Alternatives and similar repositories for WindowsRootkitsGuide

Users that are interested in WindowsRootkitsGuide are comparing it to the libraries listed below

• cocomelonc / mdmz_book
  The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware
  ☆57Updated last month
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆136Updated last year
• rad9800 / byor
  ☆158Updated 3 months ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆38Updated 7 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆98Updated 4 months ago
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆138Updated last year
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆160Updated 7 months ago
• struppigel / hedgehog-tools
  ☆113Updated 2 months ago
• rad9800 / PMD
  ☆153Updated 5 months ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆129Updated last month
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆201Updated last month
• OtterHacker / Hooker
  ☆108Updated 11 months ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆70Updated 4 months ago
• sensepost / mydumbedr
  ☆121Updated last year
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆163Updated last year
• tanc7 / skidstorm
  ☆25Updated 6 months ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆73Updated 9 months ago
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated 2 years ago
• hasherezade / flareon2024
  ☆38Updated 9 months ago
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆123Updated 2 weeks ago
• wetw0rk / wetw0rk.github.io
  ☆19Updated last month
• x86byte / Stuxnet-Rootkit
  Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
  ☆66Updated last year
• 0x4141414141 / Malware-Devlopment
  Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C
  ☆39Updated 5 years ago
• hackerhouse-opensource / SetupHijack
  SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and up…
  ☆211Updated last week
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆264Updated last year
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆167Updated 2 weeks ago
• Malwation / Chiron-Unpacker
  Chiron Unpacker, developed by the Malwation MTR Team, is an Unpacker for Packers using the Assembly.Load function.
  ☆23Updated 11 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆47Updated last year