Alternatives and similar repositories for mayhem:

Users that are interested in mayhem are comparing it to the libraries listed below

• bee13oy / AV_Kernel_Vulns
  Pocs for Antivirus Software‘s Kernel Vulnerabilities
  ☆263Updated 7 years ago
• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆313Updated 6 years ago
• Darkabode / zerokit
  Zerokit/GAPZ rootkit (non buildable and only for researching)
  ☆182Updated 5 years ago
• x64dbg / mona
  Fork of mona.py with x64dbg support
  ☆102Updated 2 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆292Updated 7 months ago
• EgeBalci / Cminer
  Cminer is a tool for enumerating the code caves in PE files.
  ☆148Updated last year
• MortenSchenk / BHUSA2017
  Content from presentation at BHUSA 2017
  ☆180Updated 7 years ago
• mandiant / flare-dbg
  flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
  ☆150Updated 7 years ago
• Antonin-Deniau / cave_miner
  Search for code cave in all binaries
  ☆277Updated 8 months ago
• kokjo / universalrop
  Small tool for generating ropchains using unicorn and z3
  ☆197Updated 7 years ago
• MarioVilas / winappdbg
  WinAppDbg Debugger
  ☆453Updated last year
• 1111joe1111 / ida_ea
  A set of exploitation/reversing aids for IDA
  ☆417Updated 7 years ago
• orppra / ropa
  GUI tool to create ROP chains using the ropper API
  ☆156Updated 6 years ago
• WinHeapExplorer / WinHeap-Explorer
  WinHeap Explorer repository.
  ☆119Updated 6 years ago
• cbayet / Exploit-CVE-2017-6008
  Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
  ☆116Updated 4 months ago
• tandasat / DotNetHooking
  Sample use cases of the .NET native code hooking technique
  ☆208Updated 7 years ago
• mandiant / flare-qdb
  Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
  ☆162Updated last year
• GradiusX / HEVD-Python-Solutions
  Python solutions for the HackSysTeam Extreme Vulnerable Driver
  ☆151Updated 3 years ago
• Spajed / processrefund
  An attempt at Process Doppelgänging
  ☆184Updated 7 years ago
• MarioVilas / shellcode_tools
  Miscellaneous tools written in Python, mostly centered around shellcodes.
  ☆145Updated 9 years ago
• BorjaMerino / Pazuzu
  Pazuzu: Reflective DLL to run binaries from memory
  ☆214Updated 4 years ago
• K2 / EhTrace
  ATrace is a tool for tracing execution of binaries on Windows.
  ☆236Updated 8 years ago
• SafeBreach-Labs / BITSInject
  A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…
  ☆98Updated 5 years ago
• IOActive / I-know-where-your-page-lives
  I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
  ☆163Updated 8 years ago
• BromiumLabs / PackerAttacker
  C++ application that uses memory and code hooks to detect packers
  ☆270Updated 7 years ago
• sensepost / gdi-palettes-exp
  DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects
  ☆145Updated 7 years ago
• peperunas / injectopi
  A set of tutorials about code injection for Windows.
  ☆309Updated 6 months ago
• gpoulios / ROPInjector
  Patching ROP-encoded shellcodes into PEs
  ☆184Updated 7 years ago
• DavidKorczynski / RePEconstruct
  ☆91Updated 8 years ago
• FSecureLABS / win_driver_plugin
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆428Updated 6 years ago