Alternatives and similar repositories for WindowsRootkitsGuide

Users that are interested in WindowsRootkitsGuide are comparing it to the libraries listed below

• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆74Updated 2 months ago
• struppigel / hedgehog-tools
  ☆126Updated last week
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 11 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 11 months ago
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆137Updated last week
• winsecurity / MaleficentVM
  This is practice VM for malware development
  ☆179Updated 2 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆124Updated last month
• rad9800 / PMD
  ☆156Updated 9 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆161Updated 5 months ago
• rad9800 / byor
  ☆163Updated 7 months ago
• tanc7 / skidstorm
  ☆25Updated 10 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆143Updated last year
• hasherezade / flareon2024
  ☆39Updated last year
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆169Updated last year
• lewiswigmore / virus.xcheck
  Virus.xcheck is a Python tool designed to bulk verify the existence of file hashes in the Virus Exchange database and fetch download URLs…
  ☆60Updated 4 months ago
• patrickmatula / Windows-Internals-Learning-Resources
  ☆114Updated last week
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆207Updated 5 months ago
• cocomelonc / mdmz_book
  The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware
  ☆68Updated 2 months ago
• wetw0rk / wetw0rk.github.io
  ☆20Updated 3 weeks ago
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆277Updated last year
• dr4k0nia / tooling-playground
  A collection of small scripts and tools for deobfuscation and malware analysis.
  ☆66Updated 2 years ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆120Updated last year
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆293Updated 5 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆261Updated 5 months ago
• Malwation / Chiron-Unpacker
  Chiron Unpacker, developed by the Malwation MTR Team, is an Unpacker for Packers using the Assembly.Load function.
  ☆22Updated last year
• sensepost / mydumbedr
  ☆120Updated 2 years ago
• rad9800 / talks
  ☆60Updated 9 months ago