Alternatives and similar repositories for mayhem

Users that are interested in mayhem are comparing it to the libraries listed below

• mandiant / flare-qdb
  Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
  ☆164Updated 2 years ago
• x64dbg / mona
  Fork of mona.py with x64dbg support
  ☆109Updated 3 years ago
• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆315Updated 7 years ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆297Updated last year
• Antonin-Deniau / cave_miner
  Search for code cave in all binaries
  ☆284Updated 3 months ago
• K2 / EhTrace
  ATrace is a tool for tracing execution of binaries on Windows.
  ☆240Updated 2 months ago
• MarioVilas / shellcode_tools
  Miscellaneous tools written in Python, mostly centered around shellcodes.
  ☆147Updated 10 years ago
• secrary / DrSemu
  DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
  ☆278Updated 6 years ago
• AMOSSYS / MemITM
  Tool to make in memory man in the middle
  ☆125Updated 7 years ago
• mandiant / flare-dbg
  flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
  ☆150Updated 8 years ago
• vallejocc / Reverse-Engineering-Arsenal
  Useful Scripts for helping in reverse engeenering
  ☆181Updated 5 years ago
• bee13oy / AV_Kernel_Vulns
  Pocs for Antivirus Software‘s Kernel Vulnerabilities
  ☆264Updated 8 years ago
• MortenSchenk / BHUSA2017
  Content from presentation at BHUSA 2017
  ☆180Updated 8 years ago
• Darkabode / zerokit
  Zerokit/GAPZ rootkit (non buildable and only for researching)
  ☆185Updated 6 years ago
• EgeBalci / Cminer
  Cminer is a tool for enumerating the code caves in PE files.
  ☆156Updated 2 years ago
• edix / LoadDll
  Better version of RunDll with GUI. This program allows you to load DLLs on Windows. You can select how to load the DLL. By direct Entry P…
  ☆240Updated 10 years ago
• tandasat / DotNetHooking
  Sample use cases of the .NET native code hooking technique
  ☆218Updated 8 years ago
• sensepost / gdi-palettes-exp
  DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects
  ☆148Updated 8 years ago
• GradiusX / HEVD-Python-Solutions
  Python solutions for the HackSysTeam Extreme Vulnerable Driver
  ☆152Updated 4 years ago
• codypierce / hackers-grep
  hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
  ☆171Updated 7 years ago
• OALabs / PyIATRebuild
  Automatically rebuild Import Address Table for dumped PE file. With python bindings!
  ☆121Updated 7 years ago
• Qubasa / 0pack
  A novel technique to hide code from debuggers & disassemblers
  ☆161Updated last year
• theevilbit / exploit_generator
  Automated Exploit generation with WinDBG
  ☆190Updated 9 years ago
• rsmusllp / syringe
  A General Purpose DLL & Code Injection Utility
  ☆157Updated 8 years ago
• peperunas / injectopi
  A set of tutorials about code injection for Windows.
  ☆314Updated last year
• KasperskyLab / VBscriptInternals
  Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
  ☆85Updated 3 years ago
• orppra / ropa
  GUI tool to create ROP chains using the ropper API
  ☆159Updated 7 years ago
• MarioVilas / winappdbg
  WinAppDbg Debugger
  ☆478Updated 3 months ago
• WinHeapExplorer / WinHeap-Explorer
  WinHeap Explorer repository.
  ☆119Updated 7 years ago
• CyberPoint / Ruxcon2016ETW
  Ruxcon2016 POC Code
  ☆141Updated 9 years ago