Alternatives and similar repositories for DuckSandboxDetect

Users that are interested in DuckSandboxDetect are comparing it to the libraries listed below

• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆293Jul 25, 2021Updated 4 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆71May 11, 2022Updated 3 years ago
• smallzhong / hide_execute_memory

  View on GitHub
  隐藏可执行内存
  ☆267Apr 27, 2025Updated 9 months ago
• mai1zhi2 / ShellCodeFramework

  View on GitHub
  绕3环的shellcode免杀框架
  ☆574Mar 19, 2021Updated 4 years ago
• TimelifeCzy / HIPS-HIDS_CveMod

  View on GitHub
  Windows CVE主防(HIPS/HIDS)
  ☆56Apr 29, 2021Updated 4 years ago
• NoOne-hub / Beacon.dll

  View on GitHub
  Beacon.dll reverse
  ☆141Sep 5, 2021Updated 4 years ago
• WBGlIl / Beacon_re

  View on GitHub
  ☆89Jun 28, 2022Updated 3 years ago
• izj007 / CrackSleeve

  View on GitHub
  cs4.0 cs 4.1 beacon加解密
  ☆25Mar 29, 2021Updated 4 years ago
• NoOne-hub / bypass-BeaconEye

  View on GitHub
  bypass BeaconEye
  ☆89Sep 9, 2021Updated 4 years ago
• ZanderChang / anti-sandbox

  View on GitHub
  Windows对抗沙箱和虚拟机的方法总结
  ☆402Apr 22, 2020Updated 5 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆147Jun 24, 2021Updated 4 years ago
• timwhitez / Doge-HeapAlloc

  View on GitHub
  ☆14Sep 2, 2021Updated 4 years ago
• mai1zhi2 / SysWhispers2_x86

  View on GitHub
  X86 version of syswhispers2 / x86 direct system call
  ☆330Jan 28, 2021Updated 5 years ago
• Hzllaga / ShellcodeLoader

  View on GitHub
  将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术。
  ☆523Jul 9, 2020Updated 5 years ago
• fIappy / infhook19041

  View on GitHub
  ☆127May 23, 2020Updated 5 years ago
• Ingan121 / DWMSwitch

  View on GitHub
  Easy DWM switcher without Winlogon suspension
  ☆18Jan 30, 2024Updated 2 years ago
• timwhitez / Doge-Misc

  View on GitHub
  杂 物 收 纳
  ☆15Aug 4, 2023Updated 2 years ago
• Rvn0xsy / Blowbeef

  View on GitHub
  BlowBeef is a tool for analyzing WMI data.
  ☆18Jul 26, 2021Updated 4 years ago
• 3gstudent / pyXSSPlatform

  View on GitHub
  Used to build an XSS platform on the command line.
  ☆81Aug 20, 2021Updated 4 years ago
• huoji120 / goodeye

  View on GitHub
  https://githacks.org/Shawick/goodeye.git
  ☆52Sep 2, 2020Updated 5 years ago
• 0xfei / wincode

  View on GitHub
  过去写的一些Windows安全研究相关代码
  ☆135Feb 2, 2019Updated 7 years ago
• 0x727 / CloneX_0x727

  View on GitHub
  进行克隆用户、添加用户等账户防护安全检测的轻巧工具
  ☆185Sep 3, 2021Updated 4 years ago
• dr0op / CrossNet-Beta

  View on GitHub
  红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。
  ☆367Jun 19, 2024Updated last year
• BeneficialCode / KPPL

  View on GitHub
  Kill Protected Process Light Process (include av)
  ☆58Sep 15, 2023Updated 2 years ago
• huoji120 / cpu_duck

  View on GitHub
  关于intel和amd指令行为不一样这件事
  ☆62Apr 15, 2022Updated 3 years ago
• huoji120 / DuckMemoryScan

  View on GitHub
  检测绝大部分所谓的内存免杀马
  ☆735Sep 15, 2022Updated 3 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• wonderkun / go-packer

  View on GitHub
  golang打包二进制进行免杀
  ☆233Apr 7, 2021Updated 4 years ago
• knightswd / ProcessGhosting

  View on GitHub
  ☆74Jul 23, 2021Updated 4 years ago
• AttackTeamFamily / blackip

  View on GitHub
  沙箱IP、网络测绘ip、全网扫描ip等等收集
  ☆128Nov 8, 2021Updated 4 years ago
• hhxy / e-message_exp

  View on GitHub
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Mar 15, 2019Updated 6 years ago
• timwhitez / Doge-Gabh

  View on GitHub
  GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisp…
  ☆331Sep 10, 2024Updated last year
• killvxk / Researchs

  View on GitHub
  一些研究
  ☆14Dec 18, 2019Updated 6 years ago
• uknowsec / CreateService

  View on GitHub
  创建服务持久化
  ☆108Apr 26, 2021Updated 4 years ago
• boku7 / injectEtwBypass

  View on GitHub
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆301Sep 28, 2021Updated 4 years ago
• Cc28256 / CcRemote

  View on GitHub
  这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，采用VS2017，默认分支hijack还在修改不能执行，master分支的项目可以正常的运行的，你可以切换到该分支查看可以执行的代码
  ☆525Oct 14, 2020Updated 5 years ago
• Hzllaga / bypassUAC

  View on GitHub
  基于注册表劫持BypassUAC
  ☆28Dec 16, 2020Updated 5 years ago
• TomAPU / checkburp

  View on GitHub
  Detect burp
  ☆33Jun 7, 2021Updated 4 years ago
• ac0d3r / 0xpe

  View on GitHub
  [windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)
  ☆78Dec 15, 2021Updated 4 years ago