Sentinel-One / SKREAM

Related projects ⓘ

Alternatives and complementary repositories for SKREAM

• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆73Updated 4 months ago
• 0vercl0k / symbolizer
  A fast execution trace symbolizer for Windows.
  ☆130Updated 6 months ago
• RceNinja / Re-Scripts
  ☆33Updated 3 years ago
• 86hh / POC-viruses
  POC viruses I have created to demo some ideas
  ☆59Updated 4 years ago
• 0vercl0k / pywinhv
  Python bindings for the Microsoft Hypervisor Platform APIs.
  ☆66Updated 5 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆71Updated 5 years ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆92Updated 2 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆59Updated 8 years ago
• reb311ion / emerald
  Import DynamoRIO drcov code coverage data into Ghidra
  ☆42Updated 11 months ago
• progmboy / win32kext
  windbg plugin for win32k debugging
  ☆72Updated 5 years ago
• benoitsevens / applying-ttd-to-malware-analysis
  Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
  ☆39Updated 5 years ago
• fishstiqz / poolinfo
  kernel pool windbg extension
  ☆79Updated 9 years ago
• synacktiv / vmx_intrinsics
  VMX intrinsics plugin for Hex-Rays decompiler
  ☆70Updated 5 years ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆117Updated 7 years ago
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆172Updated 6 months ago
• sam-b / HackSysDriverExploits
  ☆47Updated 7 years ago
• bootkitsbook / bootkits
  ☆60Updated 5 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆54Updated 4 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆117Updated 4 years ago
• cbayet / PoolSprayer
  Simple library to spray the Windows Kernel Pool
  ☆104Updated 4 years ago
• tenable / mIDA
  ☆33Updated last year
• RolfRolles / FinSpyVM
  Static unpacker for FinSpy VM
  ☆97Updated 3 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆66Updated 4 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆44Updated 4 years ago
• gerhart01 / Hyper-V-scripts
  Hyper-V scripts
  ☆112Updated last year
• redplait / armpatched
  clone of armadillo patched for windows
  ☆46Updated 3 weeks ago
• d00rt / ebfuscator
  Ebfuscator: Abusing system errors for binary obfuscation
  ☆52Updated 4 years ago
• gerhart01 / hyperv_local_dos_poc
  CVE-2020-0890 | Windows Hyper-V Denial of Service Vulnerability proof-of-concept code
  ☆36Updated 4 years ago
• thalium / idatag
  IDA plugin to explore and browse tags
  ☆52Updated 5 years ago