Alternatives and similar repositories for donut-decryptor

Users that are interested in donut-decryptor are comparing it to the libraries listed below

• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆103Updated 5 months ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆103Updated 5 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆96Updated 2 months ago
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆207Updated 8 months ago
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆165Updated last year
• paranoidninja / Cobaltstrike-Detection
  This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared
  ☆89Updated last year
• xalicex / LOLDrivers_finder
  ☆87Updated 2 years ago
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆127Updated last year
• sensepost / mydumbedr
  ☆120Updated last year
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆105Updated last year
• SafeBreach-Labs / CortexVortex
  ☆79Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆157Updated 8 months ago
• daddycocoaman / dumpscan
  Finding secrets in kernel and user memory
  ☆116Updated last year
• gatariee / Winton
  Command and Control (C2) framework
  ☆130Updated 3 months ago
• c2pain / RustBird
  Early Bird APC Injection in Rust
  ☆58Updated 10 months ago
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆128Updated 2 years ago
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆99Updated last year
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆148Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆241Updated last year
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆81Updated 2 years ago
• olafhartong / BamboozlEDR
  A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
  ☆205Updated 3 weeks ago
• t-tani / defender2yara
  Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules
  ☆119Updated this week
• OtterHacker / Hooker
  ☆108Updated 9 months ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆119Updated 4 months ago
• offalltn / gitC2
  POC of GITHUB simple C2 in rust
  ☆52Updated last month
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆119Updated 9 months ago
• Maldev-Academy / DRMBinViaOrdinalImports
  Create Anti-Copy DRM Malware
  ☆63Updated last year
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆192Updated 9 months ago
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆73Updated 5 months ago