ulexecve
ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes. (by anvilsecure)
Metadata-Remover
A simple Metadata Removal Tool for images and videos using exiftool and ffmpeg in C and Python3. (by Anish-M-code)
Our great sponsors
| ulexecve | Metadata-Remover | |
|---|---|---|
| 2 | 1 | |
| 169 | 68 | |
| 1.2% | - | |
| 5.2 | 6.6 | |
| 4 months ago | 2 months ago | |
| Python | Python | |
| BSD 3-clause "New" or "Revised" License | GNU General Public License v3.0 only |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ulexecve
Posts with mentions or reviews of ulexecve.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-11-02.
-
Can I exec an new process without an executable file? (2015)
Definitely tricky. I solved it with a Python implementation by building up a big jumpbuffer so that the moment I leave Python-land I copy from temporary buffers to the right addresses and then ultimately jump at the entry point of the newly loaded binary. It's tricky and took quite some debugging to get right, but it's proven rather solid now.
See https://github.com/anvilsecure/ulexecve/blob/main/ulexecve.p... for details. Especially the `CodeGenerator` classes with implementations in x86, x86-64 and aarch64.
Metadata-Remover
Posts with mentions or reviews of Metadata-Remover.
We have used some of these posts to build our list of alternatives
and similar projects.
What are some alternatives?
When comparing ulexecve and Metadata-Remover you can also consider the following projects:
Pyramid - a tool to help operate in EDRs' blind spots
swiftGuard - Anti-forensic macOS tray application designed to safeguard your system by monitoring USB ports.
systemd-user-sleep - Activate a user sleep target when the system sleeps
presidio - Context aware, pluggable and customizable data protection and de-identification SDK for text and images
PythonMemoryModule - pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory
byob - An open-source post-exploitation framework for students, researchers and developers.