Alternatives and similar repositories for ChromeRagamuffin

Users that are interested in ChromeRagamuffin are comparing it to the libraries listed below

• eset / volatility-browserhooks
  Volatility Framework plugin to detect various types of hooks as performed by banking Trojans
  ☆40Updated 7 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated 2 years ago
• mauronz / malware_analysis
  ☆15Updated 4 years ago
• Paul-Tew / lifer
  Windows link file (shortcuts) examiner
  ☆67Updated last year
• Fmk0 / templates
  ☆36Updated 6 years ago
• analyzeDFIR / analyzePF
  Tool for analysis of Windows Prefetch files
  ☆26Updated 7 years ago
• Big5-sec / SourceFu
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Updated 6 years ago
• archcloudlabs / r2elk
  Radare2 Metadata Extraction to Elasticsearch
  ☆23Updated last year
• intezer / analyze-community-ghidra-plugin
  Ghidra plugin for https://analyze.intezer.com
  ☆72Updated 3 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 7 years ago
• mandiant / remote_lookup
  Resolves DLL API entrypoints for a process w/ remote query capabilities.
  ☆58Updated 8 years ago
• aleksost / MemoryDecompression
  Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.
  ☆51Updated 6 years ago
• mbrown1413 / SqliteFind
  A Volatility plugin for finding sqlite database rows
  ☆21Updated 6 years ago
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 5 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 8 years ago
• iNod3 / sandbagility
  ☆23Updated 6 years ago
• cyb3rfox / MFTEntryCarver
  Carve files for MFT entries (eg. blkls output or memory dumps). Recovers filenames (long & short), timestamps ($STD & $FN) and data if re…
  ☆22Updated 6 years ago
• necst / crave
  Framework to automatically test and explore the capabilities of generic AV engines
  ☆69Updated 6 years ago
• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆16Updated 2 years ago
• arieljt / VTCodeBlocks-Maltego
  Maltego transforms to pivot between PE files based on their VirusTotal codeblocks
  ☆18Updated 4 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆34Updated 6 years ago
• re-fox / documentation
  ☆13Updated 5 years ago
• naxonez / YaraRules
  Yaras Random
  ☆22Updated 6 years ago
• conix-security / machoke
  ☆53Updated 7 years ago
• sebmarchand / pyetw
  ☆13Updated 9 years ago
• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆77Updated 11 years ago
• REal0day / MaliciousPark
  Another Repo of Malware. Enjoy. <3
  ☆60Updated 6 years ago
• blacknbunny / peanalyzer
  Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
  ☆100Updated 6 years ago
• DissectMalware / PySameSame
  This is a python version of samesame repo to generate homograph strings
  ☆24Updated 7 years ago