capemon: CAPE's monitor
☆154Oct 23, 2026Updated last week
Alternatives and similar repositories for capemon
Users that are interested in capemon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Community modules for CAPE Sandbox☆118Oct 8, 2026Updated 3 weeks ago
- Malware Configuration And Payload Extraction☆3,631Updated this week
- Inject unsigned DLL into Protected Process Light (PPL)☆41May 8, 2025Updated last year
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆13Updated this week
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,366Oct 20, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Assemblyline 4 Malware detonation service (CAPEv2)☆13Oct 22, 2026Updated last week
- DRAKVUF Black-box Binary Analysis☆1,288Updated this week
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆354Jul 17, 2026Updated 3 months ago
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- ☆17Jul 10, 2026Updated 3 months ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- ☆18Mar 28, 2023Updated 3 years ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆744Oct 21, 2026Updated last week
- XPN's RpcEnum but based on IDA instead of Ghidra☆20Aug 17, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Pin Tool for tracing API calls etc☆1,709Jun 2, 2026Updated 4 months ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆25Sep 18, 2017Updated 9 years ago
- ☆60Oct 1, 2026Updated 3 weeks ago
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 5 months ago
- 自用的shellcode生成框架☆31Jul 5, 2023Updated 3 years ago
- Dynamic unpacker based on PE-sieve☆844Apr 14, 2026Updated 6 months ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year
- Enumerate various traits from Windows processes as an aid to threat hunting☆197Jan 13, 2022Updated 4 years ago
- Windows kernel and user mode emulation.☆2,095Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Driver Loader/BE Bypass/Win Malware(lol)☆35Jun 25, 2019Updated 7 years ago
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆90May 17, 2023Updated 3 years ago
- Run Processes as PPL with ELAM☆185Mar 17, 2022Updated 4 years ago
- Automatic YARA rule generation for Malpedia☆170Sep 8, 2022Updated 4 years ago
- Cuckoo3 is a Python 3 open source automated malware analysis system.☆824Apr 8, 2026Updated 6 months ago
- Debug Print viewer (user and kernel)☆72Sep 17, 2026Updated last month
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,325Apr 2, 2026Updated 6 months ago
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- System call hook for Windows 10 20H1☆499Jun 26, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A project on the Unicorn emulator to emulate the code of Pe files in windows☆27Sep 12, 2024Updated 2 years ago
- Example of hijacking system calls via function pointer tables☆31Jun 26, 2021Updated 5 years ago
- Maco - Malware config extractor framework☆55Updated this week
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,288Updated this week
- A x64 Windows Rootkit using SSDT or Hypervisor hook☆567Jan 4, 2025Updated last year
- Assortment of hashing algorithms used in malware☆413Sep 9, 2026Updated last month
- CAPE Auto-Hardened Installer☆29Jan 28, 2026Updated 9 months ago