Alternatives and similar repositories for nim-noload-dll-hollowing

Users that are interested in nim-noload-dll-hollowing are comparing it to the libraries listed below

• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated 2 years ago
• zimnyaa / PhaseDive
  Sleep Obfuscation
  ☆45Updated 3 years ago
• zimnyaa / fiber-stager
  A simple Nim stager (w/ fiber execution)
  ☆19Updated 3 years ago
• zimnyaa / xyrella
  PoC XLL builder in Python/Nim
  ☆48Updated 3 years ago
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆44Updated 2 years ago
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆29Updated 4 years ago
• Allevon412 / BreadManModuleStomping
  ☆44Updated 2 years ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆58Updated 2 years ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆55Updated 2 years ago
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆36Updated 3 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆52Updated 3 years ago
• xpn / ObjectOverloadingPOC
  ☆62Updated 3 years ago
• dobin / antniumui
  The Web UI for Antnium
  ☆27Updated 3 years ago
• jfmaes / DeepSleep
  all credits go to @mgeeky
  ☆64Updated 4 years ago
• CymulateResearch / Blindside
  Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms
  ☆133Updated 3 years ago
• shantanu561993 / DLL-Sideload
  ☆43Updated 3 years ago
• passthehashbrowns / suspendedunhook
  ☆42Updated 4 years ago
• S3cur3Th1sSh1t / NimShellcodeFluctuation
  ShellcodeFluctuation PoC ported to Nim
  ☆79Updated 3 years ago
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆23Updated 2 years ago
• ph3n1x007 / EarlyBirdNTDLL
  ☆37Updated 2 years ago
• paranoidninja / PI-Tracker
  A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …
  ☆13Updated last year
• synap5e / onefile_python
  Run python from a single exe
  ☆35Updated 3 years ago
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆25Updated 2 years ago
• mgeeky / msi-shenanigans
  Proof of Concept code and samples presenting emerging threat of MSI installer files.
  ☆89Updated 3 years ago
• dmcxblue / NtCreateUserProcessBOF
  An Aggressor Script that utilizes NtCreateUserProcess to run binaries
  ☆30Updated 11 months ago
• scriptchildie / gohellsgate
  Golang Implementation of Hell's gate
  ☆21Updated 2 years ago
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆63Updated last year
• rbmm / SDD
  Self Delete DLL
  ☆23Updated last year
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆41Updated 2 years ago
• pruno7 / nEkko
  A nim port of C5pider's Ekko project.
  ☆17Updated 3 years ago