Alternatives and similar repositories for bpfdoor-scanner:

Users that are interested in bpfdoor-scanner are comparing it to the libraries listed below

• uf0o / PykDumper
  Dumping credentials through windbg and pykd
  ☆40Updated last year
• sourcefrenchy / goqrexfil
  A mini project to exfiltrate data via QR codes
  ☆19Updated 3 weeks ago
• jfmaes / Emulation-Workshop
  The repository accompanying the Buer Emulation workshop
  ☆24Updated 3 years ago
• snemes / malware-analysis
  ☆23Updated 4 years ago
• pmelson / pyhexdmp
  ☆27Updated 3 years ago
• perturbed-platypus / LinooxMalware
  ☆27Updated 5 years ago
• embee-research / Icedid-file-decryptor
  Static Decryptor for IcedID Malware
  ☆18Updated 2 years ago
• Octoberfest7 / Proxy_Egress_Persistence
  A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies
  ☆32Updated 2 years ago
• MITRECND / picaboo
  Specialized tool to dump Position Independent Code.
  ☆21Updated 4 years ago
• signalblur / impelf
  "ImpELF: A Python-based ELF hashing utility that generates unique fingerprints for ELF binaries using their imported functions and librar…
  ☆15Updated last year
• Cobalt-Strike / ZeroLogon-BOF
  ☆12Updated 4 years ago
• nao-sec / rr_decoder
  Royal Road RTF Weaponizer object decoder
  ☆24Updated 6 months ago
• k3idii / CobaltStrike-Tools
  Tools for playing w/ CobaltStrike config - extractin, detection, processing, etc...
  ☆27Updated last year
• usualsuspect / yara_vt_mock
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆21Updated last year
• riesha / drv-vuln-scanner
  Finds imports that could be exploited, still requires manual analysis.
  ☆27Updated 2 years ago
• SIFalcon / Detection
  ☆22Updated last year
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆15Updated last year
• shlyuz / teamserver
  ☆12Updated 2 years ago
• WithSecureLabs / AMSIDetection
  AMSI detection PoC
  ☆31Updated 4 years ago
• rbmm / Hollowed-Process
  ☆25Updated last month
• therealunicornsecurity / tricard
  Tricard - Malware Sandbox Fingerprinting
  ☆20Updated last year
• OffenseTeacher / NimSkrull
  NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…
  ☆12Updated last year
• jaamaal / Embed
  Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…
  ☆22Updated 4 years ago
• FarghlyMal / Config-Extractors
  ☆26Updated 4 months ago
• nccgroup / mimikatz-detector-busylight
  USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…
  ☆20Updated 2 years ago
• f0wl / blackCatConf
  Configuration Extractor for BlackCat Ransomware
  ☆30Updated 3 years ago
• MathildeVenault / TheRestarter
  Released alongside with a talk at REcon 2023, TheRestarter is an interactive command-line tool is designed to interact with the Windows …
  ☆14Updated last year
• rhotav / PT_LOAD-Injector
  An injector that use PT_LOAD technique
  ☆12Updated 2 years ago
• sourcefrenchy / DEFCON-30---Exotic-Data-Exfiltration
  Slides from my talk at the Adversary Village, Defcon 30
  ☆29Updated 2 years ago