Alternatives and similar repositories for detect-lkm-rootkit-cheatsheet

Users that are interested in detect-lkm-rootkit-cheatsheet are comparing it to the libraries listed below

• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆150Updated 3 weeks ago
• ArtemBaranov / WindowsRootkitsGuide
  ☆69Updated 7 months ago
• hasherezade / flareon2024
  ☆37Updated 9 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆22Updated 8 months ago
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆69Updated 3 weeks ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆68Updated 3 months ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆55Updated 6 months ago
• airbus-cert / minusone
  Powershell Linter
  ☆81Updated last week
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆116Updated 3 weeks ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆38Updated 6 months ago
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆249Updated last year
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆132Updated 7 months ago
• volexity / donut-decryptor
  Retrieve inner payloads from Donut samples
  ☆106Updated last year
• nikhilh-20 / ELFEN
  ELFEN: Automated Linux Malware Analysis Sandbox
  ☆126Updated 3 weeks ago
• wetw0rk / wetw0rk.github.io
  ☆19Updated 2 weeks ago
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆138Updated last year
• grahamhelton / USP
  Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
  ☆146Updated last year
• eric-conrad / c2-talk
  ☆37Updated last year
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆85Updated 7 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆91Updated last year
• struppigel / hedgehog-tools
  ☆113Updated last month
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆112Updated 2 years ago
• xaitax / PatchaPalooza
  A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.
  ☆189Updated 5 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆128Updated last year
• lewiswigmore / Virus.xcheck
  Virus.xcheck is a Python tool designed to bulk verify the existence of file hashes in the Virus Exchange database and fetch download URLs…
  ☆55Updated 5 months ago
• JanielDary / ELFieScanner
  A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by…
  ☆84Updated last year
• naacbin / CovenantDecryptor
  ☆31Updated last year
• SafeBreach-Labs / wd-pretender
  ☆134Updated 2 years ago
• mephistolist / tito
  In-Memory Rootkit For Linux and BSD
  ☆80Updated last month