Alternatives and similar repositories for GoResolver

Users that are interested in GoResolver are comparing it to the libraries listed below

• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆117Updated last year
• struppigel / hedgehog-tools
  ☆115Updated this week
• mandiant / gostringungarbler
  Python tool to resolve all strings in Go binaries obfuscated by garble
  ☆114Updated 4 months ago
• airbus-cert / minusone
  Powershell Linter
  ☆62Updated 2 weeks ago
• leandrofroes / gftrace
  A command line Windows API tracing tool for Golang binaries.
  ☆156Updated last year
• volexity / donut-decryptor
  Retrieve inner payloads from Donut samples
  ☆102Updated last year
• MatheuZSecurity / detect-lkm-rootkit-cheatsheet
  Cheat sheet to detect and remove linux kernel rootkit
  ☆67Updated 7 months ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆108Updated 2 months ago
• Invoke-RE / ungarble_bn
  Binary Ninja plugin to deobfuscate strings obfuscated with the Garble project
  ☆26Updated 4 months ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆116Updated 2 years ago
• patrickmatula / Windows-Internals-Learning-Resources
  ☆102Updated 7 months ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆83Updated 2 years ago
• reecdeep / hollowise
  Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis …
  ☆37Updated 4 months ago
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆154Updated 11 months ago
• hasherezade / flareon2024
  ☆37Updated 7 months ago
• PwCUK-CTO / iis-helper-plugin
  IDA Pro plugin to aid with the analysis of native IIS modules
  ☆19Updated 11 months ago
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆92Updated 2 years ago
• eset / nimfilt
  A collection of modules and scripts to help with analyzing Nim binaries
  ☆76Updated 9 months ago
• t0-retooling / defender-recon24
  ☆52Updated 9 months ago
• badhive / alca
  Rule Engine for Dynamic Malware Analysis and Research
  ☆22Updated 3 months ago
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆197Updated 4 months ago
• imperva / frida-jit-unpacker
  The Frida-Jit-unPacker aims at helping researchers and analysts understand the behavior of packed malicious .NET samples.
  ☆64Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆232Updated last year
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆42Updated last year
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated 10 months ago
• Velocidex / Linpmem
  Linpmem is a linux memory acquisition tool
  ☆85Updated 3 weeks ago
• vvelitkn / Evasion-Escaper
  Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…
  ☆107Updated 5 months ago
• jeFF0Falltrades / rat_king_parser
  A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno …
  ☆47Updated last month
• JanielDary / ELFieScanner
  A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by…
  ☆83Updated last year
• milankovo / YaraVM
  This repository contains an IDA processor for loading and disassembling compiled yara rules.
  ☆41Updated 6 months ago