Alternatives and similar repositories for NlsCodeInjectionThroughRegistry

Users that are interested in NlsCodeInjectionThroughRegistry are comparing it to the libraries listed below

• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆42Updated last year
• bitdefender / hypervinject-poc
  ☆52Updated 4 months ago
• kr0tt / EarlyExceptionHandling
  Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH
  ☆132Updated 3 months ago
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆66Updated last month
• passthehashbrowns / VectoredExceptionHandling
  ☆97Updated last year
• ameenalkerdy / ETWShellcodeLoader
  Shellcode Loader Utilizing ETW Events
  ☆67Updated 9 months ago
• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆114Updated 10 months ago
• kleiton0x00 / RtlHijack
  Alternative Read and Write primitives using Rtl* functions the unintended way.
  ☆78Updated 3 months ago
• rbmm / SC
  shell code example
  ☆63Updated last month
• NoahKirchner / speedloader
  Rust template/library for implementing your own COFF loader
  ☆72Updated 10 months ago
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆100Updated 3 weeks ago
• Teach2Breach / early_cascade_inj_rs
  early cascade injection PoC based on Outflanks blog post, in rust
  ☆61Updated last year
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 7 months ago
• 0xTriboulet / Abomination
  A synergized Visual Studio and Rust development environment
  ☆19Updated 10 months ago
• dr4ndrei / OHFFLdr
  One-header configurable C++20 COFF loader
  ☆21Updated 4 months ago
• Teach2Breach / rpeloader
  use python on windows with full submodule support without installation
  ☆30Updated 10 months ago
• bot984397 / eepy
  ☆38Updated 7 months ago
• mdsecactivebreach / functionpeekaboo
  ☆55Updated last month
• winterknife / SILVERPICK
  Windows User-Mode Shellcode Development Framework (WUMSDF)
  ☆117Updated 3 weeks ago
• susMdT / ForsHops
  ForsHops
  ☆59Updated 8 months ago
• mr-r3bot / bof-modules
  BOF for C2 framework
  ☆44Updated last year
• HulkOperator / CallStackSpoofer
  ☆48Updated 11 months ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• r0keb / TrashFormer
  A 64 bit executable junk code engine for polymorphic malware.
  ☆72Updated 5 months ago
• Teach2Breach / noldr
  Dynamically resolve API function addresses at runtime in a secure manner.
  ☆71Updated 3 weeks ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated last month
• Dor00tkit / BamExtensionTableHook
  Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…
  ☆91Updated 5 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆102Updated 9 months ago
• silentwarble / hbin_template
  Post-Ex BOF tooling for Hannibal
  ☆24Updated last year
• Teach2Breach / hollow_rs
  A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.
  ☆30Updated 10 months ago