Alternatives and similar repositories for siph0n-rootkit

Users that are interested in siph0n-rootkit are comparing it to the libraries listed below

• DanusMinimus / Injections
  A repository where I share my injection implemintations
  ☆29Updated 5 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• cys3c / Siofra
  DLL hijacking vulnerability scanner and PE infector tool
  ☆20Updated 8 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago
• py7hagoras / OfficeMacro64
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆21Updated 5 years ago
• matterpreter / getDA.sh
  Identify common attack paths to get Domain Administrator
  ☆22Updated 6 years ago
• OsandaMalith / WindowsInternals
  Experiments on the Windows Internals
  ☆31Updated 6 years ago
• perturbed-platypus / LinooxMalware
  ☆28Updated 6 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 7 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆25Updated 4 years ago
• DanusMinimus / API-Hash
  API hashing written in C to load APIs indirectly using CRC32 hashing
  ☆14Updated 5 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 4 years ago
• SneakyNachos / MalwareAnalysisTraining
  Work in Progress repo
  ☆15Updated 6 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free
  ☆16Updated 5 years ago
• paranoidninja / 0xdarkvortex-red-team-ttps-part-2
  Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2
  ☆18Updated 5 years ago
• dsnezhkov / exclave
  ☆16Updated 4 years ago
• leonjza / tc2
  treafik fronted c2 examples
  ☆26Updated 4 years ago
• rmdavy / AmsiPEBWalkVBA
  Walking the PEB in VBA
  ☆24Updated 5 years ago
• offsecginger / PythonAESObfuscate
  Obfuscates a Python Script and the accompanying Shellcode.
  ☆57Updated 5 years ago
• malware-unicorn / macho_shellcode_extractor
  extracts shellcode from a nasm compile macho binary
  ☆16Updated 4 years ago
• Apr4h / GetInjectedThreads
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆54Updated 4 years ago
• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆16Updated 5 years ago
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 5 years ago
• rvrsh3ll / FlaskRedirectorProtector
  Protect your servers with a secret header
  ☆29Updated 5 years ago
• vletoux / Bluekeep-scanner
  BlueKeep powershell scanner (based on c# code)
  ☆39Updated 6 years ago
• byt3bl33d3r / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆20Updated 5 years ago