Alternatives and similar repositories for siph0n-rootkit

Users that are interested in siph0n-rootkit are comparing it to the libraries listed below

• perturbed-platypus / LinooxMalware
  ☆28Updated 6 years ago
• cys3c / Siofra
  DLL hijacking vulnerability scanner and PE infector tool
  ☆18Updated 7 years ago
• blackarrowsec / malware-research
  Malware campaigns and APTs research by BlackArrow
  ☆18Updated 5 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 6 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free
  ☆17Updated 5 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆32Updated 5 years ago
• paranoidninja / 0xdarkvortex-red-team-ttps-part-2
  Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2
  ☆18Updated 4 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆24Updated 4 years ago
• DanusMinimus / Injections
  A repository where I share my injection implemintations
  ☆29Updated 5 years ago
• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆16Updated 5 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 3 years ago
• DanusMinimus / API-Hash
  API hashing written in C to load APIs indirectly using CRC32 hashing
  ☆14Updated 5 years ago
• py7hagoras / OfficeMacro64
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆21Updated 5 years ago
• sneakerhax / C2PE
  Red Team C2 and Post Exploitation code
  ☆37Updated last month
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
  Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
  ☆13Updated 5 years ago
• robindimyan / apthowto
  Liberating dem proprietary APT implants
  ☆20Updated 5 years ago
• hotnops / COM_Mapper
  A tool to create COM class/interface relationships in neo4j
  ☆50Updated 2 years ago
• ThunderGunExpress / ThunderMSI
  ☆28Updated 7 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆41Updated last year
• SneakyNachos / MalwareAnalysisTraining
  Work in Progress repo
  ☆14Updated 6 years ago
• robindimyan / MalwareVulnerabilitiesExposures
  Malware vulnerability research. Coming soon..
  ☆12Updated 5 years ago
• DimopoulosElias / SimpleMimikatzObfuscator
  A set of commands to bypass Defender (and some other AVs)
  ☆20Updated 6 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆77Updated 5 years ago
• lawiet47 / pylogite
  Metamorphic Code Generator & Loader
  ☆15Updated 4 years ago
• offsecginger / PythonAESObfuscate
  Obfuscates a Python Script and the accompanying Shellcode.
  ☆57Updated 5 years ago
• tobiohlala / PSMemory
  Automation Capable Multi Search 64 Bit Windows Memory Scanner
  ☆28Updated 4 years ago
• ThunderGunExpress / CustomStager
  ☆17Updated 7 years ago