ArtemBaranov / WindowsRootkitsGuide
☆67Updated 3 months ago
Alternatives and similar repositories for WindowsRootkitsGuide
Users that are interested in WindowsRootkitsGuide are comparing it to the libraries listed below
Sorting:
- A practical resource on using open-source tools for Incident Response. This repo shares workflows, tool setups, and steps for responding …☆32Updated 6 months ago
- ☆116Updated 3 weeks ago
- Configuration Extractors for Malware☆104Updated 3 weeks ago
- Analyse MSI files for vulnerabilities☆131Updated 8 months ago
- The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware☆43Updated last month
- ☆105Updated 6 months ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated last month
- ☆23Updated 2 months ago
- BSides Prishtina 2024 Malware Development and Persistence workshop☆81Updated this week
- This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.☆78Updated 8 months ago
- ☆37Updated last year
- ☆114Updated last week
- Lena's scripts/code/resources for malware analysis☆26Updated 11 months ago
- Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …☆36Updated 2 months ago
- ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…☆103Updated 2 months ago
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆141Updated 9 months ago
- A Mythic Agent written in PIC C.☆189Updated 3 months ago
- Cheat sheet to detect and remove linux kernel rootkit☆58Updated 5 months ago
- ☆119Updated last year
- Persist like a Dodder☆33Updated this week
- ☆136Updated 2 years ago
- ☆154Updated 5 months ago
- ☆80Updated 5 months ago
- A collection of small scripts and tools for deobfuscation and malware analysis.☆66Updated 2 years ago
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆164Updated 5 months ago
- Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis☆52Updated 8 months ago
- A CIA tradecraft technique to asynchronously detect when a process is created using WMI.☆134Updated last year
- Windows Administrator level Implant.☆49Updated 7 months ago
- "Service-less" driver loading☆154Updated 5 months ago
- Evade EDR's the simple way, by not touching any of the API's they hook.☆140Updated 3 months ago