Alternatives and similar repositories for sandbox-attacksurface-analysis-tools:

Users that are interested in sandbox-attacksurface-analysis-tools are comparing it to the libraries listed below

• googleprojectzero / symboliclink-testing-tools
  ☆766Updated 2 years ago
• hacksysteam / HackSysExtremeVulnerableDriver
  HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
  ☆2,585Updated last week
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆954Updated last year
• monoxgas / sRDI
  Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
  ☆2,222Updated last year
• NetSPI / PESecurity
  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  ☆632Updated 7 months ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,235Updated this week
• hlldz / Phant0m
  Windows Event Log Killer
  ☆1,772Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,864Updated last month
• tyranid / DotNetToJScript
  A tool to create a JScript file which loads a .NET v2 assembly from memory.
  ☆1,266Updated 4 years ago
• jthuraisamy / SysWhispers
  AV/EDR evasion via direct system calls.
  ☆1,846Updated 2 years ago
• googleprojectzero / winafl
  A fork of AFL for fuzzing Windows binaries
  ☆2,394Updated 2 months ago
• stephenfewer / ReflectiveDLLInjection
  Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loadi…
  ☆2,845Updated 2 years ago
• p3nt4 / PowerShdll
  Run PowerShell with rundll32. Bypass software restrictions.
  ☆1,788Updated 3 years ago
• hatRiot / token-priv
  Token Privilege Research
  ☆804Updated 7 years ago
• xairy / vmware-exploitation
  A collection of links related to VMware escape exploits
  ☆1,400Updated 5 months ago
• mattifestation / PowerShellArsenal
  A PowerShell Module Dedicated to Reverse Engineering
  ☆869Updated 3 years ago
• microsoft / MSRC-Security-Research
  Security Research from the Microsoft Security Response Center (MSRC)
  ☆1,340Updated 6 months ago
• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,596Updated this week
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,110Updated last week
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆715Updated 4 months ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,046Updated last year
• hfiref0x / WinObjEx64
  Windows Object Explorer 64-bit
  ☆1,701Updated 3 weeks ago
• api0cradle / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆1,597Updated 6 years ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,432Updated 2 weeks ago
• 0vercl0k / rp
  rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.
  ☆1,874Updated last week
• hasherezade / demos
  Demos of various injection techniques found in malware
  ☆791Updated 3 years ago
• NytroRST / ShellcodeCompiler
  Shellcode Compiler
  ☆1,087Updated 6 months ago
• SafeBreach-Labs / pinjectra
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆802Updated 2 years ago
• cobbr / SharpSploit
  SharpSploit is a .NET post-exploitation library written in C#
  ☆1,777Updated 3 years ago
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,279Updated 4 months ago