Alternatives and similar repositories for blue

Users that are interested in blue are comparing it to the libraries listed below

• AlicanAkyol / eagle
  Bypass Antivm and Cuckoo Sandbox Techniques
  ☆12Updated 8 years ago
• tandasat / RemoteWriteMonitor
  A tool to help malware analysts tell that the sample is injecting code into other process.
  ☆78Updated 9 years ago
• glmcdona / MALM
  MALM: Malware Monitor
  ☆50Updated 12 years ago
• NtRaiseHardError / UnRunPE
  PoC for detecting and dumping process hollowing code injection
  ☆51Updated 6 years ago
• Prevenity / malware_monitor
  Malware monitor template based on MinHook
  ☆16Updated 10 years ago
• namreeb / hacksniff
  A tool to monitor how a target process modifies other processes
  ☆25Updated 7 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆32Updated 8 years ago
• edix / MalwareResourceScanner
  Scanning and identifying XOR encrypted PE files in PE resources
  ☆28Updated 11 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆56Updated 6 years ago
• revsic / CodeInjection
  Code Injection technique written in cpp language
  ☆32Updated 7 years ago
• r41p41 / BotKiller
  find and kill injectedThreads from memory
  ☆12Updated 9 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆38Updated 8 years ago
• pezcode / realign
  PE rebuilder, based on yoda's realigndll
  ☆12Updated 13 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆22Updated 6 years ago
• sogeti-esec-lab / REBoot
  Bootkits Revisited
  ☆40Updated 11 years ago
• kysam / NhoVirtualizer
  A simple native code virtualizer for 32-bit Windows PE
  ☆15Updated 9 years ago
• mrexodia / BreakpointUnresolved
  Plugin for x64dbg to break on unresolved APIs.
  ☆12Updated 7 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆17Updated 6 years ago
• osiris123 / CDriver_Loader
  Kernel mode driver loader, injecting into the windows kernel, Rootkit. Driver injections.
  ☆47Updated 10 years ago
• 0xBADBAC0N / malware
  ☆19Updated 7 years ago
• codereversing / manualenum
  Enumerate process modules manually
  ☆9Updated 3 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆19Updated 9 years ago
• owerosu / packerPE32
  Simple PE packer with RtlCompressBuffer
  ☆21Updated 9 years ago
• ScorchSecurity / Toast
  User-mode hook bypassing method
  ☆33Updated 8 years ago
• apriorit / antirootkit-anti-splicer
  The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
  ☆34Updated 8 years ago
• joaovarelas / h00k-game-hack
  C++ game hack for Counter-Strike: Source. It was coded for the "Orange Box" update.
  ☆15Updated 10 years ago
• mrfearless / Today-Plugin-x64
  Today Plugin (x64) - A Plugin For x64dbg
  ☆13Updated 7 years ago
• edix / HiddenProcessDetection
  Examples for detection of hidden processes on windows
  ☆34Updated 11 years ago
• eschweiler / ProReversing
  Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
  ☆65Updated 12 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22Updated 8 years ago