hollows_hunter Logo

hollows_hunter

0
Free
Updated 11 March 2025
Visit Website

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches). Uses: PE-sieve (the library version). PE-sieve FAQ - Frequently Asked Questions Read Wiki Clone Use recursive clone to get the repo together with all the submodules: git clone --recursive https://github.com/hasherezade/hollows_hunter.git Builds Download the latest release, or read more. Available also via Chocolatey

FEATURES

SIMILAR TOOLS

A new age tool for binary analysis that uses statistical visualizations to help find patterns in large amounts of binary data.

A tool that generates Yara rules for strings and their XOR encoded versions, as well as base64-encoded variations with different padding possibilities.

Python wrapper for the Libemu library for analyzing shellcode.

A simple XSS scanner tool for identifying Cross-Site Scripting vulnerabilities

Joe Sandbox Community provides automated cloud-based malware analysis across multiple OS platforms.

A Python script for scanning data within an IDB using Yara

Java decompiler for modern Java features up to Java 14.

Tool for decompressing malware samples to run Yara rules against them.

A collection of YARA rules for public use, built from intelligence profiles and file work.

CyberSecTools logoCyberSecTools

Explore the largest curated directory of cybersecurity tools and resources to enhance your security practices. Find the right solution for your domain.

Operated by:

Mandos Cyber • KVK: 97994448

Netherlands • contact@mandos.io

VAT: NL005301434B12

Copyright © 2025 - All rights reserved