Alternatives and similar repositories for HavocC2-Forensics

Users that are interested in HavocC2-Forensics are comparing it to the libraries listed below

• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆161Updated 6 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆117Updated last month
• cocomelonc / mdmz_book
  The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware
  ☆55Updated 3 weeks ago
• rad9800 / byor
  ☆156Updated 3 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆97Updated 3 months ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆68Updated 4 months ago
• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆153Updated this week
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆115Updated 3 weeks ago
• restkhz / ShellcodeEncrypt2DLL
  A script to generate AV evaded(static) DLL shellcode loader with AES encryption.
  ☆137Updated 5 months ago
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆91Updated this week
• PwnAwan / EXP-401-OSEE
  A bunch of resources to prepare for the OSEE certification, Offensive Security's hardest course.
  ☆103Updated 3 years ago
• mochabyte0x / CTFPacker
  Cross platform (Linux / Windows) shellcode packer for CTFs and pentest / red team exams aiming for AV evasion !
  ☆79Updated 3 weeks ago
• hasherezade / flareon2024
  ☆37Updated 9 months ago
• MatheuZSecurity / ModTracer
  ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.
  ☆85Updated 6 months ago
• ArtemBaranov / WindowsRootkitsGuide
  ☆69Updated 7 months ago
• wetw0rk / AWE-PREP
  Repository containing all training and tutorials completed in preparation for the OSEE in conjunction with the AWE course.
  ☆111Updated last week
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆38Updated 6 months ago
• x86byte / Stuxnet-Rootkit
  Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
  ☆66Updated last year
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated last month
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆114Updated 2 months ago
• CyberSecurityUP / Windows-API-for-Red-Team
  ☆80Updated last year
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆72Updated 9 months ago
• AetherBlack / abuseACL
  A python script to automatically list vulnerable Windows ACEs/ACLs.
  ☆61Updated 2 months ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆106Updated 6 months ago
• stevenyu113228 / BloodHound-MCP
  ☆154Updated 5 months ago
• BlackShell256 / Null-AMSI
  Null-AMSI is an AMSI and ETW bypass that takes advantage of .NET types (.NET Reflection) to bypassing AV/EDR.
  ☆72Updated 2 months ago
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• eversinc33 / 1.6-C2
  Using the Counter Strike 1.6 RCON protocol as a C2 Channel.
  ☆84Updated 7 months ago
• jeanlucdupont / EXEfromCER
  PoC that downloads an executable from a public SSL certificate
  ☆128Updated last month
• S3N4T0R-0X0 / Hunter
  Охотник (Hunter) is a simple Adversary Simulation tool developed for achieves stealth through API unhooking, direct and indirect syscalls…
  ☆87Updated 4 months ago