Alternatives and similar repositories for donut-decryptor

Users that are interested in donut-decryptor are comparing it to the libraries listed below

• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆106Updated 7 months ago
• t-tani / defender2yara
  Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules
  ☆130Updated this week
• SafeBreach-Labs / MagicDot
  A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue
  ☆105Updated last year
• paranoidninja / Cobaltstrike-Detection
  This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared
  ☆88Updated 2 years ago
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆100Updated 7 months ago
• sensepost / mydumbedr
  ☆119Updated last year
• fin3ss3g0d / StoneKeeper
  StoneKeeper C2, an experimental EDR evasion framework for research purposes
  ☆206Updated 10 months ago
• jstrosch / sclauncher
  A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …
  ☆165Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆265Updated last year
• synacktiv / DLHell
  Local & remote Windows DLL Proxying
  ☆165Updated last year
• 0xJs / EnumEDRs
  Enumerate active EDR's on the system
  ☆139Updated last month
• xalicex / LOLDrivers_finder
  ☆87Updated 2 years ago
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆105Updated last year
• vvelitkn / Evasion-Escaper
  Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…
  ☆107Updated 8 months ago
• rad9800 / FileRenameJunctionsEDRDisable
  ☆158Updated 10 months ago
• daddycocoaman / dumpscan
  Finding secrets in kernel and user memory
  ☆115Updated 2 years ago
• Immersive-Labs-Sec / SliverC2-Forensics
  A collection of tools and detections for the Sliver C2 Frameworj
  ☆131Updated 2 years ago
• NVISOsecurity / codasm
  Payload encoding utility to effectively lower payload entropy.
  ☆119Updated 6 months ago
• MultSec / MultCheck
  Identifies bad bytes from static analysis with any Anti-Virus scanner.
  ☆129Updated last year
• thefLink / Hunt-Weird-Syscalls
  ETW based POC to identify direct and indirect syscalls
  ☆187Updated 2 years ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆99Updated 4 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆140Updated last year
• olafhartong / BamboozlEDR
  A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
  ☆244Updated last month
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆193Updated 11 months ago
• whokilleddb / sinister-vsix
  Blog/Journal on how to backdoor VSCode extensions
  ☆74Updated 3 months ago
• SafeBreach-Labs / CortexVortex
  ☆80Updated last year
• OtterHacker / Hooker
  ☆108Updated 11 months ago
• Workday / raw-disk-parser
  A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs
  ☆93Updated last month
• gatariee / Winton
  Command and Control (C2) framework
  ☆132Updated 5 months ago
• nettitude / Tartarus-TpAllocInject
  ☆194Updated last year