celyrin / cape-dockerLinks
Quickly deploy CAPEv2 Sandbox service in Docker
☆17Updated last year
Alternatives and similar repositories for cape-docker
Users that are interested in cape-docker are comparing it to the libraries listed below
Sorting:
- BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).☆497Updated 2 months ago
- Collection of Linux and macOS Volatility3 Intermediate Symbol Files (ISF), suitable for memory analysis 🔍☆248Updated last month
- Centralized resource for listing and organizing known injection techniques and POCs☆665Updated 3 weeks ago
- Cybersecurity research results. Simple C/C++ and Python implementations☆287Updated this week
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆202Updated 3 months ago
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,230Updated 2 years ago
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆474Updated 6 months ago
- CAPE core and community parsers☆17Updated this week
- A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…☆424Updated 11 months ago
- Extracted Yara rules from Windows Defender mpavbase and mpasbase☆484Updated 3 weeks ago
- Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antiv…☆476Updated last month
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆445Updated last year
- A curated list of ressources for Volatility 2 & 3☆13Updated last year
- Living Off The Land Drivers☆1,355Updated 3 weeks ago
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆691Updated 2 months ago
- A centralized and enhanced memory analysis platform☆511Updated 5 months ago
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆580Updated 5 months ago
- Collection of Volatility2 profiles, generated against Linux kernels.☆54Updated 2 months ago
- ☆380Updated last week
- A utility for playing with cryptography, geared towards ransomware analysis.☆316Updated 4 months ago
- Collect Windows telemetry for Maldev☆449Updated 2 months ago
- EDR Lab for Experimentation Purposes☆1,399Updated 2 months ago
- Shoggoth: Asmjit Based Polymorphic Encryptor☆771Updated last year
- Some of my publicly available Malware analysis and Reverse engineering.☆925Updated last year
- Assortment of hashing algorithms used in malware☆387Updated 2 months ago
- Python tool to check rootkits in Windows kernel☆204Updated 4 months ago
- Go symbol recovery tool☆879Updated last month
- Now You See Me, Now You Don't☆1,010Updated last week
- ☆409Updated last year
- Dynamic unpacker based on PE-sieve☆791Updated 3 months ago