Alternatives and similar repositories for TriageMCP

Users that are interested in TriageMCP are comparing it to the libraries listed below

• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 10 months ago
• OtterHacker / Hooker
  ☆106Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆34Updated last year
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 5 months ago
• ArtemBaranov / WindowsRootkitsGuide
  ☆72Updated 11 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆160Updated 4 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆100Updated 7 months ago
• winsecurity / MaleficentVM
  This is practice VM for malware development
  ☆174Updated last month
• hasherezade / flareon2024
  ☆39Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆119Updated last year
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• rad9800 / talks
  ☆60Updated 8 months ago
• SaadAhla / VSCode-Backdoor
  Backdooring VSCode Projects
  ☆84Updated 7 months ago
• whokilleddb / sinister-vsix
  Blog/Journal on how to backdoor VSCode extensions
  ☆76Updated 5 months ago
• mez-0 / citadel
  A Payload Analysis Framework
  ☆112Updated 3 months ago
• 20urc3 / Aplos
  Aplos an extremely simple fuzzer for Windows binaries.
  ☆68Updated 10 months ago
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆123Updated 2 weeks ago
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆59Updated 10 months ago
• yo-yo-yo-jbo / commandline_spoofing
  Commandline spoofing on Windows
  ☆90Updated last month
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆65Updated 11 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆102Updated 9 months ago
• ustayready / tradecraft
  Red Teaming Tradecraft
  ☆28Updated 3 years ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆92Updated last year
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆91Updated 5 months ago
• jaredcatkinson / MalwareMorphology
  ☆84Updated last year
• xpn / mythic_mcp
  A simple POC to expose Mythic as a MCP server
  ☆73Updated 9 months ago
• sensepost / mydumbedr
  ☆121Updated last year
• 0x4141414141 / Malware-Devlopment
  Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C
  ☆39Updated 6 years ago
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆137Updated 4 months ago
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆66Updated 7 months ago