Alternatives and similar repositories for Yaef

Users that are interested in Yaef are comparing it to the libraries listed below

• b4ubles / RootKit
  a very simple rootkit for fun
  ☆18Updated 6 years ago
• bl4ckswan / anti-disassembly
  ☆19Updated 8 years ago
• v-a-c-u-u-m / mem_inject
  Linux shellcode code memory injection library .so .dll injection without ptrace example PoC
  ☆24Updated 3 years ago
• cloudsec / arkd
  The kernel debugger script for checking kernel level rootkits.
  ☆12Updated 5 years ago
• aaaddress1 / Lexa
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Updated 5 years ago
• orca-eaa5a / mac-defender
  ☆11Updated 3 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆14Updated 7 years ago
• haidragon / thread_inline_hook
  稳定多线程中的inline hook
  ☆16Updated 5 years ago
• h0li3 / mpengine_diskus
  参考taviso的代码逆向一下mpengine.dll
  ☆19Updated 2 years ago
• supperlitt / PasswordSeekTool
  根据参考字符串，和结果逆向，推算出算法。
  ☆21Updated 2 years ago
• wanttobeno / wmifilter
  驱动层拦截web访问源码
  ☆29Updated 7 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆15Updated last year
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆43Updated 11 years ago
• emc2314 / PEZEncrypt
  PE Infector/Cryptor source code
  ☆15Updated 8 years ago
• wannianhong / remove_Go_flag
  ☆18Updated 3 years ago
• stonedreamforest / re_avdevprot
  逆向小红伞杀毒软件驱动——avdevprot
  ☆24Updated 7 years ago
• AXDOOMER / run-embedded-elf-from-memory
  Experiment with Linux system calls (memfd_create, fexecve, fork...)
  ☆22Updated 6 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆59Updated 5 years ago
• m00zh33 / qiling
  Qiling Advanced Binary Emulation framework
  ☆11Updated 5 years ago
• waleedassar / SyscallNumberFinder
  ☆33Updated 3 years ago
• SLAUC91 / DLLFinder
  Enumerate the DLLs/Modules using NtQueryVirtualMemory
  ☆32Updated 9 years ago
• jacob-baines / jit_obfuscation_poc
  Using GNU lightning to generate xor deobfuscation at runtime
  ☆26Updated 7 years ago
• humeafo / scc
  a C/C++ shellcode compiler based on llvm/clang
  ☆36Updated 9 years ago
• killvxk / Researchs
  一些研究
  ☆14Updated 5 years ago
• iammaguire / Salient-Rootkit
  A kernel mode Windows rootkit in development.
  ☆48Updated 3 years ago
• leeqwind / MBRhack
  感染MBR 下载并运行文件。
  ☆33Updated 2 years ago
• fcccode / Kernal-Memory-ReadWrite
  Simple code to manipulate the memory of a usermode process from kernel.
  ☆13Updated 2 years ago
• Amoystyle / LLVM-VS
  Using Microsoft Visual Studio 2019 Building A LLVM Out-Source-Tree Pass
  ☆16Updated 5 years ago
• Jb05s / Exploit-Dev-C
  ☆22Updated 4 years ago
• thewhiteninja / rewolf-wow64ext
  Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.
  ☆10Updated last month