Alternatives and similar repositories for dumpscan

Users that are interested in dumpscan are comparing it to the libraries listed below

• sensepost / mydumbedr
  ☆121Updated last year
• RedTeamOperations / Journey-to-McAfee
  ☆113Updated 3 years ago
• VirtualAlllocEx / Taskschedule-Persistence-Download-Cradles
  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged
  ☆87Updated 3 years ago
• Octoberfest7 / BeatRev
  POC for frustrating/defeating Malware Analysts
  ☆156Updated 3 years ago
• ScriptIdiot / SysmonQuiet
  RDLL for Cobalt Strike beacon to silence sysmon process
  ☆89Updated 3 years ago
• tccontre / Reg-Restore-Persistence-Mole
  a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…
  ☆51Updated 2 years ago
• ghostpepper108 / Evasion
  ☆108Updated 2 years ago
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆86Updated 2 years ago
• tothi / stager_libpeconv
  A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading
  ☆84Updated 2 years ago
• dsnezhkov / shutter
  ☆120Updated 4 years ago
• rtfmkiesel / loldrivers-client
  Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
  ☆86Updated 2 months ago
• georgesotiriadis / MalwareDev
  ☆84Updated 3 years ago
• paranoidninja / Cobaltstrike-Detection
  This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared
  ☆88Updated last year
• SpikySabra / Kernel-Cactus
  It's pointy and it hurts!
  ☆126Updated 2 years ago
• rkbennett / pybof
  Python module for running BOFs
  ☆72Updated 2 years ago
• thiagopeixoto / massayo
  Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL
  ☆65Updated 3 years ago
• 0xsp-SRD / 0xsp.com
  a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab
  ☆64Updated 9 months ago
• codewhitesec / SysmonEnte
  ☆74Updated 2 years ago
• Helixo32 / SimpleEDR
  Simple EDR that injects a DLL into a process to place a hook on specific Windows API
  ☆95Updated 2 years ago
• PacktPublishing / Windows-APT-Warfare
  Windows APT Warfare, published by Packt
  ☆76Updated 2 years ago
• yo-yo-yo-jbo / injection_and_hooking_intro
  ☆39Updated 2 years ago
• ZeroMemoryEx / SleepKiller
  Bypass Malware Time Delays
  ☆104Updated 3 years ago
• ustayready / wnfexec
  WNF Code Execution Library Using C#
  ☆111Updated 5 years ago
• vvelitkn / Evasion-Escaper
  Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…
  ☆107Updated 7 months ago
• joe-desimone / rep-research
  ☆77Updated last year
• SafeBreach-Labs / aikido_wiper
  ☆68Updated 2 years ago
• pracsec / AmsiScanner
  A tool for interacting with the Anti-Malware Scan Interface API for pen testing purposes.
  ☆65Updated last year
• pwnsauc3 / RWXfinder
  The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section
  ☆106Updated 2 years ago
• vatsalgupta67 / Process-Hollowing
  Red Team Operation's Defense Evasion Technique.
  ☆55Updated last year
• mattifestation / AntimalwareBlight
  Execute PowerShell code at the antimalware-light protection level.
  ☆141Updated 2 years ago