Skip to content

Entry

hasherezade/hollows_hunter

Appears in 5 awesome lists

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Open github.comhasherezade/hollows_hunter

Found in these lists

Awesome Stars

Section: C · Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

SlowScore 56

Awesome Reverse Engineering

Section: Deobfuscation and anti-analysis · Windows process scanner using PE-sieve to find and dump injected or modified code across running processes; findings require manual investigation.

FreshScore 89

Awesome Threat Detection and Hunting

Section: Tools · Scans all running processes, recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

SlowScore 57

Security lists for SOC/DFIR detections

Section: General

FreshScore 85

awesome-c

Section: Other · Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

FreshScore 80

mpv

Lightweight command-line video player supporting wide format compatibility and advanced playback features.

In 8 listsDetails

KCP

A fast and reliable ARQ protocol that helps fast-action games reduct network latency. MIT.

In 7 listsDetails

audioFlux

octocat: :package: - A library for audio and music analysis, feature extraction.

In 6 listsDetails

sway

Wayland - Tiling Wayland compositor and a drop-in replacement for the i3 window manager for X11.

In 7 listsDetails

scrcpy

This application provides display and control of Android devices connected on USB (or over TCP/IP). It does not require any root access. It works on GNU/Linux, Windows and MacOS.

In 7 listsDetails

Atomic Red Team

Red Canary's library of small, focused test scripts mapped directly to MITRE ATT&CK techniques, enabling rapid validation of detection coverage with self-contained, reversible, and cross-platform atomic tests. Each test runs with a single command, includes cleanup steps, and supports Windows,…

In 7 listsDetails

Netdata

is high-fidelity infrastructure monitoring and troubleshooting, real-time monitoring Agent collects thousands of metrics from systems, hardware, containers, and applications with zero configuration. It runs permanently on all your physical/virtual servers, containers, cloud deployments, and…

In 7 listsDetails

RPISEC/MBE

Modern Binary Exploitation Rensselaer Polytechnic Institute; This repository contains the materials as developed and used by RPISEC to teach Modern Binary Exploitation at Rensselaer Polytechnic Institute in Spring 2015. This was a university course developed and run solely by students to teach…

In 7 listsDetails