← All tools

ghost

https://github.com/pandaadir05/ghost

Open Source

Categories

Forensics Reverse Engineering

Description

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI and TUI interfaces.

Keywords

cybersecurity detection forensics malware-analysis memory-analysis process-injection reverse-engineering rust security threat-hunting

Screenshots

Example Usage

cargo build --release

See also

010editor

Free

Templates and scripts for 010 editor…

TRACE-Forensic-Toolkit

Open Source

Digital forensic analysis tool that provides a user-friendly interface for investigating disk images…

ida-sigmaker

Open Source

sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD …

Angr

Open Source

Python binary analysis framework supporting both static and dynamic symbolic execution (concolic exe…

MemProcFS-Analyzer

Open Source

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR…

Cortex-Analyzers

Open Source

The following repository is used by TheHive Project to develop and store Cortex analyzers & responde…