Alternatives and similar repositories for ghidra-scripts:

Users that are interested in ghidra-scripts are comparing it to the libraries listed below

• cyb3rfox / MFTEntryCarver
  Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…
  ☆21Updated 5 years ago
• EricZimmerman / SDB
  Parse Microsoft shim databases
  ☆29Updated 3 weeks ago
• schrodyn / steezy
  Steezy - Ghetto Yara Generation
  ☆15Updated last year
• SecurityRiskAdvisors / PDBlaster
  ☆47Updated 5 years ago
• g-les / floss2yar
  ☆15Updated 2 years ago
• tbarabosch / apihash_to_yara
  Generates YARA rules to detect malware using API hashing
  ☆17Updated 3 years ago
• Dump-GUY / ghidra_scripts
  ☆66Updated last year
• mauronz / binja-emotet
  ☆18Updated 4 years ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 3 years ago
• memprocfshunt / MemProcFSHunter
  A powershell parser for https://github.com/ufrisk/MemProcFS
  ☆44Updated 3 years ago
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆22Updated 2 years ago
• forensiclunch / ETLParser
  Binary commandline executable to parse ETL files
  ☆67Updated 6 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• archcloudlabs / r2elk
  Radare2 Metadata Extraction to Elasticsearch
  ☆22Updated 8 months ago
• nccgroup / WindowsMemPageDelta
  A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
  ☆30Updated 4 years ago
• herosi / triage-collector
  ☆21Updated 3 months ago
• SentineLabs / PowerTrick
  This is a repository for the public blog with Labs indicators of compromise and code
  ☆18Updated 5 years ago
• ufrisk / MemProcFS-plugins
  ☆56Updated 3 months ago
• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 2 years ago
• Fmk0 / templates
  ☆36Updated 5 years ago
• fr0gger / Yara-Unprotect
  This repository regroups the Yara Rules for the Unprotect Project
  ☆24Updated 4 years ago
• MathildeVenault / SysMainView
  This tool is the result of a reverse engineering process of the Windows service called SysMain. Time to interact with the prefetch files …
  ☆30Updated 4 years ago
• woanware / etw-event-dumper
  ☆32Updated 2 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆61Updated 4 years ago
• RealityNet / McAFuse
  Toolset to analyze disks encrypted with McAFee FDE technology
  ☆17Updated 3 years ago
• TakahiroHaruyama / SpiMitm
  SPI flash read MitM attack PoC
  ☆37Updated 2 years ago
• kirk-sayre-work / xlmulator
  Python emulator for Excel XLM macros.
  ☆18Updated 4 years ago
• libyal / winevt-kb
  Windows Event Log Knowledge Base
  ☆22Updated 3 months ago
• msuhanov / winmem_decompress
  Extract compressed memory pages from page-aligned data
  ☆42Updated 6 years ago