ForensicITGuy / libpreloadvaccine
Whitelisting LD_PRELOAD libraries using LD_AUDIT
☆61Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for libpreloadvaccine
- Tool to examine the behaviour of setuid binaries under constrained limits.☆62Updated 3 years ago
- SNIcat☆125Updated 3 years ago
- The Alternative Fileless File System☆55Updated 5 years ago
- a pstree mod that prints other helpful information and with added functionality☆24Updated 4 years ago
- A CLI tool for querying passive DNS services☆41Updated 11 months ago
- The SSH Multiplex Backdoor Tool☆62Updated 5 years ago
- CLI tool to analyze PE files☆84Updated last month
- XOR Key Extractor☆48Updated 3 months ago
- Community-based integrated malware identification system☆82Updated last year
- pyGoRE - Python library for analyzing Go binaries☆64Updated 2 years ago
- Watches for trigger packets, runs commands or spawns a shell☆23Updated 5 years ago
- YARI is an interactive debugger for YARA Language.☆88Updated last week
- ☆48Updated 4 years ago
- ☆51Updated 6 years ago
- Uninvited Guest - A file server for files over DNS TXT records☆22Updated last month
- A summary about different projects/presentations/tools to test how to evade malware sandbox systems☆48Updated 5 years ago
- disable LD_PRELOAD on linux☆20Updated 8 years ago
- Stealthy data exfiltration via IPv6 covert channel☆99Updated 5 years ago
- List (or plunder) private repos/gists to which a token has access, including those of other users☆11Updated 2 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆49Updated 2 years ago
- C# User Simulation☆33Updated 2 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 6 years ago
- Radare2 Metadata Extraction to Elasticsearch☆21Updated 6 months ago
- Windows Process Lockdown Tool using Job Objects☆69Updated 11 years ago
- Code and Slides of my BSides London 2019 presentation about Attacker Emulation using CALDERA☆22Updated 5 years ago
- dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software☆56Updated 5 years ago
- Malware similarity platform with modularity in mind.☆76Updated 3 years ago
- Imphash-like calculation on Golang binaries☆47Updated 2 years ago
- Python script to parse Keytab files for macOS or *nix (typically /etc/krb5.keytab)☆34Updated 5 years ago