Cybersecurity Libraries - Page 2

A method of bypassing EDR's active projection DLL's by preventing entry point exection

C# 856Updated: 2 y ago License: No License (No License)

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

PowerShell 855Updated: 3 y ago License: Proprietary (Proprietary)

This program is designed to demonstrate various process injection techniques

C# 852Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

CRITs - Collaborative Research Into Threats

JavaScript 843Updated: 2 y ago License: Proprietary (Proprietary)

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

C# 821Updated: 2 y ago License: Permissive (BSD-3-Clause)

Log what files are accessed by any Linux process

C 807Updated: 3 y ago License: Strong Copyleft (GPL-3.0)

Scan files or process memory for CobaltStrike beacons and parse their configuration

C# 802Updated: 2 y ago License: Permissive (MIT)

Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples

Jupyter Notebook 798Updated: 3 y ago License: No License (No License)

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

C++ 784Updated: 2 y ago License: Permissive (Apache-2.0)

Cyber Analytics Repository

Python 781Updated: 1 y ago License: Permissive (Apache-2.0)

A laboratory for learning secure web and mobile development in a practical manner.

PHP 775Updated: 1 y ago License: Permissive (BSD-3-Clause)

Demos of various injection techniques found in malware

C 763Updated: 2 y ago License: Permissive (BSD-2-Clause)

Automated wanadecrypt with key recovery if lucky

C 761Updated: 3 y ago License: No License (No License)

Windows and Cygwin port of proxychains, based on MinHook and DLL Injection

C 740Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Registry Explorer - enhanced Registry editor/viewer

C++ 737Updated: 3 y ago License: Permissive (MIT)

Collaborative Incident Response platform

JavaScript 720Updated: 2 y ago License: Weak Copyleft (LGPL-3.0)

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

Python 709Updated: 2 y ago License: Strong Copyleft (AGPL-3.0)

A Python package and CLI for parsing aggregate and forensic DMARC reports

Python 708Updated: 2 y ago License: Permissive (Apache-2.0)

A feature rich DLL injection library.

C++ 698Updated: 1 y ago License: No License (No License)

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

Python 684Updated: 2 y ago License: Permissive (MIT)

FAME Automates Malware Evaluation

Python 681Updated: 3 y ago License: Strong Copyleft (GPL-3.0)

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

PowerShell 678Updated: 1 y ago License: Permissive (MIT)

PoCs and tools for investigation of Windows process execution techniques

C# 678Updated: 2 y ago License: Permissive (BSD-3-Clause)

Red Team Scripts by d0nkeys (ex SnadoTeam)

PowerShell 663Updated: 2 y ago License: Permissive (MIT)

Brand New Code Injection for Windows

C++ 654Updated: 3 y ago License: No License (No License)

Europa Universalis IV double byte language patch; master:1.34.2, dev:1.35.1

C++ 636Updated: 2 y ago License: Permissive (MIT)

Diffy is a triage tool used during cloud-centric security incidents, to help digital forensics and incident response (DFIR) teams quickly identify suspicious hosts on which to focus their response.

Python 631Updated: 2 y ago License: Permissive (Apache-2.0)

ASI Loader is the tool that loads custom libraries with the file extension .asi into any game process.

C++ 631Updated: 1 y ago License: Permissive (MIT)

Damn Vulnerable NodeJS Application

CSS 616Updated: 1 y ago License: Permissive (MIT)

💉 DLL/Shellcode injection techniques

C++ 616Updated: 1 y ago License: No License (No License)

macOS (& ios) Artifact Parsing Tool

Python 605Updated: 2 y ago License: Permissive (MIT)

Everything related to Linux Forensics

Shell 582Updated: 2 y ago License: No License (No License)

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

C# 564Updated: 2 y ago License: Permissive (MIT)

hijack dll Source Code Generator. support x86/x64

C++ 554Updated: 1 y ago License: No License (No License)

A tiny web auditor with strong opinions.

Shell 554Updated: 3 y ago License: Permissive (MIT)

A Windows native DLL injection library that supports several methods of injection.

C# 552Updated: 3 y ago License: Permissive (MIT)

CyLR - Live Response Collection Tool

C# 545Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

C++ 543Updated: 3 y ago License: Permissive (BSD-3-Clause)

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

C 541Updated: 2 y ago License: Permissive (MIT)

A Harder ImageNet Test Set (CVPR 2021)

Python 529Updated: 2 y ago License: Permissive (MIT)

Code relative to "Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks"

Python 520Updated: 1 y ago License: Permissive (MIT)

OWASP ZSC - Shellcode/Obfuscate Code Generator

Python 514Updated: 4 y ago License: Strong Copyleft (GPL-3.0)

Crypter - Python3 based builder and ransomware compiled to Windows executable using PyInstaller

Python 506Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

Python 501Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

Python Script to access ATT&CK content available in STIX via a public TAXII server

Python 501Updated: 2 y ago License: Permissive (BSD-3-Clause)

Integrates Dependency-Check reports into SonarQube

Java 499Updated: 1 y ago License: No License (No License)

A C# based memory editing library targeting Windows applications, offering various functions to extract and inject data and codes into remote processes to allow interoperability.

C# 491Updated: 3 y ago License: Proprietary (Proprietary)

💉📦 A Webpack loader for injecting code into modules via their dependencies.

JavaScript 479Updated: 4 y ago License: Permissive (MIT)

My implementation of enSilo's Process Doppelganging (PE injection technique)

C 474Updated: 2 y ago License: No License (No License)

Detect, analyze and uniquely identify crashes in Windows applications

Python 472Updated: 2 y ago License: Proprietary (Proprietary)