SPiCa (System Process Integrity & Cross-view Analysis) is a high-performance, eBPF-based rootkit detection engine written in Rust, inspired by the hatsune miku song SPiCa
☆105Oct 17, 2026Updated 2 weeks ago
Alternatives and similar repositories for SPiCa
Users that are interested in SPiCa are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated last month
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆33Sep 1, 2026Updated 2 months ago
- A Volatility plugin to detect hidden Linux Kernel Modules☆17Jul 11, 2025Updated last year
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆38Aug 15, 2026Updated 2 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- ☆18Oct 3, 2026Updated 3 weeks ago
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 6 months ago
- ☆37May 19, 2026Updated 5 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆38Updated this week
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated 2 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- An advanced C++ framework for WoW64 Heaven’s Gate + Indirect Syscall, X64 Hell's Gate, and EDR evasion. Seamlessly load 64-bit kernel32 a…☆21May 8, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- simd swiss table based map☆35Updated this week
- Minimal FAT32 Client written in #[no_std] Rust☆32Aug 16, 2025Updated last year
- A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.☆51Apr 17, 2026Updated 6 months ago
- ☆26May 12, 2026Updated 5 months ago
- GERMY is a Linux Kernel n-day in the N_GSM line discipline☆50May 28, 2024Updated 2 years ago
- A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge …☆35Mar 20, 2023Updated 3 years ago
- Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extra…☆28Mar 9, 2026Updated 7 months ago
- pure-Rust SLEIGH-driven RE workbench for multi-arch decompilation, P-code, binary triage, and LLM-assisted analysis.☆14Updated this week
- Linux kernel integrity monitor for detecting syscall hooking☆97Feb 16, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Oct 24, 2026Updated last week
- Implementation of hello world in windows, focusing on binary size and malleability of windows binaries☆18Jul 3, 2025Updated last year
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Oct 16, 2026Updated 2 weeks ago
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆14Mar 19, 2026Updated 7 months ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- Elevate arbitrary MSR writes to kernel execution.☆55Sep 3, 2023Updated 3 years ago
- Call Stack Spoofing for Rust☆223Jan 28, 2026Updated 9 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated 3 weeks ago
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆136Dec 23, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆66Jun 15, 2026Updated 4 months ago
- Mythic Code Signing Wrapper☆18Updated this week
- ☆14Jun 24, 2025Updated last year
- A protracted people's rootkit.☆20May 1, 2026Updated 6 months ago
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- Windows security research toolkit for LPE, persistence, COM hijacking, and attack surface enumeration.☆207Jun 13, 2026Updated 4 months ago
- A CRC algorithm generator with SIMD support and table fallback☆22Jan 24, 2025Updated last year