Alternatives and similar repositories for volatility

Users that are interested in volatility are comparing it to the libraries listed below

• volatilityfoundation / volatility3
  Volatility 3.0 development
  ☆3,736Updated last week
• LOLBAS-Project / LOLBAS
  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
  ☆8,176Updated this week
• VirusTotal / yara
  The pattern matching swiss knife
  ☆9,251Updated 2 weeks ago
• EmpireProject / Empire
  Empire is a PowerShell and Python post-exploitation agent.
  ☆7,749Updated 5 years ago
• SpiderLabs / Responder
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…
  ☆4,795Updated 5 years ago
• mandiant / flare-vm
  A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…
  ☆8,077Updated 2 months ago
• Gallopsled / pwntools
  CTF framework and exploit development library
  ☆13,078Updated 2 weeks ago
• lgandx / Responder
  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…
  ☆6,158Updated last week
• byt3bl33d3r / CrackMapExec
  A swiss army knife for pentesting networks
  ☆8,989Updated 2 years ago
• 504ensicsLabs / LiME
  LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices…
  ☆1,902Updated last month
• fortra / impacket
  Impacket is a collection of Python classes for working with network protocols.
  ☆15,198Updated last week
• Yara-Rules / rules
  Repository of yara rules
  ☆4,614Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,799Updated last week
• mandiant / commando-vm
  Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mand…
  ☆7,425Updated last month
• SpecterOps / BloodHound-Legacy
  Six Degrees of Domain Admin
  ☆10,464Updated 4 months ago
• samratashok / nishang
  Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
  ☆9,605Updated last year
• redcanaryco / atomic-red-team
  Small and highly portable detection tests based on MITRE's ATT&CK.
  ☆11,357Updated last week
• Neo23x0 / Loki
  Loki - Simple IOC and YARA Scanner
  ☆3,694Updated last month
• PowerShellMafia / PowerSploit
  PowerSploit - A PowerShell Post-Exploitation Framework
  ☆12,734Updated 5 years ago
• google / rekall
  Rekall Memory Forensic Framework
  ☆1,991Updated 5 years ago
• offensive-security / exploitdb
  The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb
  ☆7,829Updated 3 years ago
• The-Z-Labs / linux-exploit-suggester
  Linux privilege escalation auditing tool
  ☆6,300Updated last year
• cuckoosandbox / cuckoo
  Cuckoo Sandbox is an automated dynamic malware analysis system
  ☆5,874Updated 3 years ago
• rebootuser / LinEnum
  Scripted Local Linux Enumeration & Privilege Escalation Checks
  ☆7,740Updated 2 years ago
• trustedsec / unicorn
  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's po…
  ☆3,888Updated last year
• rapid7 / metasploitable3
  Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
  ☆5,349Updated 9 months ago
• trustedsec / ptf
  The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
  ☆5,434Updated last year
• longld / peda
  PEDA - Python Exploit Development Assistance for GDB
  ☆6,083Updated last year
• iagox86 / dnscat2
  ☆3,775Updated last year
• hfiref0x / UACME
  Defeating Windows User Account Control
  ☆7,184Updated 5 months ago