Alternatives and similar repositories for tooling-playground

Users that are interested in tooling-playground are comparing it to the libraries listed below

• knight0x07 / OneNoteAnalyzer
  A C# based tool for analysing malicious OneNote documents
  ☆118Updated 2 years ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 9 months ago
• jaredcatkinson / MalwareMorphology
  ☆83Updated last year
• kacos2000 / Prefetch-Browser
  Browse Windows Prefetch versions: 17,23,26,30v1/2,31 & some of SuperFetch .7db/.db's
  ☆63Updated 11 months ago
• MalwareTech / HiddenDesktop
  Create and enumerate hidden desktops.
  ☆88Updated last year
• naacbin / CovenantDecryptor
  ☆34Updated 2 years ago
• jonny-jhnson / PowerParse
  PowerShell PE Parser
  ☆64Updated last year
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆138Updated last year
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆52Updated 11 months ago
• ashemery / Anti-Forensics
  A Repository to Track Anti-Forensic Techniques
  ☆117Updated 2 years ago
• dr4k0nia / yara-rules
  A collection of my yara rules
  ☆34Updated 2 years ago
• SafeBreach-Labs / DoubleDrive
  A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files
  ☆127Updated last year
• ArtemBaranov / WindowsRootkitsGuide
  ☆71Updated 10 months ago
• magicsword-io / LOLBASline
  Baseline a Windows System against LOLBAS
  ☆69Updated last year
• rtfmkiesel / loldrivers-client
  Scan your computer for known vulnerable and known malicious Windows drivers using loldrivers.io
  ☆86Updated this week
• sensepost / mydumbedr
  ☆120Updated last year
• SafeBreach-Labs / aikido_wiper
  ☆68Updated 2 years ago
• MazX0p / CobaltSentry
  ☆24Updated 9 months ago
• vc0RExor / Malware-Threat-Reports
  A full analysis report detailing as much as possible of a Malware or a Threat
  ☆31Updated last year
• yo-yo-yo-jbo / injection_and_hooking_intro
  ☆38Updated 2 years ago
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆73Updated last week
• alwashali / detection-validation
  Detection rule validation
  ☆40Updated 2 years ago
• DISREL / Conti-Leaked-Playbook-TTPs
  MITRE TTPs derived from Conti's leaked playbooks from XSS.IS
  ☆39Updated 4 years ago
• dodo-sec / Malware-Analysis
  ☆139Updated 2 years ago
• patrickmatula / Windows-Internals-Learning-Resources
  ☆110Updated last year
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆37Updated last year
• 0x4141414141 / Malware-Devlopment
  Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C
  ☆39Updated 5 years ago
• georgesotiriadis / MalwareDev
  ☆84Updated 3 years ago
• daddycocoaman / volplugins
  Repository of Volatility3 plugins
  ☆22Updated 2 years ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆46Updated 2 years ago