Saruman v0.1
A proof-of-concept executable injection tool that compiles and launches parasitic executables within target processes using standard or stealth injection techniques.
A proof-of-concept executable injection tool that compiles and launches parasitic executables within target processes using standard or stealth injection techniques.
Checked October 2026.
Saruman v0.1 is a proof-of-concept executable injection tool that allows users to compile and launch parasitic executables within target processes.
The tool includes a launcher that can be compiled using make, which also attempts to compile a user-supplied parasite.c file. The parasite executable must be compiled with specific flags (-fpic -pie) to ensure proper functionality.
The current version has limitations as it does not support injecting programs that require command line arguments, being an early proof-of-concept implementation. The tool offers two injection methods: a standard approach and a more stealth technique using the --no-dlopen flag with the parasite executable.
The stealth loading feature currently contains bugs and may not function properly with complex parasites, indicating areas for future development and improvement.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Saruman v0.1: features, pricing and alternatives.
Saruman v0.1 is a product in the Red-Team & Adversary Emulation category. It covers Evasion, Proof of Concept and DLL Injection.
Saruman v0.1 is free. Download and setup instructions are at https://github.com/elfmaster/saruman/.
Alternatives to Saruman v0.1 listed on CybersecTools:
Compare all Saruman v0.1 alternatives at https://cybersectools.com/alternatives/saruman-v01
Saruman v0.1 is available as on-premises software. It is listed for enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
AI-assisted vulnerability research and advanced offensive cyber tooling firm.
RedWarden is a Cobalt Strike C2 reverse proxy that uses packet inspection and malleable profile correlation to evade detection by security controls during red team operations.
A tool for managing multiple reverse shell sessions/clients via terminal with a RESTful API.
A payload creation framework designed to bypass Endpoint Detection and Response (EDR) systems.
Comprehensive host-survey tool for security checks in C#.
A tutorial on how to use Apache mod_rewrite to randomly serve payloads in phishing attacks
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
