Alternatives and similar repositories for detect-lkm-rootkit-cheatsheet

Users that are interested in detect-lkm-rootkit-cheatsheet are comparing it to the libraries listed below

• MatheuZSecurity / Rootkit
  Collection of codes focused on Linux rootkits
  ☆141Updated last month
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆54Updated 5 months ago
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆27Updated last year
• ArtemBaranov / WindowsRootkitsGuide
  ☆67Updated 6 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆21Updated 7 months ago
• CICADA8-Research / MyMSIAnalyzer
  Analyse MSI files for vulnerabilities
  ☆137Updated 11 months ago
• eric-conrad / c2-talk
  ☆37Updated last year
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆110Updated 2 years ago
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆198Updated 5 months ago
• volexity / GoResolver
  GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the func…
  ☆66Updated 3 months ago
• hasherezade / flareon2024
  ☆37Updated 7 months ago
• airbus-cert / minusone
  Powershell Linter
  ☆68Updated this week
• MatheuZSecurity / NullSection
  NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
  ☆66Updated last year
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆62Updated 2 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆89Updated 11 months ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆37Updated 5 months ago
• MatheuZSecurity / ModTracer
  ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.
  ☆84Updated 5 months ago
• SafeBreach-Labs / QuickShell
  A library and a set of tools for exploiting and communicating with Google's Quick Share devices.
  ☆44Updated 4 months ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆129Updated 6 months ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆126Updated last year
• xaitax / PatchaPalooza
  A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.
  ☆186Updated 4 months ago
• mephistolist / tito
  In-Memory Rootkit For Linux
  ☆72Updated this week
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated 10 months ago
• x86byte / Stuxnet-Rootkit
  Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis
  ☆63Updated 10 months ago
• SafeBreach-Labs / aikido_wiper
  ☆67Updated 2 years ago
• grahamhelton / USP
  Establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload (binary or script)
  ☆146Updated 11 months ago
• hardenedlinux / userland-exec
  Userland exec PoC to be used as attack vector technique
  ☆85Updated 6 months ago
• jaredcatkinson / MalwareMorphology
  ☆81Updated 8 months ago
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆238Updated last year