated 2 years ago
• rogxo / DisableDSE

  View on GitHub
  A method to Disable DSE using .data ptr hooks
  ☆38Feb 1, 2024Updated 2 years ago
• aaaddress1 / masqueradeCmdline

  View on GitHub
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆41Dec 31, 2020Updated 5 years ago
• benheise / ANGRYORCHARD

  View on GitHub
  A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
  ☆52Sep 20, 2022Updated 3 years ago
• TempAccountNull / lily

  View on GitHub
  ☆11May 1, 2022Updated 3 years ago
• sinfulz / JustGetDA

  View on GitHub
  JustGetDA, a cheat sheet which will aid you through internal network & red team engagements.
  ☆13Jul 24, 2023Updated 2 years ago
• Ost4r4 / MaltegoTelegramScraper

  View on GitHub
  Telegram scraper for Maltego, allows from an Alias entity to find all forwarded accounts
  ☆11Apr 25, 2023Updated 2 years ago
• sAjibuu / Burp_Collector

  View on GitHub
  A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.
  ☆10Apr 8, 2024Updated last year
• Arty3 / Battleye-HWID-Spoofer

  View on GitHub
  Battleye Hardware ID Spoofer Kernel-Mode Driver + Visualizer
  ☆18Aug 30, 2025Updated 5 months ago
• thedemons / Tokio

  View on GitHub
  An ambitious project to make an easy-to-use but powerful reverse-engineering tool.
  ☆10Oct 13, 2022Updated 3 years ago