Sandfly Linux Stealth Rootkit Decloaking Utility
☆112Jan 19, 2023Updated 3 years ago
Alternatives and similar repositories for sandfly-processdecloak
Users that are interested in sandfly-processdecloak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives …☆171Jun 11, 2024Updated 2 years ago
- ☆20Dec 12, 2023Updated 2 years ago
- Compiled executables of common crypto and encoding algorithms☆16Oct 3, 2023Updated 3 years ago
- Rip Raw is a small tool to analyse the memory of compromised Linux systems.☆133Jan 31, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- post exploitation user monitoring tool☆19Jul 3, 2018Updated 8 years ago
- Windows File Enumeration Intel Gathering Tool.☆17Sep 4, 2023Updated 3 years ago
- ☆12May 6, 2020Updated 6 years ago
- ☆17Sep 29, 2023Updated 3 years ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆106Oct 29, 2022Updated 4 years ago
- A collection of tools adversaries commonly use in an attack.☆15Nov 23, 2024Updated last year
- Malware samples observed in the wild from time to time☆12Jul 29, 2019Updated 7 years ago
- a State-Machine reversing exercise☆13Apr 22, 2021Updated 5 years ago
- Golang Parser for Microsoft Event Logs☆109Oct 7, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Anything Sysmon related from the MSTIC R&D team☆157Jun 8, 2024Updated 2 years ago
- A tool to parse Windows Event Logs and import them into Elasticsearch.☆89Oct 26, 2026Updated last week
- A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.☆1,992Apr 7, 2024Updated 2 years ago
- Rootkit spotter - experimental Linux rootkit finder LKM☆31Oct 11, 2020Updated 6 years ago
- Presentations from the CX Security Labs team☆35Jun 25, 2026Updated 4 months ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆272Oct 29, 2025Updated last year
- egrets monitors egress☆46Apr 12, 2020Updated 6 years ago
- ☆28Mar 29, 2022Updated 4 years ago
- MalwareAnalysis☆12Dec 19, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A collection of scripts for dealing with Cobalt Strike beacons in Python☆168Jan 5, 2021Updated 5 years ago
- PANDA-powered tracing engine for tenet☆11Apr 7, 2022Updated 4 years ago
- Sandfly Security Agentless Compromise and Intrusion Detection System For Linux☆95Sep 10, 2026Updated last month
- ELF Shared library injector using DT_NEEDED precedence infection. Acts as a permanent LD_PRELOAD☆111Apr 8, 2020Updated 6 years ago
- Cobalt Strike Beacon configuration extractor and parser.☆165Oct 30, 2025Updated last year
- YARI is an interactive debugger for YARA Language.☆91Sep 10, 2025Updated last year
- Hunts out CobaltStrike beacons and logs operator command output☆960Sep 4, 2024Updated 2 years ago
- Malware similarity platform with modularity in mind.☆80Jul 18, 2021Updated 5 years ago
- Everything related to Linux Forensics☆733Jul 13, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Semantic strings based on tree-sitter☆17Feb 19, 2025Updated last year
- Attacking the cleanup_module function of a kernel module☆57Jun 30, 2025Updated last year
- Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.☆117Apr 22, 2021Updated 5 years ago
- Proxy Unix applications in the terminal☆117Apr 14, 2021Updated 5 years ago
- A shell script to download malware domains from various sources, and configuring unbound DNS config file to be used as a local recursive …☆19Sep 12, 2014Updated 12 years ago
- RenameLocalVars is an IDA plugin that renames local variables to something easier to read.☆15Jul 9, 2023Updated 3 years ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago