hasherezade / hollows_hunterLinks
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
☆2,162Updated last week
Alternatives and similar repositories for hollows_hunter
Users that are interested in hollows_hunter are comparing it to the libraries listed below
Sorting:
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,323Updated last week
- AV/EDR evasion via direct system calls.☆1,880Updated 2 years ago
- Windows kernel and user mode emulation.☆1,658Updated 2 months ago
- Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…☆1,140Updated last year
- Dynamic unpacker based on PE-sieve☆732Updated this week
- ☆2,104Updated 2 years ago
- A Pin Tool for tracing API calls etc☆1,439Updated last month
- Identifies the bytes that Microsoft Defender flags on.☆2,448Updated last year
- PE-bear (builds only)☆779Updated last year
- Converts PE into a shellcode☆2,548Updated last year
- Open-Source Shellcode & PE Packer☆1,958Updated last year
- A post exploitation framework designed to operate covertly on heavily monitored environments☆2,094Updated 3 years ago
- Process Hollowing (Malware Technique)☆1,329Updated last month
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,292Updated last year
- AV/EDR evasion via direct system calls.☆1,678Updated 2 years ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,139Updated this week
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,545Updated last week
- LSASS memory dumper using direct system calls and API unhooking.☆1,532Updated 4 years ago
- A tool to kill antimalware protected processes☆1,448Updated 3 years ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,925Updated last month
- Some of my publicly available Malware analysis and Reverse engineering.☆809Updated 11 months ago
- ☆1,655Updated 9 months ago
- This program is designed to demonstrate various process injection techniques☆1,146Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆3,985Updated 7 months ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆587Updated this week
- ☆814Updated 5 years ago
- Windows Event Log Killer☆1,786Updated last year
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆812Updated 3 years ago
- A static analyzer for PE executables.☆1,065Updated last year
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,155Updated last month