nccgroup/Royal_APT external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

nccgroup/Royal_APT

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/nccgroup/Royal_APT)

Close

nccgroup / Royal_APTView on GitHubMore

• External links
• Readme badge

Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research

☆53Mar 16, 2018Updated 8 years ago

Alternatives and similar repositories for Royal_APT

Users that are interested in Royal_APT are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• binglot / misc

  View on GitHub
  Various scrips
  ☆12Oct 19, 2022Updated 3 years ago
• blockadeio / cloud_node

  View on GitHub
  Python-based cloud node for local use
  ☆11Mar 7, 2018Updated 8 years ago
• bsi-group / autorun-logger-server

  View on GitHub
  Server for receiving autorun data from the clients
  ☆13Sep 26, 2017Updated 8 years ago
• karttoon / iocs

  View on GitHub
  IoC's, PCRE's, YARA's etc
  ☆23Mar 25, 2025Updated last year
• intezer / DynamicDNS

  View on GitHub
  Finds dynamic DNS (like no-ip.org) domains from a given list of domains
  ☆14Sep 17, 2015Updated 10 years ago
• lolnate / vt-hunter

  View on GitHub
  Automation for VirusTotal
  ☆31May 6, 2016Updated 9 years ago
• jpalanco / ekanalyzer

  View on GitHub
  Exploit kit analyzer
  ☆22Mar 3, 2015Updated 11 years ago
• malware-kitten / yara_sig_tool

  View on GitHub
  A tool to generate yara signatures from function blocks
  ☆19Dec 8, 2014Updated 11 years ago
• cve-search / Plugins

  View on GitHub
  Plugins written for CVE-Search
  ☆27Apr 16, 2021Updated 4 years ago
• bstelte / thurstan

  View on GitHub
  Simple Distributed IOC Scanner
  ☆12Jul 27, 2015Updated 10 years ago
• alexander-hanel / ida_yara

  View on GitHub
  A python script that can be used to scan data within in an IDB using Yara.
  ☆23Sep 4, 2018Updated 7 years ago
• anl-cyberscience / FlexTransform

  View on GitHub
  Enables dynamic translation of structured data between formats
  ☆14Dec 14, 2018Updated 7 years ago
• idiom / OLEPackagerFormat

  View on GitHub
  OLE Package Format Documentation
  ☆23Jun 13, 2020Updated 5 years ago
• DBHeise / CyberSaucier

  View on GitHub
  Putting the Sauce in CyberChef - making CyberChef automatable
  ☆19Feb 18, 2026Updated last month
• swackhamer / vt_notification_puller

  View on GitHub
  VirusTotal Intelligence Notification Puller
  ☆28Jun 29, 2016Updated 9 years ago
• nettitude / logparser

  View on GitHub
  SQL scripts for querying event logs
  ☆21Jul 12, 2017Updated 8 years ago
• nccgroup / yaml2yara

  View on GitHub
  Generate bulk YARA rules from YAML input
  ☆22Feb 3, 2020Updated 6 years ago
• homjxi0e / PoC-ActiveX

  View on GitHub
  PoC ActiveX SVG Document Execution
  ☆21Nov 8, 2018Updated 7 years ago
• leojcollard / cve-search-docker

  View on GitHub
  ☆16Mar 10, 2017Updated 9 years ago
• matthastings / PSalander

  View on GitHub
  ☆52Sep 17, 2018Updated 7 years ago
• cocaman / retefe

  View on GitHub
  Artefacts from various retefe campaigns
  ☆10Mar 9, 2019Updated 7 years ago
• jaegeral / osint_to_timesketch

  View on GitHub
  Virustotal Data to Timesketch
  ☆16Feb 28, 2019Updated 7 years ago
• erpscanteam / CVE-2018-2380

  View on GitHub
  PoC of Remote Command Execution via Log injection on SAP NetWeaver AS JAVA CRM
  ☆52Mar 14, 2018Updated 8 years ago
• nccgroup / CVE-2017-8759

  View on GitHub
  NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
  ☆95Sep 19, 2017Updated 8 years ago
• forensicmatt / RustyReg

  View on GitHub
  Registry to JSON. This Project is for learning purposes and is not maintained.
  ☆12Dec 28, 2021Updated 4 years ago
• RustyNoob-619 / 100-Days-of-YARA-2024

  View on GitHub
  ☆21Apr 19, 2024Updated last year
• go-spider / CVE-2018-3252

  View on GitHub
  ☆18Dec 4, 2018Updated 7 years ago
• maaaaz / tgcd-windows

  View on GitHub
  The great TCP Gender Changer (tgcd) tool compiled for Windows
  ☆14Apr 18, 2016Updated 9 years ago
• nirizr / pytest-idapro

  View on GitHub
  A pytest module for The Interactive Disassembler and IDAPython; Record and Replay IDAPython API, execute inside IDA or use mockups of IDA…
  ☆47Nov 3, 2018Updated 7 years ago
• YakindanEgitim / malwarez

  View on GitHub
  Malware visualization on earth map
  ☆41Jan 26, 2015Updated 11 years ago
• nccgroup / WindowsDACLEnumProject

  View on GitHub
  A collection of tools to enumerate and analyse Windows DACLs
  ☆109Jul 11, 2015Updated 10 years ago
• hashdd / pyhashdd

  View on GitHub
  A python library for building and using hash databases.
  ☆22Mar 3, 2026Updated 3 weeks ago
• certsocietegenerale / fame_modules

  View on GitHub
  Community modules for FAME
  ☆65Dec 16, 2025Updated 3 months ago
• maldiohead / CVE-2019-8540

  View on GitHub
  Kernel Stack info leak at exportObjectToClient function
  ☆42May 21, 2019Updated 6 years ago
• deroko / SPPLUAObjectUacBypass

  View on GitHub
  ☆46Jun 14, 2018Updated 7 years ago
• yisonPylkita / powershell_cpp

  View on GitHub
  PowerShell interpreter for unmanaged (non CLI) C++ projects
  ☆16Jul 19, 2017Updated 8 years ago
• h3x2b / yara-rules

  View on GitHub
  Yara rules for detecting malware
  ☆23Sep 9, 2025Updated 6 months ago
• adam-zhang / KernelHelper

  View on GitHub
  some classes which can help me to program kernel driver in Windows.
  ☆16Feb 9, 2018Updated 8 years ago
• SpiderLabs / vnc-auth

  View on GitHub
  NMAP NSE that enumerates VNC authentication types
  ☆17Dec 21, 2010Updated 15 years ago