Alternatives and similar repositories for OfficeMalwares

Users that are interested in OfficeMalwares are comparing it to the libraries listed below

• mandiant / vbScript_deobfuscator
  Help deobfuscate VBScript
  ☆15Updated 3 years ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• whichbuffer / Antidebug
  Defeating Anti-Debugging Techniques for Malware Analysis
  ☆13Updated 2 years ago
• SIFalcon / Detection
  ☆22Updated 2 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆32Updated 5 years ago
• jaamaal / Embed
  Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…
  ☆22Updated 4 years ago
• sysopfb / open_mal_analysis_notes
  open source malware analysis and research notes dump
  ☆26Updated last year
• FuzzySecurity / Presentations
  A collection of my presentation materials.
  ☆17Updated last year
• StrangerealIntel / DeltaFlare
  ☆12Updated 4 years ago
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• threatexpress / procdot_sandbox
  ProcDot Malware Sandbox
  ☆24Updated this week
• therealunicornsecurity / tricard
  Tricard - Malware Sandbox Fingerprinting
  ☆20Updated last year
• Dump-GUY / VoiceC2_POC
  Simple POC of Voice C2 using Speech Recognition
  ☆13Updated 3 years ago
• fozavci / ransoblin
  Ransoblin (Ransomware Bokoblin)
  ☆18Updated 4 years ago
• blackarrowsec / malware-research
  Malware campaigns and APTs research by BlackArrow
  ☆18Updated 5 years ago
• whichbuffer / Lockbit-Black-3.0
  ☆24Updated 3 years ago
• samisecure / LsassDumpReflectiveDll
  Dump Lsass Memory Using a Reflective Dll
  ☆14Updated 3 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆24Updated 4 years ago
• elceef / yara-rulz
  Collection of generic YARA rules
  ☆16Updated last year
• HackingThings / SuperSneakyExec
  Loading and executing shellcode in C# without PInvoke.
  ☆22Updated 3 years ago
• nccgroup / mimikatz-detector-busylight
  USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…
  ☆20Updated 2 years ago
• yo-yo-yo-jbo / ransomware_in_a_minute
  ☆11Updated 2 years ago
• Finch4 / Malware-Analysis-Reports
  My Malware Analysis Reports
  ☆21Updated 3 years ago
• chvancooten / nimbuild
  A Docker container used to easily compile Nim binaries generated by my tools (NimPackt and NimPlant)
  ☆16Updated last year
• R-Secure / AMSI-Bypasses
  This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…
  ☆24Updated 3 years ago
• knavesec / EyeWitnessTheFitness
  Exactly what it sounds like, which is something rad
  ☆22Updated 2 years ago
• 1captainnemo1 / DLLREVERSESHELL
  A CUSTOM CODED FUD DLL, CODED IN C , WHEN LOADED , VIA A DECOY WEB-DELIVERY MODULE( FIRING A DECOY PROGRAM), WILL GIVE A REVERSE SHELL (P…
  ☆34Updated 6 years ago
• NexusFuzzy / raccoon_config
  Scans a list of raccoon servers from Tria.ge and extracts the config
  ☆15Updated 2 years ago
• 001SPARTaN / SaltedCaramel
  Apfell implant written in C#.
  ☆8Updated 4 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago