Tool for solving BPF filters and crafting packets based on these.
☆63Apr 23, 2026Updated 2 months ago
Alternatives and similar repositories for filterforge
Users that are interested in filterforge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 4 months ago
- The Dissect module tying all other Dissect modules together. It provides a programming API and command line tools which allow easy access…☆90Updated this week
- ☆15Mar 27, 2026Updated 3 months ago
- Memory API proxy via signed mozglue.dll☆40Jun 25, 2026Updated 3 weeks ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆24Mar 4, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- MuddyWater C2 framework research☆11Jun 28, 2023Updated 3 years ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆86Jun 27, 2026Updated 2 weeks ago
- linux, kernel, rootkit, educational, cybersecurity☆31Apr 12, 2026Updated 3 months ago
- ☆28Mar 14, 2026Updated 4 months ago
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- ☆198Jun 11, 2026Updated last month
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆111Jun 22, 2026Updated 3 weeks ago
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Comprehensive Windows Syscall Extraction & Analysis Framework☆172Aug 30, 2025Updated 10 months ago
- Live index of all X.509 Certificates in Step CA queryable via GUI and API, easy human onboarding with in-browser CSR generation.☆26May 13, 2026Updated 2 months ago
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- OpenGraph Collector for Tailscale☆43Jul 9, 2026Updated last week
- Install Script for CS☆11Aug 26, 2019Updated 6 years ago
- ☆16Apr 21, 2026Updated 2 months ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Elastic Security Labs' malware analysis and reverse engineering library☆56Mar 10, 2026Updated 4 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆20Jul 3, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Gets the name of all currently running process then checks them against a list of known defensive products such as AV's, EDR's and loggin…☆15Oct 8, 2022Updated 3 years ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆62Jun 15, 2026Updated last month
- A collection of tools and detections for the Sliver C2 Frameworj☆136Apr 24, 2023Updated 3 years ago
- ☆62Feb 12, 2026Updated 5 months ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆32Updated this week
- ☆23Aug 1, 2020Updated 5 years ago
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆23Apr 6, 2026Updated 3 months ago
- LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footpr…☆19May 25, 2026Updated last month
- ☆28Jun 21, 2026Updated 3 weeks ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆15May 26, 2021Updated 5 years ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆87Nov 6, 2025Updated 8 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆69Jul 7, 2026Updated last week
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated 9 months ago
- A simple commandline application to automatically decrypt strings from Obfuscator protected binaries☆48Jun 15, 2024Updated 2 years ago
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆33Feb 17, 2026Updated 5 months ago