Alternatives and similar repositories for sandbox-attacksurface-analysis-tools

Users that are interested in sandbox-attacksurface-analysis-tools are comparing it to the libraries listed below

• googleprojectzero / symboliclink-testing-tools
  ☆831Updated 2 years ago
• NetSPI / PESecurity
  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  ☆663Updated last year
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆1,027Updated 2 years ago
• googleprojectzero / winafl
  A fork of AFL for fuzzing Windows binaries
  ☆2,500Updated this week
• hacksysteam / HackSysExtremeVulnerableDriver
  HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux
  ☆2,900Updated 9 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆2,039Updated last month
• jxy-s / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆1,172Updated 2 years ago
• xairy / vmware-exploitation
  A collection of links related to VMware escape exploits
  ☆1,478Updated last year
• SafeBreach-Labs / pinjectra
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆820Updated 3 years ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,497Updated last month
• hatRiot / token-priv
  Token Privilege Research
  ☆866Updated 8 years ago
• tyranid / DotNetToJScript
  A tool to create a JScript file which loads a .NET v2 assembly from memory.
  ☆1,301Updated 4 years ago
• Rurik / Noriben
  Noriben - Portable, Simple, Malware Analysis Sandbox
  ☆1,206Updated 4 months ago
• api0cradle / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆1,615Updated 7 years ago
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆740Updated last year
• j00ru / windows-syscalls
  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
  ☆2,465Updated 7 months ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,279Updated last month
• tyranid / oleviewdotnet
  A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
  ☆1,343Updated last year
• jthuraisamy / SysWhispers
  AV/EDR evasion via direct system calls.
  ☆1,956Updated 2 years ago
• microsoft / MSRC-Security-Research
  Security Research from the Microsoft Security Response Center (MSRC)
  ☆1,373Updated last year
• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,802Updated last week
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,117Updated last year
• trailofbits / winchecksec
  Checksec, but for Windows: static detection of security mitigations in executables
  ☆611Updated 10 months ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,094Updated last year
• JLospinoso / gargoyle
  A memory scanning evasion technique
  ☆893Updated 8 years ago
• zodiacon / AllTools
  All reasonably stable tools
  ☆1,351Updated 4 months ago
• monoxgas / sRDI
  Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
  ☆2,457Updated 2 years ago
• yeyintminthuhtut / Awesome-Advanced-Windows-Exploitation-References
  List of Awesome Advanced Windows Exploitation References
  ☆1,529Updated 3 years ago
• hasherezade / demos
  Demos of various injection techniques found in malware
  ☆794Updated 3 years ago
• hlldz / Phant0m
  Windows Event Log Killer
  ☆1,804Updated 2 years ago