Alternatives and similar repositories for YaraEngine

Users that are interested in YaraEngine are comparing it to the libraries listed below

• accidentalrebel / shcode2exe
  Compile shellcode into an exe file from Windows or Linux.
  ☆70Updated 6 months ago
• Dump-GUY / Get-PDInvokeImports
  Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…
  ☆54Updated 3 years ago
• cdong1012 / IDAPython-Malware-Scripts
  ☆75Updated 2 years ago
• hasherezade / shellc_encoder
  Standalone Metasploit-like XOR encoder for shellcode
  ☆50Updated last year
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆70Updated 2 years ago
• ihack4falafel / ROR13HashGenerator
  C# implementation to produce ROR-13 numeric hash for given function API name
  ☆34Updated 6 years ago
• OccamsXor / sim-ba
  (Sim)ulate (Ba)zar Loader
  ☆29Updated 5 years ago
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆67Updated 3 years ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆35Updated 4 years ago
• passthehashbrowns / hook-integrity-checks
  ☆23Updated 4 years ago
• NATsCodes / ProcessHollowing
  Process Hollowing POC in CPP
  ☆18Updated 5 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆80Updated last year
• ethereal-vx / Persistence
  Recreating and reviewing the Windows persistence methods
  ☆39Updated 4 years ago
• knight0x07 / BumbleCrypt
  A Bumblebee-inspired Crypter
  ☆78Updated 3 years ago
• RedTeamOperations / VEH-PoC
  ☆119Updated 3 years ago
• elastic / PPLGuard
  ☆70Updated 10 months ago
• matterpreter / cpuid
  A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class
  ☆26Updated 2 years ago
• MMitsuha / Tajimari
  the Open Source and Pure C++ Packer for eXecutables
  ☆21Updated 2 years ago
• cyberark / malware-research
  ☆37Updated 9 months ago
• marcusbotacin / Dropper
  Embed an executable as a PE resource, drops and launches it in runtime.
  ☆66Updated 4 years ago
• sbousseaden / injection-1
  Windows process injection methods
  ☆19Updated 6 years ago
• Dump-GUY / sc2pe
  Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE
  ☆66Updated 2 years ago
• passthehashbrowns / suspendedunhook
  ☆42Updated 4 years ago
• Wra7h / ARCInject
  Overwrite a process's recovery callback and execute with WER
  ☆103Updated 3 years ago
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆43Updated 2 years ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 7 years ago
• X-Junior / Malware-IDAPython-Scripts
  ☆22Updated last year
• WithSecureLabs / TickTock
  ☆113Updated 3 years ago
• jackullrich / TRunPE
  A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…
  ☆97Updated 6 years ago
• joe-desimone / patriot
  ☆150Updated 3 years ago