Alternatives and similar repositories for Anti-Sandbox

Users that are interested in Anti-Sandbox are comparing it to the libraries listed below

• T0ngF0ngnie / DInvokeFrp

  View on GitHub
  内存加载FRP
  ☆10Sep 11, 2023Updated 2 years ago
• fei9747 / Awesome-CobaltStrike

  View on GitHub
  ☆15Feb 6, 2023Updated 3 years ago
• M0nster3 / RpcsDemo

  View on GitHub
  关于RPC一些绕EDR的tips
  ☆198Mar 3, 2023Updated 2 years ago
• badboycxcc / Beacon

  View on GitHub
  重构Beacon
  ☆15Aug 25, 2024Updated last year
• mastersir-lab / DecryptOA

  View on GitHub
  OA系统解密小工具
  ☆47Dec 10, 2023Updated 2 years ago
• Hanamaki99 / SharpFrp

  View on GitHub
  ☆19Feb 27, 2022Updated 3 years ago
• Qi4l-Labs / Fusion

  View on GitHub
  A cross platform C2/post-exploitation framework
  ☆55Nov 2, 2025Updated 3 months ago
• yj94 / BinarySpy

  View on GitHub
  一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.
  ☆557May 30, 2025Updated 8 months ago
• yinsel / ShellcodeDev

  View on GitHub
  基于个人习惯使用C/C++的shellcode开发项目模板
  ☆50Aug 20, 2024Updated last year
• Zephyr236 / CTinyBeacon

  View on GitHub
  ☆17Jun 16, 2025Updated 7 months ago
• Neo-Maoku / DllMainHijacking

  View on GitHub
  Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode
  ☆201May 28, 2024Updated last year
• NanoWraith / BlindEdr

  View on GitHub
  A Blind EDR Project for Educational Purposes
  ☆98Jan 18, 2025Updated last year
• P0x00 / ASPX_Bonanza

  View on GitHub
  ASPX ShellCode Loader
  ☆54Jan 27, 2024Updated 2 years ago
• Jumbo-WJB / portreuse

  View on GitHub
  portreuse reuseport 端口复用
  ☆61Aug 27, 2023Updated 2 years ago
• Neo-Maoku / SearchAvailableExe

  View on GitHub
  寻找可利用的白文件
  ☆556Aug 18, 2025Updated 5 months ago
• yueshenyuan / JS-share

  View on GitHub
  一款支持微信和QQ、UC手机浏览器的分享工具，可以自定义标题、链接、icon等
  ☆12Apr 19, 2018Updated 7 years ago
• jjjj1029056414 / selfpoc

  View on GitHub
  自己写的一些poc脚本
  ☆13Feb 23, 2024Updated last year
• BishopFox / sliver-wasm-stager

  View on GitHub
  A stager and implant that executes remote Web Assembly
  ☆33Feb 4, 2026Updated last week
• myzxcg / RealBlindingEDR

  View on GitHub
  Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…
  ☆1,289Jun 21, 2024Updated last year
• Z3ratu1 / geacon_plus

  View on GitHub
  CobaltStrike beacon written in golang
  ☆457Oct 13, 2023Updated 2 years ago
• zha0gongz1 / iscsicpl_bypassUAC

  View on GitHub
  UAC bypass for x64 Windows 7 - 11（无弹窗版）
  ☆281Sep 5, 2022Updated 3 years ago
• smallzhong / NeacController

  View on GitHub
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆20Apr 2, 2025Updated 10 months ago
• m7rick / Havoc-DLLHijack

  View on GitHub
  A tool to assist DLL hijacking via the Havoc GUI
  ☆12Jan 9, 2024Updated 2 years ago
• ImCoriander / ZeroEye

  View on GitHub
  自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹
  ☆563Dec 14, 2025Updated 2 months ago
• 0xlane / ollvm-rust

  View on GitHub
  out-of-tree llvm obfuscation pass plugin (dynamically loadable by rustc). || rust toolchain with obfuscation llvm pass.
  ☆178Jun 28, 2024Updated last year
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆309Aug 6, 2023Updated 2 years ago
• ekkoo-z / LuckyDump

  View on GitHub
  bypass edr杀软的dumplsass工具
  ☆21Mar 21, 2025Updated 10 months ago
• dreadnode / lolmil

  View on GitHub
  ☆38Oct 16, 2025Updated 3 months ago
• fdx-xdf / Rust_Beacon

  View on GitHub
  使用 rust 实现 CobaltStrike 的 beacon || Using Rust to implement CobaltStrike's Beacon
  ☆200Jul 5, 2025Updated 7 months ago
• sv3nbeast / DnslogCmdEcho

  View on GitHub
  命令执行不回显但DNS协议出网的命令回显场景解决方案
  ☆277Jan 10, 2023Updated 3 years ago
• nex121 / webshellEncode

  View on GitHub
  ☆28Aug 12, 2023Updated 2 years ago
• M0nster3 / ITaskServers

  View on GitHub
  Bypass EDR Create TaskServers
  ☆38Dec 24, 2022Updated 3 years ago
• wangfly-me / LoaderFly

  View on GitHub
  助力每一位RT队员，快速生成免杀木马
  ☆828Apr 17, 2024Updated last year
• Dec0ne / HWSyscalls

  View on GitHub
  HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.
  ☆718Jul 19, 2023Updated 2 years ago
• huoji120 / white_patch_detect

  View on GitHub
  通杀检测基于白文件patch黑代码的免杀技术的后门
  ☆181Aug 3, 2024Updated last year
• LostZX / vcenter_tool

  View on GitHub
  ☆32Apr 23, 2023Updated 2 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆731Sep 1, 2021Updated 4 years ago
• baimao-box / Self-Defective-Program

  View on GitHub
  无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API
  ☆88Mar 27, 2025Updated 10 months ago
• veo / ebpf_shell

  View on GitHub
  ebpf WebShell/内核马，一种新型内核马/WebShell技术
  ☆351Jan 8, 2024Updated 2 years ago