Alternatives and similar repositories for DotNet-MetaData

Users that are interested in DotNet-MetaData are comparing it to the libraries listed below

• cod3nym / Ghosting-AMSI
  Ghosting-AMSI
  ☆17Updated 2 months ago
• fr0gger / shellcode2exe_package
  x64 Windows package of the shellcode2exe tool
  ☆14Updated 4 years ago
• SolomonSklash / COM-Hijacking
  An example of COM hijacking using a proxy DLL.
  ☆28Updated 3 years ago
• rbmm / Services
  ☆18Updated 6 months ago
• DissectMalware / yaradbg-frontend
  ☆39Updated last year
• Foolish1337 / kernel-programming
  Progress of learning kernel development
  ☆14Updated 2 years ago
• nullsection / SharpETW-Patch
  ☆23Updated last year
• rbmm / ARL
  ☆25Updated 5 months ago
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆42Updated last year
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated 7 months ago
• matterpreter / cpuid
  A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class
  ☆26Updated last year
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated 9 months ago
• jonny-jhnson / JonMon-Lite
  ☆42Updated last month
• peasead / windows-sandbox-to-elastic
  Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.
  ☆50Updated last year
• airbus-seclab / nbutools
  Tools for offensive security of NetBackup infrastructures
  ☆41Updated 2 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• naksyn / talks
  Repo containing my public talks
  ☆23Updated 2 years ago
• synacktiv / pcapan
  A pcap capture analysis helper
  ☆24Updated last year
• vysecurity / PacketParser
  A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.
  ☆21Updated 11 months ago
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• FuzzySecurity / SAFACon-Vienna
  ☆23Updated last year
• Teach2Breach / NtCreateUserProcess_rs
  example using NtCreateUserProcess in rust
  ☆19Updated 5 months ago
• yo-yo-yo-jbo / anti_debugging_intro
  ☆25Updated 2 years ago
• rbmm / Hollowed-Process
  ☆26Updated 4 months ago
• EgeBalci / syscall_api
  ☆37Updated 2 years ago
• codewhitesec / apollon
  Proof-of-Concept to evade auditd by writing /proc/PID/mem
  ☆22Updated last year
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆31Updated last year
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆17Updated last year
• matthw / malware_analysis
  ☆18Updated last year