Alternatives and similar repositories for GreenHat

Users that are interested in GreenHat are comparing it to the libraries listed below

• 87owo / PYAS
  Python Antivirus Software
  ☆167Updated 2 months ago
• huoji120 / awesome_anti_virus_engine
  about how to make a anti-virus engine
  ☆76Updated last month
• hz86 / peloader
  内存加载DLL 支持X86和X64（Memory PELoader Support X86 and X64）
  ☆35Updated last year
• 0sha0 / PYAS_Protection
  A Driver Only For PYAS
  ☆13Updated last year
• 0range-x / windows
  ☆10Updated 2 years ago
• threatexpert / disk2vmdk
  windows下做本地或远程的磁盘镜像的工具，可输出vmdk
  ☆31Updated 7 months ago
• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆71Updated last year
• 2367765883 / Hephaestus-terminal-management
  ### A security tool for enterprise terminal management that named Hephaestus
  ☆46Updated last year
• Yyyyshen / WindowsKernelPrograming
  《Windows内核编程》学习
  ☆58Updated 4 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆90Updated 3 years ago
• TimelifeCzy / HIPS-HIDS_CveMod
  Windows CVE主防(HIPS/HIDS)
  ☆55Updated 4 years ago
• WindowsCodeCamp / append_signed_pe
  Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.
  ☆26Updated 4 years ago
• kelomina / KolominaAntiVirus
  KolominaAntiVirus
  ☆21Updated last year
• skrandy / ProtectYourProcess
  保护进程
  ☆23Updated 2 years ago
• Cc28256 / ObfuscateP
  编译时混淆字符串，以确保生成的二进制PE不会暴漏明文字符串。（C++ 14 及以上）
  ☆26Updated 3 years ago
• MMitsuha / Locker
  Bypass anti-virus with various method
  ☆33Updated last year
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆58Updated last year
• xia0ji233 / Xprocess
  ☆43Updated last year
• huoji120 / HandleMaster
  Changes handle's access rights using DKOM with a vulnerable driver
  ☆25Updated 7 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆51Updated 4 years ago
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆25Updated 2 months ago
• theSecHunter / Hades-Linux
  Hades is a Host-Based Intrusion Detection System based on both eBPF(kernel) and netlink/cn_proc(userspace).
  ☆24Updated 7 months ago
• hid3rx / GhostWriting
  ☆31Updated last year
• bluesadi / Heavens-Gate
  Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
  ☆71Updated 3 years ago
• ashleyhung / WinRing0
  Get windows CPU temperature with WinRing0 driver and library
  ☆23Updated 6 years ago
• 0sha0 / SimpleByPass
  Simple Shellcode Loader Using 'Syscall' 'Detours' 'Simple hijacking Shellcode' 'Dynamic Function' to ByPass
  ☆17Updated last year
• IcEy-999 / NDIS_filter_firerwall
  ☆35Updated 3 years ago
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆83Updated 2 years ago
• k273811702 / NoOne
  一款windows64位的ark工具 rootkit
  ☆63Updated last year
• huoji120 / Etw-Syscall
  https://key08.com/index.php/2021/10/19/1375.html
  ☆68Updated 3 years ago