Alternatives and similar repositories for amsiscanner

Users that are interested in amsiscanner are comparing it to the libraries listed below

• hcyang1012 / SecurityMonitor

  View on GitHub
  ☆12Feb 19, 2017Updated 8 years ago
• louk78 / Virgo

  View on GitHub
  Minifilter Driver
  ☆15Feb 10, 2017Updated 9 years ago
• uniking / TDI-Demo

  View on GitHub
  ☆17Mar 3, 2016Updated 9 years ago
• shvc / kernel

  View on GitHub
  kernel space code
  ☆12Jun 8, 2019Updated 6 years ago
• IgorKorkin / AllMemPro

  View on GitHub
  AllMemPro
  ☆46Jan 15, 2018Updated 8 years ago
• zer0mem / VadScanner

  View on GitHub
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27May 21, 2014Updated 11 years ago
• Microwave89 / drvtricks

  View on GitHub
  drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
  ☆34Oct 6, 2017Updated 8 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7

  View on GitHub
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22May 31, 2017Updated 8 years ago
• JokerMars / MiniEngine

  View on GitHub
  Final Transparent encrypted version
  ☆14Jan 10, 2017Updated 9 years ago
• StrikerX3 / haxmclient

  View on GitHub
  HAXM hypervisor client
  ☆18Nov 30, 2018Updated 7 years ago
• ajkhoury / Dude-Loader

  View on GitHub
  Class implementation of PowerLoader injection technique
  ☆32Dec 23, 2016Updated 9 years ago
• ghonsa / DeviceDmp

  View on GitHub
  Windows device tree walker
  ☆15Sep 19, 2018Updated 7 years ago
• dotfornet / WindowsUtil

  View on GitHub
  ☆14Jan 10, 2017Updated 9 years ago
• wolk-1024 / WoW64Utils

  View on GitHub
  WoW64 -> x64
  ☆18Oct 1, 2016Updated 9 years ago
• KelvinMsft / SyncJobs_MPSystem

  View on GitHub
  ☆14Aug 15, 2018Updated 7 years ago
• int0 / pinlog

  View on GitHub
  API logger plugin for Intel Pintool
  ☆14Nov 19, 2017Updated 8 years ago
• johnsonjason / Remote-Thread-Executor

  View on GitHub
  Code injection by hijacking threads in Windows 32-bit applications
  ☆43Oct 3, 2018Updated 7 years ago
• wanttobeno / IDAStealth-v1.3.3

  View on GitHub
  IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger
  ☆21Apr 4, 2018Updated 7 years ago
• mq1n / Wow64SyscallHook

  View on GitHub
  Wow64 syscall hook
  ☆42May 28, 2017Updated 8 years ago
• luzhlon / wdbg

  View on GitHub
  A debbuger based dbgeng for WIndows
  ☆34Aug 23, 2017Updated 8 years ago
• dro / uac-launchinf-poc

  View on GitHub
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆35Aug 3, 2018Updated 7 years ago
• wpggles / pafish4vs

  View on GitHub
  Pafish4vs is based on [Pafish]( https://github.com/a0rtega/pafish) , just ported to the VS (VC) compiler (X64 , X86) .
  ☆12Aug 19, 2016Updated 9 years ago
• 0xdead4ead / PE-VIEWER

  View on GitHub
  PE/PE +(64bit) Viewer (Qt 5.8)
  ☆10Aug 3, 2018Updated 7 years ago
• hellopw / fiddle

  View on GitHub
  基于WinDivert实现的一个包过滤与截断程序
  ☆13Jul 22, 2018Updated 7 years ago
• cloudbase / HyperVPCapExt

  View on GitHub
  Hyper-V virtual switch packet capturing extension with libpcap / Wireshark format
  ☆13Jun 3, 2014Updated 11 years ago
• killvxk / VoxDebugger

  View on GitHub
  An analytical debugger programmed in C++, using Qt.
  ☆22May 20, 2012Updated 13 years ago
• Kirbiflint50 / KirbiDSM

  View on GitHub
  Decompile an x86 exe, and read PE infos.
  ☆19Sep 29, 2018Updated 7 years ago
• AzureGreen / WinNT-Learning

  View on GitHub
  Notes my learning steps about Windows-NT
  ☆23May 18, 2017Updated 8 years ago
• long123king / PE-Replay

  View on GitHub
  This is a pintool that can analyze target dynamically and output code blocks and "key frames".
  ☆14Mar 26, 2015Updated 10 years ago
• xjlzyi / gameplug

  View on GitHub
  pass game protect
  ☆12Apr 26, 2014Updated 11 years ago
• tandasat / RemoteWriteMonitor

  View on GitHub
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆78Aug 12, 2015Updated 10 years ago
• CylanceVulnResearch / ReflectiveDLLRefresher

  View on GitHub
  Universal Unhooking
  ☆326Sep 19, 2018Updated 7 years ago
• tandasat / EopMon

  View on GitHub
  Elevation of privilege detector based on HyperPlatform
  ☆124Mar 5, 2017Updated 8 years ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• EvilKnight1986 / Simrep

  View on GitHub
  windows kernel File redirection
  ☆20Sep 21, 2014Updated 11 years ago
• bilka00 / PayloadAdder

  View on GitHub
  PE32 binary + W32 payload
  ☆11Jul 23, 2017Updated 8 years ago
• tandasat / cs_driver

  View on GitHub
  A sample project for using Capstone from a driver in Visual Studio 2015
  ☆36May 4, 2016Updated 9 years ago
• rwfpl / rewolf-ldrdebug

  View on GitHub
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Mar 15, 2015Updated 10 years ago
• sin5678 / wow64hook

  View on GitHub
  wow64 syscall filter
  ☆13Nov 12, 2014Updated 11 years ago