Alternatives and similar repositories for MorphAES:

Users that are interested in MorphAES are comparing it to the libraries listed below

• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆313Updated 6 years ago
• secretsquirrel / fido
  Teaching old shellcode new tricks
  ☆205Updated 7 years ago
• BorjaMerino / Pazuzu
  Pazuzu: Reflective DLL to run binaries from memory
  ☆214Updated 4 years ago
• FuzzySecurity / DefCon25
  UAC 0day, all day!
  ☆277Updated 7 years ago
• EgeBalci / Cminer
  Cminer is a tool for enumerating the code caves in PE files.
  ☆148Updated last year
• francisck / DanderSpritz_docs
  The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-e…
  ☆303Updated 6 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆292Updated 7 months ago
• kgretzky / python-x86-obfuscator
  This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.
  ☆236Updated 8 years ago
• r00tkillah / HORSEPILL
  HORSEPILL rootkit PoC
  ☆225Updated 8 years ago
• silentbreaksec / Throwback
  HTTP/S Beaconing Implant
  ☆304Updated 7 years ago
• govolution / avepoc
  some pocs for antivirus evasion
  ☆130Updated last year
• hfiref0x / ZeroAccess
  ZeroAccess v3 toolkit
  ☆164Updated 7 years ago
• FSecureLABS / wePWNise
  WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application cont…
  ☆352Updated 6 years ago
• Cn33liz / TpmInitUACBypass
  Bypassing User Account Control (UAC) using TpmInit.exe
  ☆127Updated 8 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆424Updated 5 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆281Updated 7 years ago
• shellntel-acct / backdoors
  ☆127Updated 9 years ago
• hasherezade / malware_analysis
  Various snippets created during malware analysis
  ☆458Updated 2 years ago
• 0x09AL / DropboxC2C
  DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
  ☆148Updated 6 years ago
• OneLogicalMyth / zeroday-powershell
  A PowerShell example of the Windows zero day priv esc
  ☆324Updated 6 years ago
• vysecurity / morphHTA
  morphHTA - Morphing Cobalt Strike's evil.HTA
  ☆517Updated last year
• v-p-b / peCloakCapstone
  Platform independent peCloak fork based on Capstone
  ☆103Updated 8 years ago
• two06 / Inception
  Provides In-memory compilation and reflective loading of C# apps for AV evasion.
  ☆368Updated last year
• khr0x40sh / MacroShop
  Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.
  ☆406Updated 8 years ago
• Spajed / processrefund
  An attempt at Process Doppelgänging
  ☆184Updated 7 years ago
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆304Updated 5 years ago
• 0xdeadbeefJERKY / Office-DDE-Payloads
  Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.
  ☆635Updated last year
• Arno0x / DBC2
  DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any m…
  ☆295Updated 7 years ago
• Cr4sh / WindowsRegistryRootkit
  Kernel rootkit, that lives inside the Windows registry values data
  ☆490Updated 7 years ago
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆340Updated 6 years ago