BARF

hollows_hunter

Scans running processes for potentially malicious implants and dumps them.

Binsequencer

A tool that scans a corpus of malware and builds a YARA rule to detect similar code sections.

Shellcode2PE

A Python script that converts shellcode into a PE32 or PE32+ file.

Kaiser File-less Persistence

Discontinued project for file-less persistence, attacks, and anti-forensic capabilities on Windows 7 32-bit systems.

GitGot

A tool for identifying sensitive secrets in public GitHub repositories

Enjarify

A tool for translating Dalvik bytecode to equivalent Java bytecode, allowing Java analysis tools to analyze Android applications.

NodeYara

Yara module for Node.js

bohops Leveraging INF-SCT Fetch & Execute Techniques For Bypass, Evasion, & Persistence

A blog post discussing INF-SCT fetch and execute techniques for bypass, evasion, and persistence