Alternatives and similar repositories for mal_ex

Users that are interested in mal_ex are comparing it to the libraries listed below

• ArtemBaranov / WindowsRootkitsGuide
  ☆70Updated 9 months ago
• rad9800 / byor
  ☆157Updated 4 months ago
• rad9800 / PMD
  ☆152Updated 6 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆161Updated 7 months ago
• FuzzySecurity / BHUSA-2023
  ☆105Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆90Updated last year
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆165Updated last year
• cocomelonc / mdmz_book
  The result of research and investigation of malware development tricks, techniques, evasion, cryptography and linux malware
  ☆58Updated 2 months ago
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆201Updated 2 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆102Updated 5 months ago
• OtterHacker / Hooker
  ☆108Updated last year
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆161Updated 9 months ago
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆117Updated last year
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 8 months ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆71Updated 5 months ago
• dis0rder0x00 / obex
  Obex – Blocking unwanted DLLs in user mode
  ☆256Updated last month
• struppigel / hedgehog-tools
  ☆114Updated 3 months ago
• SafeBreach-Labs / wd-pretender
  ☆132Updated 2 years ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆150Updated 2 months ago
• MazX0p / CobaltSentry
  ☆24Updated 8 months ago
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆316Updated 2 years ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆107Updated 7 months ago
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆265Updated last year
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆193Updated 2 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆117Updated 6 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆200Updated 8 months ago
• wetw0rk / AWE-PREP
  Repository containing all training and tutorials completed in preparation for the OSEE in conjunction with the AWE course.
  ☆115Updated last month
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆89Updated 2 months ago
• lewiswigmore / Virus.xcheck
  Virus.xcheck is a Python tool designed to bulk verify the existence of file hashes in the Virus Exchange database and fetch download URLs…
  ☆57Updated last month
• dodo-sec / Malware-Analysis
  ☆136Updated 2 years ago