Alternatives and similar repositories for mayhem

Users that are interested in mayhem are comparing it to the libraries listed below

• hegusung / AVSignSeek
  Tool written in python3 to determine where the AV signature is located in a binary/payload
  ☆313Updated 7 years ago
• MarioVilas / winappdbg
  WinAppDbg Debugger
  ☆461Updated last year
• mandiant / flare-qdb
  Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
  ☆164Updated 2 years ago
• Antonin-Deniau / cave_miner
  Search for code cave in all binaries
  ☆282Updated 11 months ago
• therealdreg / anticuckoo
  A tool to detect and crash Cuckoo Sandbox
  ☆294Updated 11 months ago
• Darkabode / zerokit
  Zerokit/GAPZ rootkit (non buildable and only for researching)
  ☆182Updated 6 years ago
• 1111joe1111 / ida_ea
  A set of exploitation/reversing aids for IDA
  ☆420Updated 7 years ago
• bee13oy / AV_Kernel_Vulns
  Pocs for Antivirus Software‘s Kernel Vulnerabilities
  ☆264Updated 7 years ago
• x64dbg / mona
  Fork of mona.py with x64dbg support
  ☆104Updated 3 years ago
• MortenSchenk / BHUSA2017
  Content from presentation at BHUSA 2017
  ☆180Updated 7 years ago
• WinHeapExplorer / WinHeap-Explorer
  WinHeap Explorer repository.
  ☆119Updated 6 years ago
• BorjaMerino / Pazuzu
  Pazuzu: Reflective DLL to run binaries from memory
  ☆215Updated 4 years ago
• AMOSSYS / MemITM
  Tool to make in memory man in the middle
  ☆124Updated 6 years ago
• EgeBalci / Cminer
  Cminer is a tool for enumerating the code caves in PE files.
  ☆152Updated 2 years ago
• OALabs / frida-wshook
  Script analysis tool based on Frida.re
  ☆128Updated 8 years ago
• kokjo / universalrop
  Small tool for generating ropchains using unicorn and z3
  ☆198Updated 7 years ago
• MarioVilas / shellcode_tools
  Miscellaneous tools written in Python, mostly centered around shellcodes.
  ☆146Updated 10 years ago
• gdelugre / shell-factory
  C++-based shellcode builder
  ☆114Updated 4 years ago
• malcomvetter / ManagedInjection
  A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
  ☆163Updated 6 years ago
• bruce30262 / TWindbg
  PEDA-like debugger UI for WinDbg
  ☆204Updated last year
• FuzzySecurity / HackSysTeam-PSKernelPwn
  ☆141Updated 8 years ago
• mandiant / flare-dbg
  flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
  ☆150Updated 7 years ago
• cryptolok / ASLRay
  Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying
  ☆301Updated 2 years ago
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆287Updated 7 years ago
• nccgroup / DriverBuddy
  DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
  ☆364Updated 5 years ago
• theevilbit / exploit_generator
  Automated Exploit generation with WinDBG
  ☆190Updated 8 years ago
• tandasat / DotNetHooking
  Sample use cases of the .NET native code hooking technique
  ☆213Updated 7 years ago
• BromiumLabs / PackerAttacker
  C++ application that uses memory and code hooks to detect packers
  ☆270Updated 7 years ago
• KasperskyLab / VBscriptInternals
  Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis
  ☆85Updated 3 years ago
• govolution / avepoc
  some pocs for antivirus evasion
  ☆131Updated last year