Alternatives and similar repositories for malware-bazaar-advanced-search

Users that are interested in malware-bazaar-advanced-search are comparing it to the libraries listed below

• gemini-security / GithubC2
  ☆28Updated last year
• JCSteiner / SGCC---public
  Command and Control Framework using powershell implants
  ☆29Updated last week
• Muhammad-Ali007 / OutlookNTLM_CVE-2023-23397
  ☆22Updated last year
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆27Updated last year
• Und3rf10w / CobaltStrikeBOFs
  Beacon Object Files used for Cobalt Strike
  ☆19Updated last year
• matro7sh / havoc-gosecdump
  ☆18Updated 6 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆20Updated 2 years ago
• patrickhener / invictus
  OSED Practice binary
  ☆24Updated last year
• kgretzky / talks
  Slides and videos from talks given at cons
  ☆20Updated last week
• ChoiSG / GwisinMsi
  PoC MSI payload based on ASEC/AhnLab's blog post
  ☆23Updated 2 years ago
• vysecurity / PacketParser
  A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.
  ☆21Updated 11 months ago
• atabetnouhaila / API-hashing
  ☆18Updated 8 months ago
• t-tani / YAMA-dev
  Yet Another Memory Analyzer for malware detection
  ☆24Updated last year
• shlyuz / teamserver
  ☆12Updated 3 years ago
• sketchymoose / workslikeaJARM
  Method of finding interesting domains using keywords + JARMs
  ☆13Updated 2 years ago
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆33Updated 2 years ago
• bartblaze / DotNet-MetaData
  Identifies metadata of .NET binary files.
  ☆21Updated last year
• zimnyaa / beepsyscall
  An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.
  ☆12Updated last year
• matthw / malware_analysis
  ☆18Updated last year
• ProcessusT / EnumSSN
  Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…
  ☆21Updated last year
• MatheuZSecurity / Imperius
  Make an Linux Kernel rootkit visible again.
  ☆52Updated 4 months ago
• codewhitesec / apollon
  Proof-of-Concept to evade auditd by writing /proc/PID/mem
  ☆21Updated last year
• LOFL-Project / LOFLCAB
  ☆54Updated 6 months ago
• ptracesecurity / advanced-software-exploitation
  Official repository for the Advanced Software Exploitation (ASE) course
  ☆20Updated 6 years ago
• FarghlyMal / Config-Extractors
  ☆27Updated 7 months ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆28Updated 11 months ago
• kn0x0x / CVE-2025-32756-POC
  Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.
  ☆76Updated 2 weeks ago
• 0xB455 / ActiveSyncBruter
  ☆25Updated 3 months ago
• ZSECURE / zDocker-cobaltstrike
  Docker container for running CobaltStrike 4.10
  ☆37Updated 9 months ago
• Foolish1337 / kernel-programming
  Progress of learning kernel development
  ☆14Updated 2 years ago