Alternatives and similar repositories for siphon

Users that are interested in siphon are comparing it to the libraries listed below

• Internet-2-0 / Malcore-x64dbg
  This x64dbg plugin allows you to upload your sample to Malcore and view the results.
  ☆37Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆45Updated 2 years ago
• hasherezade / flareon2023
  ☆25Updated 7 months ago
• anyrun / blog-scripts
  ☆30Updated 7 months ago
• ghidragolf / ghidra_scripts
  Scripts from Ghidra Golf competitions
  ☆34Updated 2 years ago
• leandrofroes / malware-research
  General malware analysis stuff
  ☆37Updated 10 months ago
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆43Updated last year
• Invoke-RE / ungarble_bn
  Binary Ninja plugin to deobfuscate strings obfuscated with the Garble project
  ☆24Updated 3 months ago
• hasherezade / flareon2022
  ☆28Updated 2 years ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆36Updated 4 months ago
• FarghlyMal / Config-Extractors
  ☆27Updated 7 months ago
• rad9800 / RansomFS
  ☆31Updated 4 months ago
• DissectMalware / yaradbg-frontend
  ☆39Updated last year
• milankovo / YaraVM
  This repository contains an IDA processor for loading and disassembling compiled yara rules.
  ☆41Updated 5 months ago
• airbus-cert / ttd2mdmp
  Extract data of TTD trace file to a minidump
  ☆28Updated last year
• packing-box / bintropy
  Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
  ☆47Updated 6 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆83Updated 2 years ago
• Dump-GUY / Invoke-DetectItEasy
  Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.
  ☆25Updated 3 years ago
• captainGeech42 / implant.js
  Proof-of-concept modular implant platform leveraging v8
  ☆53Updated 3 months ago
• rivitna / APT
  ☆14Updated 2 years ago
• RussianPanda95 / IDAPython
  IDA Python scripts
  ☆37Updated 2 months ago
• naksyn / talks
  Repo containing my public talks
  ☆23Updated 2 years ago
• cyberark / malware-research
  ☆37Updated 3 months ago
• 0xThiebaut / Signatures
  🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...
  ☆21Updated last year
• OALabs / hashdb-ghidra
  Ghidra plugin for HashDB
  ☆20Updated last year
• hasherezade / mal_unpack_py
  Python wrappers for mal_unpack
  ☆36Updated last year
• qtc-de / rpv-web
  rpv-web is a browser based frontend for the rpv library
  ☆25Updated last month
• ghidragolf / ctfd-ghidragolf
  docker-compose to deploy CTFd w/ ghidragolf configurations
  ☆12Updated 2 years ago
• ic3qu33n / michelangelo-reanimator
  Michelangelo REanimator bootkit and REcon 2023 talk slides/materials
  ☆30Updated last year
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆31Updated 6 months ago