A utility for playing with cryptography, geared towards ransomware analysis.
☆333Aug 13, 2025Updated last year
Alternatives and similar repositories for CryptoTester
Users that are interested in CryptoTester are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A dynamic unpacking tool☆154Sep 17, 2023Updated 3 years ago
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆245Aug 2, 2023Updated 3 years ago
- CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive☆109Feb 2, 2026Updated 8 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆170Aug 23, 2024Updated 2 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆34Mar 28, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆887Feb 2, 2024Updated 2 years ago
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆209Nov 12, 2025Updated 11 months ago
- Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.☆679Nov 9, 2023Updated 2 years ago
- Now You See Me, Now You Don't☆1,073May 22, 2026Updated 4 months ago
- 只是为了好玩 用于RSA 半字节/1字节/ 固定CRC32补丁 辅助☆24Nov 6, 2025Updated 11 months ago
- Think APIMonitor, but for .NET binaries.☆61Feb 22, 2023Updated 3 years ago
- For when DLLMain is the only way☆439Oct 29, 2024Updated last year
- An open-source tool for efficiently parsing x64dbg trace files (.trace32 & .trace64).☆50Jan 20, 2026Updated 8 months ago
- Research on code virtualization in .NET [WIP]☆224Jun 20, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆19Jul 23, 2023Updated 3 years ago
- Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…☆166Aug 2, 2023Updated 3 years ago
- kill anti-malware protected processes ( BYOVD )☆998Jul 21, 2023Updated 3 years ago
- ☆14Jul 29, 2024Updated 2 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆178Feb 10, 2023Updated 3 years ago
- x64 binary obfuscator☆2,000Jul 14, 2023Updated 3 years ago
- ☆17Apr 21, 2026Updated 5 months ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆235Jul 25, 2023Updated 3 years ago
- de4dot fixed to handle "anti-de4dot" interface adder☆34Jun 6, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Feb 28, 2023Updated 3 years ago
- Threadless Process Injection through entry point hijacking☆354Sep 10, 2024Updated 2 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆306Aug 2, 2023Updated 3 years ago
- Retrieve inner payloads from Donut samples☆143Jul 29, 2026Updated 2 months ago
- Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…☆112Feb 8, 2025Updated last year
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆20Jul 6, 2024Updated 2 years ago
- Aims to identify sleeping beacons☆686Jan 25, 2026Updated 8 months ago
- ☆146Jun 20, 2026Updated 3 months ago
- Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.☆791Jun 23, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple tool to extract and decompress embedded resources processed by Fody Costura☆83Jul 10, 2024Updated 2 years ago
- Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.☆2,534Sep 26, 2026Updated 3 weeks ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,288Dec 11, 2023Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆354Jun 12, 2023Updated 3 years ago
- WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.☆57Jun 30, 2021Updated 5 years ago