Alternatives and similar repositories for ThreatHuntingStuff

Users that are interested in ThreatHuntingStuff are comparing it to the libraries listed below

• khr0x40sh / PowerW0rm

  View on GitHub
  ☆16May 6, 2015Updated 10 years ago
• rvrsh3ll / Word-Doc-Video-Embed-EXE-POC

  View on GitHub
  ☆94Nov 1, 2018Updated 7 years ago
• VDA-Labs / derbycon-binary_ninja

  View on GitHub
  Repo contains code for our DerbyCon 2016 talk comparing Binary Ninja and IDA Pro.
  ☆10Sep 18, 2016Updated 9 years ago
• cisagov / pshtt_reporter

  View on GitHub
  Generate HTTPS reports based on scan data
  ☆15Updated this week
• Ganapati / Firmware_web_rce_finder

  View on GitHub
  FWRF is a open source tool for firmware web-side analysis.
  ☆11Aug 27, 2015Updated 10 years ago
• g0h4n / dende-rs

  View on GitHub
  Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written …
  ☆18Dec 1, 2025Updated 2 months ago
• cisagov / lambda_functions

  View on GitHub
  Generate AWS Lambda environment zip files for use by cisagov/domain-scan
  ☆12Oct 11, 2023Updated 2 years ago
• cornerpirate / rdpupload

  View on GitHub
  Python script which will type a file into an RDP session. For when drag and drop and disk mounting is not possible
  ☆33May 3, 2024Updated last year
• tevora-threat / eternal_blue_powershell

  View on GitHub
  Port of eternal blue exploits to powershell
  ☆151Jun 3, 2017Updated 8 years ago
• djhohnstein / CSharpCreateThreadExample

  View on GitHub
  C# code to run PIC using CreateThread
  ☆17Apr 19, 2019Updated 6 years ago
• deroko / activationcontext

  View on GitHub
  ☆16Dec 14, 2017Updated 8 years ago
• jephthai / NTFSx

  View on GitHub
  NTFSx is a tool for extracting files from an NTFS filesystem that are otherwise inaccessible.
  ☆14Jul 26, 2013Updated 12 years ago
• darkquasar / WMI_Persistence

  View on GitHub
  A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics
  ☆88Oct 6, 2017Updated 8 years ago
• RegSeek / regseek.github.io

  View on GitHub
  Vault of Windows Registry forensic artifacts
  ☆26Nov 12, 2025Updated 3 months ago
• whokilleddb / ClickForClickOnce

  View on GitHub
  ClickForClickOnce - Generate configurable clickonce payloads
  ☆88Oct 10, 2025Updated 4 months ago
• dobin / defender2yara

  View on GitHub
  Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB
  ☆24Jun 27, 2025Updated 7 months ago
• bleedx-93 / Spoofi

  View on GitHub
  A simple tool to inject shellcode into the remote process with the ability to spoof parent process.
  ☆16Mar 18, 2021Updated 4 years ago
• lkw657 / reversing_slides

  View on GitHub
  ☆20Sep 8, 2019Updated 6 years ago
• Mr-Un1k0d3r / SCT-obfuscator

  View on GitHub
  Cobalt Strike SCT payload obfuscator
  ☆143Jul 7, 2017Updated 8 years ago
• narhen / procjack

  View on GitHub
  PoC of injecting code into a running Linux process
  ☆23Sep 11, 2019Updated 6 years ago
• mdsecactivebreach / genHTA

  View on GitHub
  Generates anti-sandbox analysis HTA files without payloads
  ☆16Mar 16, 2017Updated 8 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free

  View on GitHub
  ☆16Jul 7, 2020Updated 5 years ago
• b1naryxx / AzureAD-Autologon-Password-Sprayer

  View on GitHub
  Multi-thread AzureAD Autologon SSO Password Sprayer.
  ☆37Oct 9, 2021Updated 4 years ago
• s0lari / Decoy-sploit

  View on GitHub
  Bunch of honey related items that spoof/decoy powersploit functions.
  ☆18Apr 23, 2020Updated 5 years ago
• tresacton / sploitkit

  View on GitHub
  A suite of CLI tools I built to automate some of the tedious parts of exploit development (specifically, crafting Buffer Overflow Exploit…
  ☆38Feb 21, 2016Updated 9 years ago
• jpginc / xbapAppWhitelistBypassPOC

  View on GitHub
  ☆29Oct 17, 2018Updated 7 years ago
• Raikia / CredSwissArmy

  View on GitHub
  DEPRECATED! LOOK AT CREDNINJA! A tool designed to identify if credentials are valid, invalid, or local admin valid credentials within a …
  ☆15Jun 24, 2016Updated 9 years ago
• 1aN0rmus / vtTracker

  View on GitHub
  Monitor JSON notifications feed from VT
  ☆17Jun 13, 2017Updated 8 years ago
• Cn33liz / TpmInitUACAnniversaryBypass

  View on GitHub
  Bypassing User Account Control (UAC) using TpmInit.exe
  ☆44Sep 26, 2016Updated 9 years ago
• HuskyHacks / windows-x64-shellcode-pipeline

  View on GitHub
  A Dockerized build pipeline for custom Windows x64 shellcode
  ☆53Dec 12, 2025Updated 2 months ago
• OVALProject / ovalproject.github.io

  View on GitHub
  OVAL Documentation
  ☆15Aug 4, 2017Updated 8 years ago
• two06 / AMSI_Handler

  View on GitHub
  Automate AV evasion by calling AMSI
  ☆88May 31, 2023Updated 2 years ago
• cirosec / warbird-demos

  View on GitHub
  ☆44Nov 7, 2024Updated last year
• wekillpeople / metasploit-loader

  View on GitHub
  metasploit loader with antivirus bypass module
  ☆18Jun 26, 2016Updated 9 years ago
• ig-labs / defender-mpengine-fuzzing

  View on GitHub
  Fuzzing Harness and Unpatched Crash Results from Fuzzing Defender MpEngine
  ☆39Jul 29, 2025Updated 6 months ago
• gleeda / misc-scripts

  View on GitHub
  misc scripts
  ☆35Oct 23, 2018Updated 7 years ago
• mitre / mitre.github.io

  View on GitHub
  Open Source software from The MITRE Corporation
  ☆25Jun 4, 2024Updated last year
• joeminicucci / RedIra

  View on GitHub
  A cloud automation system for Red Teams based on Terraform and Ansible
  ☆24Apr 21, 2021Updated 4 years ago
• vysecurity / morphHTA

  View on GitHub
  morphHTA - Morphing Cobalt Strike's evil.HTA
  ☆526Apr 14, 2023Updated 2 years ago