Alternatives and similar repositories for Malware-Development

Users that are interested in Malware-Development are comparing it to the libraries listed below

• outflanknl / Training-MSOfficeOffensiveTradecraft
  Info related to the Outflank training: Microsoft Office Offensive Tradecraft
  ☆50Updated last year
• Pascal-0x90 / sideloadr
  Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
  ☆58Updated 3 years ago
• sidaf / moonshine
  ☆70Updated 2 years ago
• Helixo32 / SimpleEDR
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆95Updated 2 years ago
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆89Updated 2 months ago
• FuzzySecurity / SAFACon-Vienna
  ☆23Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆23Updated 9 months ago
• ImpostorKeanu / eavesarp-ng
  ☆38Updated 5 months ago
• AssuranceMaladieSec / FoxTerrier
  Python tool to find vulnerable AD object and generating csv report
  ☆26Updated 3 years ago
• Mr-Un1k0d3r / MsGraphFunzy
  Scripts to interact with Microsoft Graph APIs
  ☆43Updated 11 months ago
• heartburn-dev / PKI-Escalate
  Quick and dirty PowerShell script to abuse the overly permissive capabilities of the SYSTEM user in a child domain on the Public Key Serv…
  ☆25Updated 2 years ago
• 0xv1n / Havoc-ProfileGenerator
  malleable profile generator GUI for Havoc
  ☆55Updated 2 years ago
• 4ndr34z / prenum
  ☆28Updated 2 years ago
• garrettfoster13 / fustercluck
  POC tool to abuse windows server failover clusters
  ☆46Updated 2 months ago
• MartinoTommasini / offlineSCCMdecrypt
  Step-by-step documentation on how to decrypt SCCM database secrets offline
  ☆42Updated last week
• OtterHacker / ShareFouine
  ☆51Updated last year
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆41Updated 4 years ago
• myexploit / living_off_the_land
  ☆44Updated last year
• 0xB455 / ActiveSyncBruter
  ☆26Updated 7 months ago
• mlcsec / SharpGraphView
  Microsoft Graph API post-exploitation toolkit
  ☆94Updated last year
• ASOT-LABS / TeamsBreaker
  ☆46Updated last year
• Helixo32 / DetectHooks
  Detect userland hooks placed by AV/EDR
  ☆28Updated 2 years ago
• ACE-Responder / rpcfirewall-extended-telemetry
  ☆14Updated last year
• iomoath / RedWardenLite
  A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.
  ☆45Updated 2 years ago
• atomicchonk / roadrecon_mcp_server
  Claude MCP server to perform analysis on ROADrecon data
  ☆48Updated 7 months ago
• RWXstoned / GimmeShelter
  Situational Awareness script to identify how and where to run implants
  ☆67Updated 10 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated last year
• tnkr / poc_monitor
  A short scraper looking for a POC of CVE-2024-49112
  ☆14Updated 10 months ago
• OtterHacker / AWSRoundRobin
  ☆41Updated 8 months ago
• bagelByt3s / ludus_adfs
  An Ansible collection that installs an ADFS deployment with optional configurations.
  ☆42Updated 10 months ago