SharpUnhooker
TangledWinExec
| SharpUnhooker | TangledWinExec | |
|---|---|---|
| 2 | 5 | |
| 371 | 851 | |
| - | - | |
| 0.0 | 8.5 | |
| about 2 years ago | 7 days ago | |
| C# | C# | |
| - | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SharpUnhooker
TangledWinExec
- EaDumper: dump Windows NTFS file extended attributes
- Shellcode Reflective DLL Injection This directory is for tools to test sRDI (Shellcode Reflective DLL Injection)
- DarkLoadLibrary: Load DLL with the Dark Load Library technique.
- PPEditor: This is a Kernel-mode WinDbg extension to edit Protection Level for processes.
- TangledWinExec: C# PoCs for investigation of Windows process execution techniques investigation
What are some alternatives?
Dependencies - A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.
DcRat - A simple remote tool in C#.
LegacyWrapper - LegacyWrapper uses a x86 wrapper to call legacy dlls from a 64 bit process (or vice versa).
Sandman - Sandman is a NTP based backdoor for red team engagements in hardened networks.
AntiCrack-DotNet - C# Project contains a plenty of Advanced Anti-Debugging, Anti-Virtualization, Anti Dll-Injection and Anti-Hooking Techniques.
WMEye - WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
PEASS-ng - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Lunar - A lightweight native DLL mapping library that supports mapping directly from memory
Standard-Toolkit - An update to Component factory's krypton toolkit to support .NET Framework 4.6.2 - 4.8.1 to .NET 6 - 8
QuasarRAT - Remote Administration Tool for Windows [Moved to: https://github.com/quasar/Quasar]
Quasar - Remote Administration Tool for Windows