SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detections down to precise offsets and maps them to PE sections, RVA, VA, hexdump, and nearby strings, making evasion faster and easier. Built for fast AV signature triage on Windows
☆44Oct 29, 2026Updated last week
Alternatives and similar repositories for SigLens
Users that are interested in SigLens are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated last week
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆64Jul 22, 2026Updated 3 months ago
- Rust based C2 Framework☆35Sep 29, 2026Updated last month
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆31Jul 25, 2026Updated 3 months ago
- ☆39Sep 8, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated last month
- Interactive Active Directory shell and attack toolkit over LDAP(S) or ADWS (SOAP) written in Rust. 🦀☆48Updated this week
- Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax☆13Updated this week
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆116Oct 18, 2026Updated 3 weeks ago
- Automated adversary emulation (Caldera) against an AD lab to validate Sigma detection coverage and map results to MITRE ATT&CK.☆59Sep 25, 2026Updated last month
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆78Oct 18, 2026Updated 3 weeks ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 3 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- ☆22Jun 28, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 5 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- Clean Indirect Syscalls with Syscall Tampering.☆52Oct 25, 2026Updated 2 weeks ago
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆34Oct 26, 2026Updated 2 weeks ago
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆33Oct 29, 2026Updated last week
- A GUI for Sliver☆181Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Aug 29, 2021Updated 5 years ago
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆92Jul 20, 2026Updated 3 months ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆136Aug 23, 2025Updated last year
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 3 weeks ago
- KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.☆252Sep 15, 2026Updated last month
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 7 months ago
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 3 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆50Oct 25, 2026Updated 2 weeks ago
- A network segmentation and egress control testing tool for PCI DSS v4.0 compliance. Automatically discovers network segments, validates i…☆14May 20, 2026Updated 5 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- ☆74Oct 27, 2026Updated last week
- Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directo…☆175Updated this week
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Oct 24, 2026Updated 2 weeks ago
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 6 months ago
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆57Oct 13, 2026Updated 3 weeks ago
- Just another story about dragons...☆57Updated this week