Alternatives and similar repositories for imaginaryC2

Users that are interested in imaginaryC2 are comparing it to the libraries listed below

• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆476Updated 4 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆290Updated 8 years ago
• misterch0c / what_is_this_c2
  For all these times you're asking yourself "what is this panel again?"
  ☆259Updated 2 years ago
• marcosd4h / memhunter
  Live hunting of code injection techniques
  ☆383Updated 6 years ago
• silence-is-best / c2db
  c2 traffic
  ☆190Updated 2 years ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆426Updated 4 years ago
• ewhitehats / InvisiblePersistence
  Persisting in the Windows registry "invisibly"
  ☆340Updated 7 years ago
• francisck / DanderSpritz_lab
  A fully functional DanderSpritz lab in 2 commands
  ☆434Updated 6 years ago
• 0x0be / PEpper
  An open source script to perform malware static analysis on Portable Executable
  ☆316Updated 2 years ago
• JPCERTCC / MalConfScan
  Volatility plugin for extracts configuration data of known malware
  ☆490Updated last year
• k-vitali / Malware-Misc-RE
  Miscellaneous Malware RE
  ☆196Updated 3 years ago
• StrangerealIntel / DailyIOC
  IOC from articles, tweets for archives
  ☆317Updated last year
• WithSecureLabs / snake
  snake - a malware storage zoo
  ☆217Updated 2 years ago
• StrangerealIntel / CyberThreatIntel
  Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups
  ☆714Updated 2 years ago
• francisck / DanderSpritz_docs
  The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-e…
  ☆321Updated 7 years ago
• gleeda / memtriage
  Allows you to quickly query a Windows machine for RAM artifacts
  ☆220Updated 5 years ago
• beahunt3r / Windows-Hunting
  ☆350Updated 4 years ago
• mandiant / flare-wmi
  ☆427Updated 2 years ago
• felixweyne / ProcessSpawnControl
  Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…
  ☆263Updated 3 years ago
• InQuest / yara-rules
  A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.
  ☆385Updated 3 years ago
• nccgroup / Cyber-Defence
  Information released publicly by NCC Group's Cyber Incident Response Team
  ☆476Updated 3 years ago
• netspooky / inhale
  A malware analysis and classification tool.
  ☆190Updated 3 years ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆582Updated last year
• danielbohannon / Revoke-Obfuscation
  PowerShell Obfuscation Detection Framework
  ☆746Updated last year
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆307Updated 6 years ago
• nbeede / BoomBox
  Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
  ☆237Updated 2 years ago
• CERT-Polska / mquery
  YARA malware query accelerator (web frontend)
  ☆434Updated 2 weeks ago
• Cn33liz / StarFighters
  A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.
  ☆321Updated 8 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆382Updated 5 years ago
• D4stiny / PeaceMaker
  PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.
  ☆426Updated 5 years ago