A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ;)
☆423Jul 4, 2025Updated last year
Alternatives and similar repositories for VBoxCloak
Users that are interested in VBoxCloak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analys…☆451Jan 25, 2025Updated last year
- A collection of small scripts and tools for deobfuscation and malware analysis.☆67Mar 27, 2023Updated 3 years ago
- Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that…☆3,942Jun 21, 2024Updated 2 years ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆81Aug 7, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Malware Configuration And Payload Extraction☆3,595Updated this week
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆389Jul 30, 2024Updated 2 years ago
- An automatic unpacker and logger for DotNet Framework targeting files☆264Aug 23, 2023Updated 3 years ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,261Updated this week
- Script to create templates to use with VirtualBox to make vm detection harder☆781Nov 5, 2022Updated 3 years ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆35Jun 30, 2023Updated 3 years ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Aims to identify sleeping beacons☆686Jan 25, 2026Updated 8 months ago
- A collection of tools Neil and Andy have been working on released in one place and interlinked with previous tools☆87Jul 12, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Now You See Me, Now You Don't☆1,073May 22, 2026Updated 4 months ago
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆7,163Jul 1, 2026Updated 3 months ago
- Dynamic unpacker based on PE-sieve☆842Apr 14, 2026Updated 6 months ago
- ☆40Jul 19, 2026Updated 3 months ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆590May 5, 2024Updated 2 years ago
- Malduck is your ducky companion in malware analysis journeys☆357Jun 22, 2025Updated last year
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,925Jun 6, 2026Updated 4 months ago
- MacroExploit use in excel sheet☆21Jun 12, 2023Updated 3 years ago
- Simple Kernel Mode Driver for Swapping Process Token☆130Sep 19, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆306Aug 2, 2023Updated 3 years ago
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆318Aug 31, 2023Updated 3 years ago
- ☆47Feb 11, 2023Updated 3 years ago
- A C# based tool for analysing malicious OneNote documents☆117Apr 4, 2023Updated 3 years ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆134Nov 25, 2023Updated 2 years ago
- Teamsniper is a tool for fetching keywords in a Microsoft Teams such as (passwords, emails, database, etc.).☆199Sep 19, 2022Updated 4 years ago
- A dynamic unpacking tool☆154Sep 17, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Deleting Shadow Copies In Pure C++☆118Oct 31, 2022Updated 3 years ago
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,695Updated this week
- RegStrike is a .reg payload generator☆60Sep 19, 2023Updated 3 years ago
- Windows kernel and user mode emulation.☆2,080Oct 11, 2026Updated last week
- Credential Guard Bypass Via Patching Wdigest Memory☆339Feb 3, 2023Updated 3 years ago
- WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement☆372Dec 24, 2021Updated 4 years ago
- Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories,…☆761Feb 24, 2026Updated 7 months ago