Alternatives and similar repositories for TriageMCP

Users that are interested in TriageMCP are comparing it to the libraries listed below

• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆39Updated 8 months ago
• OtterHacker / Hooker
  ☆108Updated 11 months ago
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆23Updated 9 months ago
• mez-0 / citadel
  A Payload Analysis Framework
  ☆108Updated 2 weeks ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆90Updated last year
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated 2 months ago
• CroodSolutions / AutoRMM
  AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, alo…
  ☆89Updated 2 months ago
• xaitax / NTSleuth
  Comprehensive Windows Syscall Extraction & Analysis Framework
  ☆150Updated last month
• jaredcatkinson / MalwareMorphology
  ☆82Updated 11 months ago
• d1rkmtrr / VSCode-Backdoor
  Backdooring VSCode Projects
  ☆79Updated 4 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆99Updated 4 months ago
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆65Updated 5 months ago
• whokilleddb / sinister-vsix
  Blog/Journal on how to backdoor VSCode extensions
  ☆74Updated 3 months ago
• rad9800 / talks
  ☆60Updated 6 months ago
• ChaitanyaHaritash / IllusiveFog
  Windows Administrator level Implant.
  ☆49Updated last year
• LambdaMamba / LenaMalwareAnalysis
  Lena's scripts/code/resources for malware analysis
  ☆26Updated last year
• ArtemBaranov / WindowsRootkitsGuide
  ☆70Updated 8 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆100Updated 6 months ago
• Workday / raw-disk-parser
  A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs
  ☆93Updated last month
• 20urc3 / Aplos
  Aplos an extremely simple fuzzer for Windows binaries.
  ☆67Updated 8 months ago
• hasherezade / flareon2024
  ☆39Updated 10 months ago
• xpn / mythic_mcp
  A simple POC to expose Mythic as a MCP server
  ☆69Updated 7 months ago
• dmcxblue / Claude-C2
  Utilizng an MCP Server to communicate with your C2
  ☆82Updated 5 months ago
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆63Updated 8 months ago
• MazX0p / CobaltSentry
  ☆24Updated 8 months ago
• FarghlyMal / leaked_src
  some leaked src code for known and unknown malwares
  ☆22Updated 2 months ago
• Maldev-Academy / Alphabetfuscation
  Convert your shellcode into an ASCII string
  ☆123Updated 3 months ago
• CroodSolutions / BeaconatorC2
  BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catal…
  ☆83Updated last week
• sec-consult / msiscan
  Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers
  ☆124Updated last year
• eric-conrad / c2-talk
  ☆37Updated last year