Alternatives and similar repositories for HavocC2-Forensics

Users that are interested in HavocC2-Forensics are comparing it to the libraries listed below

• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 9 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆121Updated 7 months ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆74Updated last month
• rad9800 / byor
  ☆159Updated 6 months ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆136Updated 4 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆203Updated 4 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆124Updated 6 months ago
• duhirsch / MoveEdr
  Permanently disable EDRs as local admin
  ☆123Updated last week
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 5 months ago
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆96Updated 3 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆34Updated 11 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• LeighlinRamsay / GunnerC2
  ☆151Updated 2 months ago
• ArtemBaranov / WindowsRootkitsGuide
  ☆71Updated 11 months ago
• S3N4T0R-0X0 / Hunter
  Охотник (Hunter) is a simple Adversary Simulation tool developed for achieves stealth through API unhooking, direct and indirect syscalls…
  ☆90Updated 8 months ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 10 months ago
• ChaitanyaHaritash / IllusiveFog
  Windows Administrator level Implant.
  ☆50Updated last year
• lsecqt / BSides-2024-Malware-Development-101-From-Zero-to-Non-Hero
  ☆43Updated last year
• whokilleddb / ASPxecute
  Execute shellcode via ASPNET compiler
  ☆59Updated 2 months ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆107Updated 9 months ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• AetherBlack / abuseACL
  A python script to automatically list vulnerable Windows ACEs/ACLs.
  ☆62Updated 6 months ago
• winsecurity / MaleficentVM
  This is practice VM for malware development
  ☆170Updated last month
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆67Updated last year
• MazX0p / CobaltSentry
  ☆24Updated 10 months ago
• cocomelonc / mdmz_book
  The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware
  ☆65Updated last month
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆188Updated 2 months ago
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆77Updated last year
• x86byte / Stuxnet-Rootkit
  Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
  ☆78Updated last year
• eversinc33 / 1.6-C2
  Using the Counter Strike 1.6 RCON protocol as a C2 Channel.
  ☆88Updated 10 months ago