Alternatives and similar repositories for fiber-stager

Users that are interested in fiber-stager are comparing it to the libraries listed below

• zimnyaa / xyrella

  View on GitHub
  PoC XLL builder in Python/Nim
  ☆49Nov 21, 2022Updated 3 years ago
• zimnyaa / nim-noload-dll-hollowing

  View on GitHub
  Unused DLL hollowing PoC in Nim
  ☆17Jan 31, 2022Updated 4 years ago
• zimnyaa / inmembof.py

  View on GitHub
  A small example of loading BOFs in Python with pure reflection
  ☆19Jan 26, 2023Updated 3 years ago
• jsacco / PPL_Bypass

  View on GitHub
  ☆12Apr 7, 2022Updated 3 years ago
• zimnyaa / stoplooking

  View on GitHub
  A simple BOF that disables some logging with NtSetInformationProcess
  ☆13Oct 13, 2023Updated 2 years ago
• MrAle98 / BOF-RunPE

  View on GitHub
  ☆57Apr 19, 2023Updated 2 years ago
• farfella / in-memory-cpython

  View on GitHub
  An In-memory Embedding of CPython
  ☆31May 24, 2021Updated 4 years ago
• EvanMcBroom / sleepy

  View on GitHub
  A lexer and parser for Sleep
  ☆20May 14, 2025Updated 9 months ago
• zimnyaa / LEOPARDSEAL

  View on GitHub
  A simple Linux in-memory .so loader
  ☆33Mar 29, 2023Updated 2 years ago
• WithSecureLabs / dotnet-gargoyle

  View on GitHub
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Dec 6, 2018Updated 7 years ago
• delivr-to / MailCollector

  View on GitHub
  A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM
  ☆20Jul 19, 2025Updated 6 months ago
• py7hagoras / OfficeMacro64

  View on GitHub
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆21Feb 2, 2020Updated 6 years ago
• pwn1sher / uuid-loader

  View on GitHub
  UUID based Shellcode loader for your favorite C2
  ☆86Dec 8, 2021Updated 4 years ago
• zimnyaa / insomnia

  View on GitHub
  a stage1 DLL loader with sleep obfuscation
  ☆36Dec 27, 2022Updated 3 years ago
• praetorian-inc / glato

  View on GitHub
  GitLab Attack TOolkit
  ☆34Oct 8, 2025Updated 4 months ago
• lap1nou / CLR_Heap_encryption

  View on GitHub
  ☆100Oct 7, 2023Updated 2 years ago
• improsec / CaddyStager

  View on GitHub
  ☆39May 21, 2022Updated 3 years ago
• Madsy / SelfLoader

  View on GitHub
  Simple code to resolve library functions at runtime
  ☆10Jan 5, 2015Updated 11 years ago
• jonny-jhnson / ProcCallback

  View on GitHub
  An example of how a driver can register a handle creation callback.
  ☆16Jun 12, 2023Updated 2 years ago
• SaadAhla / HadesLdr

  View on GitHub
  Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2
  ☆13Jul 15, 2023Updated 2 years ago
• skelsec / anfs

  View on GitHub
  Asynchronous NFSv3 client in pure Python
  ☆28Jul 16, 2025Updated 6 months ago
• zimnyaa / smbsocks

  View on GitHub
  A simple rpc2socks alternative in pure Go.
  ☆31Jul 8, 2024Updated last year
• bot984397 / eepy

  View on GitHub
  ☆38Apr 15, 2025Updated 10 months ago
• OffenseTeacher / Steganim

  View on GitHub
  ☆46Jun 21, 2023Updated 2 years ago
• timwhitez / Etwti-UnhookPOC

  View on GitHub
  Etwti-UnhookPOC just for test
  ☆12Aug 23, 2022Updated 3 years ago
• arsium / BypassGetModuleBaseAddressAndGetExportAddress

  View on GitHub
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆21Jul 9, 2022Updated 3 years ago
• SygniaLabs / BackupKeyManager

  View on GitHub
  ☆17Jul 16, 2024Updated last year
• perturbed-platypus / UEFIWriteCPP

  View on GitHub
  ☆12Aug 10, 2019Updated 6 years ago
• CCob / chlonium

  View on GitHub
  Chromium Cookie import / export tool
  ☆11Jul 21, 2024Updated last year
• fox-it / signed-phishing-email

  View on GitHub
  ☆11Dec 18, 2018Updated 7 years ago
• hackerhouse-opensource / MsSettingsDelegateExecute

  View on GitHub
  Bypass UAC on Windows 10/11 x64 using ms-settings DelegateExecute registry key.
  ☆82Feb 2, 2026Updated last week
• ajpc500 / NimExamples

  View on GitHub
  A collection of offensive Nim example code
  ☆74Dec 21, 2021Updated 4 years ago
• loneicewolf / smbdoor

  View on GitHub
  improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys
  ☆49Mar 10, 2023Updated 2 years ago
• frkngksl / ParallelNimcalls

  View on GitHub
  Nim version of MDSec's Parallel Syscall PoC
  ☆124Jan 14, 2022Updated 4 years ago
• FedericoCeratto / nim-tor

  View on GitHub
  Nim Tor helper library
  ☆24Oct 11, 2020Updated 5 years ago
• cedowens / Persistent-Swift

  View on GitHub
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆34Apr 15, 2021Updated 4 years ago
• therealdreg / nasm_linux_x86_64_pure_sharedlib

  View on GitHub
  NASM Linux x86_64 pure (no deps) shared library (.so), POC for Reflective ELF SO injection
  ☆31Aug 11, 2023Updated 2 years ago
• OffenseTeacher / NimSkrull

  View on GitHub
  NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…
  ☆13May 20, 2023Updated 2 years ago
• hasherezade / waiting_thread_hijacking

  View on GitHub
  Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread
  ☆262Aug 31, 2025Updated 5 months ago