Alternatives and similar repositories for EMBER2024

Users that are interested in EMBER2024 are comparing it to the libraries listed below

• ucsb-seclab / popkorn-artifact
  ☆83Updated 3 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• csvl / SEMA
  SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create repr…
  ☆119Updated 8 months ago
• CrowdStrike / embersim-databank
  Code for the paper "EMBERSim: A Large-Scale Databank for Boosting Similarity Search in Malware Analysis"
  ☆32Updated 2 years ago
• br0kej / bin2ml
  A command line tool for extracting machine learning ready data from software binaries powered by Radare2
  ☆72Updated 6 months ago
• hugsy / recon_2024_windbg_workshop
  ☆74Updated last year
• SPTHvx / ezines
  ☆18Updated 2 years ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆45Updated 2 years ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆96Updated 2 years ago
• 20urc3 / Aplos
  Aplos an extremely simple fuzzer for Windows binaries.
  ☆68Updated 9 months ago
• xforcered / PhrackCTF
  Binary Exploitation Phrack CTF Challenge
  ☆137Updated 2 months ago
• ic3qu33n / OffensiveCon24-uefi-task-of-the-translator
  OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"
  ☆43Updated last year
• zRapha / FAME
  Framework for Adversarial Malware Evaluation.
  ☆35Updated 7 months ago
• malienist / vovk
  Vovk is framework of tools that include a WinDbg extension that generates in-depth YARA rules for malware.
  ☆22Updated last year
• intel471 / coderex
  A tool that automates regex generation for the x86 and x86-64 instruction sets
  ☆71Updated last year
• FuzzySecurity / BulkBindex
  Winbindex bot to pull in binaries for specific releases
  ☆48Updated 2 years ago
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆120Updated last year
• xforcered / Agent-Development-Stack
  Backend development stack for agents
  ☆30Updated 3 months ago
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆75Updated 2 months ago
• redcanaryco / exploit-primitive-playground
  ☆64Updated last year
• airbus-cert / minusone
  Powershell Linter
  ☆84Updated this week
• bsinger98 / Incalmo
  ☆63Updated this week
• rad9800 / RansomFS
  ☆31Updated 8 months ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆118Updated 2 years ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 8 months ago
• 0vercl0k / symbolizer-rs
  A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.
  ☆97Updated last year
• Slowerzs / KeyJumper
  ☆51Updated 7 months ago
• yo-yo-yo-jbo / virtual_memory_known_dlls
  ☆21Updated 2 years ago
• jq0904 / Conference-Presentations
  Slide of my conference presentations
  ☆14Updated last year
• moohax / aiv_workshop_20
  ☆10Updated 4 years ago