Alternatives and similar repositories for shadow-brokers-windows:

Users that are interested in shadow-brokers-windows are comparing it to the libraries listed below

• intezer / DynamicDNS
  Finds dynamic DNS (like no-ip.org) domains from a given list of domains
  ☆14Updated 9 years ago
• voidm4p / hancitor_analyzer
  Script created to get all the Hancitor C&C address [OLD]
  ☆8Updated 6 years ago
• binarlyhq / binarly-query
  Command-line Interface for Binar.ly
  ☆37Updated 8 years ago
• ShellcodeSmuggler / IAT_POC
  POC for IAT Parsing Payloads
  ☆48Updated 8 years ago
• codexgigassys / codex-frontend
  Frontend for Codex Gigas
  ☆21Updated 8 years ago
• malware-kitten / yara_sig_tool
  A tool to generate yara signatures from function blocks
  ☆19Updated 10 years ago
• Th4nat0s / No_Sandboxes
  Test suite for bypassing Malware sandboxes.
  ☆39Updated 10 years ago
• PoorBillionaire / Windows-Prefetch-Carver
  Carve Windows Prefetch files from arbitrary binary data
  ☆14Updated 7 years ago
• mak / libzpy
  library to decode/parse zeus-like configuration files
  ☆29Updated 7 years ago
• Kafeine / public
  ☆19Updated 6 years ago
• nao-sec / mal_getter
  Tool for dropping malware from EK
  ☆40Updated 7 years ago
• herrcore / LocalShellExtParse
  Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed …
  ☆20Updated 9 years ago
• 0pc0deFR / YaraRules
  Multiple rules for yara-project for detect compiler/packer/protector
  ☆33Updated 5 years ago
• JamesHabben / MalwareStuff
  ☆16Updated 10 years ago
• jjo-sec / volatility_plugins
  Volatility Plugins
  ☆21Updated 9 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 7 years ago
• sketchymoose / TotalRecall
  Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to fi…
  ☆49Updated 7 years ago
• Cyberclues / rtf_exploit_extractor
  Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents
  ☆23Updated 8 years ago
• cocaman / retefe
  Artefacts from various retefe campaigns
  ☆10Updated 6 years ago
• mandiant / remote_lookup
  Resolves DLL API entrypoints for a process w/ remote query capabilities.
  ☆55Updated 7 years ago
• arbor / yara
  Shared yara rules
  ☆30Updated 11 years ago
• robbyFux / vtTool
  Tools
  ☆13Updated 2 years ago
• securesean / sdbScanner
  Volatility Plugin to scan for shimmed processes in Windows
  ☆10Updated 9 years ago
• zer0box / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆21Updated 10 years ago
• cylance / IDPanel
  Identify botnet panels with Ensembled Decision Trees
  ☆18Updated 8 years ago
• bsi-group / officefileinfo
  officefileinfo is a python script to help analyse the newer Microsoft Office file formats. There are numerous tools for dealing with the …
  ☆16Updated 8 years ago
• jpalanco / ekanalyzer
  Exploit kit analyzer
  ☆21Updated 10 years ago
• 9b / pdfxray_lite
  Lite version of PDF X-RAY that uses no backend
  ☆36Updated 13 years ago
• Cisco-Talos / locky
  ☆68Updated 7 years ago
• msuiche / malcheck
  Portable utility to check if a machine has been infected by Shamoon2
  ☆15Updated 8 years ago