Alternatives and similar repositories for DotDumper

Users that are interested in DotDumper are comparing it to the libraries listed below

• mandiant / dncil
  The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
  ☆167Updated this week
• hexfati / SharpDllLoader
  A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL
  ☆135Updated last year
• pan-unit42 / dotnetfile
  ☆109Updated last month
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆117Updated 2 years ago
• rajiv2790 / FalconEye
  ☆300Updated 4 years ago
• xorhex / mlget
  A golang CLI tool to download malware from a variety of sources.
  ☆150Updated 3 months ago
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆120Updated last year
• daem0nc0re / AtomicSyscall
  Tools and PoCs for Windows syscall investigation.
  ☆362Updated 4 months ago
• OALabs / hashdb
  Assortment of hashing algorithms used in malware
  ☆379Updated this week
• struppigel / hedgehog-tools
  ☆113Updated 2 months ago
• Unprotect-Project / Unprotect_Submission
  Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…
  ☆195Updated 3 weeks ago
• malwarefrank / dnfile
  Parse .NET executable files.
  ☆76Updated last month
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆440Updated 3 months ago
• OALabs / Lab-Notes
  Code snips and notes
  ☆136Updated 3 years ago
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆366Updated 2 years ago
• trailofbits / RpcInvestigator
  Exploring RPC interfaces on Windows
  ☆330Updated last year
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆359Updated last week
• hasherezade / mal_unpack
  Dynamic unpacker based on PE-sieve
  ☆769Updated 3 weeks ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆420Updated 2 months ago
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆163Updated last year
• hasherezade / mal_unpack_drv
  MalUnpack companion driver
  ☆97Updated last year
• therealdreg / masm32-kernel-programming
  masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
  ☆126Updated 2 years ago
• poona / APIMiner
  API Logger for Windows Executables
  ☆79Updated 5 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆72Updated 3 weeks ago
• leandrofroes / gftrace
  A command line Windows API tracing tool for Golang binaries.
  ☆157Updated last year
• Dump-GUY / ConfuserEx2_String_Decryptor
  ConfuserEx2 String Decryptor & Full Deobfuscation Guide
  ☆86Updated last year
• manyfacedllama / amsi-tracer
  Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …
  ☆112Updated 4 years ago
• hasherezade / pe_unmapper
  Small tool to convert beteween the PE alignments (raw and virtual).
  ☆98Updated 2 years ago
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆333Updated 4 months ago
• ayoubfaouzi / windows-exploitation
  My notes while studying Windows exploitation
  ☆190Updated 2 years ago