Alternatives and similar repositories for webshell-scan

Users that are interested in webshell-scan are comparing it to the libraries listed below

• tstillz / webshell-analyzer
  Web shell scanner and analyzer.
  ☆111Updated 2 years ago
• RomanEmelyanov / CobaltStrikeForensic
  Toolset for research malware and Cobalt Strike beacons
  ☆211Updated 4 months ago
• activeshadow / go-atomicredteam
  go-atomicredteam is a Golang application to execute tests as defined in the atomics folder of Red Canary's Atomic Red Team project (https…
  ☆49Updated 2 years ago
• DarkenCode / yara-rules
  Repository of yara rules
  ☆46Updated 9 years ago
• cert-lv / exchange_webshell_detection
  Detect webshells dropped on Microsoft Exchange servers exploited through "proxylogon" group of vulnerabilites (CVE-2021-26855, CVE-2021-2…
  ☆98Updated 4 years ago
• lion-gu / ioc-explorer
  Explore Indicators of Compromise Automatically
  ☆95Updated 5 years ago
• olafhartong / detection-sources
  ☆53Updated 6 years ago
• mitre-attack / attack-evals
  ATT&CK Evaluations website (DEPRECATED)
  ☆59Updated 4 years ago
• CyberMonitor / Invoke-Adversary
  Simulating Adversary Operations
  ☆94Updated 7 years ago
• Th1ru-M / Windows-Threat-Hunting
  Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine
  ☆22Updated 7 months ago
• FixTheExchange / Invoke-ExchangeWebShellHunter
  PowerShell script for hunting webshells on Microsoft Exchange Servers.
  ☆56Updated 8 years ago
• fox-it / cobaltstrike-extraneous-space
  Historical list of {Cobalt Strike,NanoHTTPD} servers
  ☆121Updated 6 years ago
• cyware-labs / Threat-Response-Docker
  ☆43Updated 2 years ago
• vysecurity / CobaltSplunk
  Splunk Dashboard for CobaltStrike logs
  ☆89Updated 4 years ago
• sisoc-tokyo / Real-timeDetectionAD_ver2
  ☆82Updated 4 years ago
• la3ar0v / TuxResponse
  Linux Incident Response
  ☆90Updated 5 years ago
• brakmic / Sinkholes
  Malware Sinkhole List in various formats
  ☆103Updated 3 years ago
• kevthehermit / volatility_plugins
  Volatility Plugins
  ☆64Updated 2 years ago
• YossiSassi / Get-NetSessionEnum
  Automate Network sessions enumeration of connected users in the domain, to facilitate AD Reconnaissance for Adversary simulation & Red Te…
  ☆15Updated 4 years ago
• mitre-attack / joystick
  Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…
  ☆64Updated last year
• SpiderLabs / IOCs-IDPS
  This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)
  ☆104Updated 4 years ago
• audibleblink / bothan
  Is this IP a C2 server?
  ☆28Updated 5 years ago
• PCsXcetra / DerbyCon-2019Files
  This is a group of tools that I was planning on releasing During Derbycon 2019 talk if it was accepted or with a blogpost if not.
  ☆43Updated 4 years ago
• claroty / CVE2020-0796
  CVE2020-0796 SMBv3 RCE
  ☆61Updated 5 years ago
• Cymmetria / weblogic_honeypot
  WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middlew…
  ☆32Updated 5 years ago
• SpiderMate / Red-Teaming
  Ex-pv8's
  ☆64Updated 5 years ago
• fatihsirin / Tweettioc-Splunk-App
  Tweettioc Splunk App
  ☆20Updated 4 years ago
• Te-k / cobaltstrike
  Code and yara rules to detect and analyze Cobalt Strike
  ☆269Updated 4 years ago
• nccgroup / pybeacon
  A collection of scripts for dealing with Cobalt Strike beacons in Python
  ☆168Updated 4 years ago
• decalage2 / oledump-contrib
  The oledump-contrib repository contains plugins and enhancements for the oledump tool published by Didier Stevens.
  ☆54Updated 9 years ago