Alternatives and similar repositories for PMD

Users that are interested in PMD are comparing it to the libraries listed below

• winsecurity / MaleficentVM
  This is practice VM for malware development
  ☆178Updated 2 months ago
• rad9800 / byor
  ☆162Updated 7 months ago
• CyberSecurityUP / Offensive-Windows-Drivers-Development
  ☆164Updated 10 months ago
• ArtemBaranov / WindowsRootkitsGuide
  ☆72Updated 11 months ago
• wetw0rk / AWE-PREP
  Repository containing all training and tutorials completed in preparation for the OSEE in conjunction with the AWE course.
  ☆120Updated 2 months ago
• yehia-mamdouh / ZeroProbe
  ZeroProbe is an advanced enumeration and analysis framework designed for exploit developers, security researchers, and red teamers. It pr…
  ☆106Updated 10 months ago
• itaymigdal / PowerDodder
  Persist like a Dodder
  ☆67Updated 8 months ago
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆92Updated last year
• cocomelonc / bsprishtina-2024-maldev-workshop
  BSides Prishtina 2024 Malware Development and Persistence workshop
  ☆124Updated 3 weeks ago
• 0xsch1zo / NullGate
  Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.
  ☆165Updated 6 months ago
• yo-yo-yo-jbo / dumping_lsass
  The different ways to dump lsass
  ☆206Updated 5 months ago
• Maldev-Academy / MaldevAcademyLdr.2
  RunPE implementation with multiple evasive techniques (2)
  ☆265Updated 4 months ago
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆276Updated last year
• eversinc33 / TriageMCP
  Vibe Malware Triage - MCP server for static PE analysis.
  ☆74Updated last month
• SenSecurity / Founding
  Founding is a generator that will create a loader encrypted or obfuscated with different execution types
  ☆111Updated 5 months ago
• RedSiege / Jigsaw
  Hide shellcode by shuffling bytes into a random array and reconstruct at runtime
  ☆202Updated 10 months ago
• LeighlinRamsay / GunnerC2
  ☆152Updated 3 months ago
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆206Updated 11 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆167Updated last year
• Maldev-Academy / TrapFlagForSyscalling
  Bypass user-land hooks by syscall tampering via the Trap Flag
  ☆138Updated 5 months ago
• MazX0p / CobaltSentry
  ☆24Updated 11 months ago
• t1Sh1n4 / mlwr_blogs
  collection of blogs about malware development and analysis
  ☆62Updated last month
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆207Updated last year
• Kudaes / MFTool
  Direct access to NTFS volumes
  ☆291Updated 4 months ago
• 0xNinjaCyclone / EarlyCascade
  A PoC for Early Cascade process injection technique.
  ☆206Updated last year
• BlackSnufkin / CheckPlz
  Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
  ☆34Updated last year
• zero2504 / EDR-GhostLocker
  AppLocker-Based EDR Neutralization
  ☆277Updated last month
• Octoberfest7 / zip_smuggling
  Python3 utility for creating zip files that smuggle additional data for later extraction
  ☆264Updated 8 months ago
• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆236Updated last year
• CroodSolutions / AutoPwnKey
  AutoPwnKey is a red teaming framework and testing tool using AutoHotKey (AHK), which at the time of creation proves to be quite evasive. …
  ☆109Updated 6 months ago