Alternatives and similar repositories for reflective-polymorphism

Users that are interested in reflective-polymorphism are comparing it to the libraries listed below

• tyranid / DeviceGuardBypasses
  A repository of some of my Windows 10 Device Guard Bypasses
  ☆136Updated 7 years ago
• tyranid / ZeroNights2017
  Some sample code from my Zero Nights 2017 presentation.
  ☆61Updated 7 years ago
• blacknbunny / peanalyzer
  Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
  ☆100Updated 6 years ago
• REal0day / MaliciousPark
  Another Repo of Malware. Enjoy. <3
  ☆59Updated 6 years ago
• MortenSchenk / Token-Stealing-Shellcode
  ☆51Updated 8 years ago
• nccgroup / CVE-2017-8759
  NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
  ☆96Updated 7 years ago
• tyranid / windows-attacksurface-workshop
  Workshop material for a Windows Attack Surface Analysis Workshop
  ☆67Updated 6 years ago
• hatRiot / bugs
  public bugs/proof of concepts
  ☆48Updated 4 years ago
• vallejocc / PoC-Inject-Data-WM_COPYDATA
  A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
  ☆50Updated 7 years ago
• 3gstudent / bitsadminexec
  Use bitsadmin to maintain persistence and bypass Autoruns
  ☆66Updated 7 years ago
• FSecureLABS / defcon25_uac_workshop
  UAC 0Day all day!
  ☆57Updated 7 years ago
• Cn33liz / VBSMeter
  VBS Reversed TCP Meterpreter Stager
  ☆87Updated 7 years ago
• xan7r / cypher
  Simple tool to automate adding shellcode to PE files
  ☆49Updated 7 years ago
• Cn33liz / TpmInitUACAnniversaryBypass
  Bypassing User Account Control (UAC) using TpmInit.exe
  ☆42Updated 8 years ago
• rwfpl / rewolf-gogogadget
  kernel exploitation helper class
  ☆77Updated 8 years ago
• Cn33liz / HSEVD-StackOverflowX64
  HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass
  ☆62Updated 7 years ago
• mandiant / flare-kscldr
  FLARE Kernel Shellcode Loader
  ☆177Updated 6 years ago
• OmerYa / Named-Pipe-Sniffer
  Mario & Luigi - Tools for sniffing Windows Named Pipes communication
  ☆129Updated 8 years ago
• hacksysteam / WpadEscape
  Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service
  ☆85Updated 5 years ago
• AMOSSYS / MemITM
  Tool to make in memory man in the middle
  ☆124Updated 6 years ago
• SafeBreach-Labs / BITSInject
  A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…
  ☆99Updated 5 years ago
• ustayready / CasperStager
  PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
  ☆151Updated 5 years ago
• djhohnstein / ProcessReimaging
  Process reimaging proof of concept code
  ☆96Updated 5 years ago
• Cn33liz / MS17-012
  MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe
  ☆59Updated 8 years ago
• nmulasmajic / syscall_exploit_CVE-2018-8897
  Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).
  ☆116Updated 6 years ago
• FSecureLABS / CVE-2016-7255
  An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit
  ☆81Updated 8 years ago
• tyranid / ExploitDotNetDCOM
  A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
  ☆91Updated 10 years ago
• enigma0x3 / MessageBox
  PoC dlls for Task Scheduler COM Hijacking
  ☆94Updated 8 years ago
• jackson5sec / ShimDB
  Shim database persistence (Fin7 TTP)
  ☆37Updated 5 years ago
• BorjaMerino / tlsInjector
  Python script to inject and run shellcodes through TLS callbacks
  ☆49Updated 9 years ago