Alternatives and similar repositories for siph0n-rootkit

Users that are interested in siph0n-rootkit are comparing it to the libraries listed below

• cys3c / Siofra
  DLL hijacking vulnerability scanner and PE infector tool
  ☆20Updated 8 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 5 years ago
• perturbed-platypus / LinooxMalware
  ☆28Updated 6 years ago
• nccgroup / UninstalledAppCanary
  A Canary which fires when uninstalled
  ☆34Updated 4 years ago
• DanusMinimus / Injections
  A repository where I share my injection implemintations
  ☆29Updated 5 years ago
• robindimyan / apthowto
  Liberating dem proprietary APT implants
  ☆20Updated 6 years ago
• py7hagoras / OfficeMacro64
  This is a 64 bit VBA implementation of Christophe Tafani-Dereeper's original VBA code described in his blog @ https://blog.christophetd.f…
  ☆21Updated 5 years ago
• thiagopeixoto / allsysno
  This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.
  ☆15Updated 3 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆25Updated 4 years ago
• byt3bl33d3r / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆20Updated 5 years ago
• redcode-labs / Solaris
  A local LKM rootkit loader/dropper that lists available security mechanisms
  ☆52Updated 4 years ago
• SecurityJosh / MuteSysmon
  A PowerShell script to prevent Sysmon from writing its events
  ☆16Updated 5 years ago
• sneakerhax / C2PE
  Red Team C2 and Post Exploitation code
  ☆34Updated 6 months ago
• two06 / AMSI_Handler
  Automate AV evasion by calling AMSI
  ☆88Updated 2 years ago
• SneakyNachos / MalwareAnalysisTraining
  Work in Progress repo
  ☆15Updated 6 years ago
• whiteHat001 / MIcrosoft-Word-Use-After-Free
  ☆16Updated 5 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 4 years ago
• paranoidninja / 0xdarkvortex-red-team-ttps-part-2
  Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2
  ☆19Updated 5 years ago
• WithSecureLabs / dotnet-gargoyle
  A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique
  ☆52Updated 7 years ago
• offsecginger / PythonAESObfuscate
  Obfuscates a Python Script and the accompanying Shellcode.
  ☆57Updated 6 years ago
• blackarrowsec / malware-research
  Malware campaigns and APTs research by BlackArrow
  ☆19Updated 5 years ago
• panagioto / SyscallHide
  Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
  ☆79Updated 5 years ago
• stephenbradshaw / shellcode
  Various shell code I have written
  ☆17Updated 5 years ago
• fox-it / signed-phishing-email
  ☆11Updated 7 years ago
• BorjaMerino / reflectPatcher
  Python script to patch the reflective stub in a DLL
  ☆24Updated 8 years ago
• matterpreter / getDA.sh
  Identify common attack paths to get Domain Administrator
  ☆22Updated 6 years ago
• 1d8 / macros
  ☆49Updated 5 years ago
• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆41Updated 2 years ago
• rhotav / PT_LOAD-Injector
  An injector that use PT_LOAD technique
  ☆12Updated 3 years ago
• twelvesec / dexter
  Data EXfiltration TestER
  ☆21Updated 6 years ago