Alternatives and similar repositories for GHAST

Users that are interested in GHAST are comparing it to the libraries listed below

• Prevenity / malware_monitor
  Malware monitor template based on MinHook
  ☆16Updated 10 years ago
• r0t0tiller / Game-Hacking
  PC Game Modding
  ☆10Updated 3 years ago
• wirepair / IDAPinLogger
  Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
  ☆41Updated 12 years ago
• yaseralnajjar / deobfuscation-helper
  A simple tool to help reverse engineers while dealing with obfuscated code.
  ☆20Updated 8 years ago
• univm / univm
  A plugin for x64dbg for x86 emulation powered by the Unicorn-engine.
  ☆29Updated 9 years ago
• int0 / ltmdm64_poc
  ☆28Updated 8 years ago
• cgio / invade
  A library for interacting with Windows process memory
  ☆7Updated 6 years ago
• crackinglandia / aadp
  Anti-Anti-Debugger Plugins
  ☆19Updated 11 years ago
• jbremer / godware
  Short for Good Ware; it assists Reverse Engineers in the analysis of Windows Malware.
  ☆24Updated 13 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆38Updated 8 years ago
• edix / MalwareResourceScanner
  Scanning and identifying XOR encrypted PE files in PE resources
  ☆28Updated 11 years ago
• sporst / IDA-Pro-plugins
  Collection of IDA Pro plugins I wrote over the years
  ☆23Updated 15 years ago
• AlephNull314 / AbsoluteZero
  Anti-AV compilation
  ☆44Updated 11 years ago
• tandasat / cs_driver
  A sample project for using Capstone from a driver in Visual Studio 2015
  ☆36Updated 9 years ago
• isra17 / shelltrace
  Shellcode tracer
  ☆15Updated 9 years ago
• ThunderCls / xLCB
  xLCB plugin for x64dbg
  ☆20Updated 8 years ago
• majdi / deadlands
  🐧 A simple kernel-level rootkit
  ☆20Updated 9 years ago
• hidd3ncod3s / runpedmp
  RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …
  ☆10Updated 10 years ago
• sin5678 / wow64hook
  wow64 syscall filter
  ☆13Updated 10 years ago
• AlicanAkyol / eagle
  Bypass Antivm and Cuckoo Sandbox Techniques
  ☆12Updated 8 years ago
• after1990s / InjectSolution
  ☆12Updated 10 years ago
• Cr4sh / SimpleUnpacker
  Simple tool for unpacking packed/protected malware executables.
  ☆33Updated 13 years ago
• onethawt / idapyscripts
  Collection of my IDAPython scripts
  ☆33Updated 9 years ago
• Cr4sh / IDA-UbiGraph
  IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
  ☆25Updated 12 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆38Updated 11 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22Updated 8 years ago
• feliam / PyPMF
  A small python module to manipulate Windows Internals Process Monitor PMF Filter files
  ☆15Updated 6 years ago
• codereversing / guardpage_hook
  Hooking functions with guard pages
  ☆9Updated 2 years ago
• floomby / injector
  does reflective dll injection
  ☆8Updated 11 years ago
• upsidedwn / idamassrename
  IDA Pro plugin to facilitate mass renaming of symbols.
  ☆8Updated 12 years ago