Alternatives and similar repositories for rifiuti2

Users that are interested in rifiuti2 are comparing it to the libraries listed below

• silascutler / LnkParse
  Windows Shortcut file (LNK) parser
  ☆136Updated 2 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆220Updated 4 years ago
• jschicht / UsnJrnl2Csv
  Parser for $UsnJrnl on NTFS
  ☆111Updated 2 years ago
• yanncam / exe2powershell
  exe2powershell - exe2bat reborn for modern Windows
  ☆171Updated 4 years ago
• adamkramer / dll_hijack_detect
  Detects DLL hijacking in running processes on Windows systems
  ☆155Updated 10 years ago
• gushmazuko / WinBypass
  Windows UAC Bypass
  ☆98Updated 6 years ago
• DimopoulosElias / alpc-mmc-uac-bypass
  UAC Bypass with mmc via alpc
  ☆156Updated 6 years ago
• mandiant / flashmingo
  Automatic analysis of SWF files based on some heuristics. Extensible via plugins.
  ☆119Updated 6 years ago
• HarmJ0y / pylnker
  This is a Python port of lnk-parse-1.0, a tool to parse Windows .lnk files.
  ☆77Updated 2 years ago
• williballenthin / shellbags
  Cross-platform, open-source shellbag parser
  ☆149Updated 2 years ago
• fox-it / danderspritz-evtx
  Parse evtx files and detect use of the DanderSpritz eventlogedit module
  ☆148Updated 7 years ago
• dfirfpi / dpapilab
  Windows DPAPI laboratory
  ☆93Updated 7 years ago
• droe / acefile
  read/test/extract ACE 1.0 and 2.0 archives in pure python
  ☆77Updated 8 months ago
• trustedsec / tscopy
  ☆92Updated 3 years ago
• jschicht / ExtractUsnJrnl
  Tool to extract the $UsnJrnl from an NTFS volume
  ☆107Updated 5 years ago
• you0708 / lznt1
  Python implementation of LZNT1 compression/decompression
  ☆65Updated 5 years ago
• deadjakk / patch-checker
  Web-based check for Windows privesc vulnerabilities
  ☆139Updated 2 years ago
• 3gstudent / Eventlogedit-evtx--Evolution
  Remove individual lines from Windows XML Event Log (EVTX) files
  ☆270Updated 4 years ago
• enigma0x3 / MessageBox
  PoC dlls for Task Scheduler COM Hijacking
  ☆94Updated 8 years ago
• limbenjamin / TCPHound
  Win32 utility for auditing TCP connections
  ☆56Updated 4 years ago
• huntresslabs / evading-autoruns
  Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)
  ☆104Updated 4 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆211Updated 4 months ago
• arizvisa / windows-binary-tools
  Various tools besides Msys2 that I've found useful to have available on windows. Create an issue if you have anything you want to add, wa…
  ☆143Updated 6 months ago
• milkdevil / UltimateAppLockerByPassList
  ☆58Updated 4 years ago
• sailay1996 / UAC_bypass_windows_store
  Windows 10 LPE (UAC Bypass) in Windows Store (WSReset.exe)
  ☆266Updated 5 years ago
• NotGlop / SysExec
  [Windows] Local Privilege Escalation - WebClient
  ☆58Updated 8 years ago
• r4wd3r / RID-Hijacking
  Windows RID Hijacking persistence technique
  ☆175Updated 7 months ago
• sud0woodo / DCOMrade
  Powershell script for enumerating vulnerable DCOM Applications
  ☆260Updated 6 years ago
• GoSecure / DLLPasswordFilterImplant
  DLL Password Filter Implant with Exfiltration Capabilities
  ☆138Updated 5 years ago
• misterch0c / APT34
  APT34/OILRIG leak
  ☆233Updated 6 years ago