19h / chernobogLinks
chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.
☆71Updated last week
Alternatives and similar repositories for chernobog
Users that are interested in chernobog are comparing it to the libraries listed below
Sorting:
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆67Updated last year
- VTIL2 is a ground-up reimagination of the VTIL Project, completely rewritten in modern C# with enterprise-grade architecture, performance…☆62Updated 2 months ago
- Native opaque predicate cleaner plugin for Binary Ninja☆44Updated this week
- A devirtualization engine for Themida.☆105Updated last year
- ☆30Updated 3 weeks ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆120Updated 2 weeks ago
- ☆65Updated 2 years ago
- Themida 3.x research☆36Updated 10 months ago
- Port of MBA Solver SiMBA to C/C++ (MBA deobfuscation in real world applications)☆106Updated 2 months ago
- 🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.☆117Updated last year
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆104Updated 3 weeks ago
- sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that w…☆151Updated last month
- ☆11Updated 3 years ago
- VMProtect, VMP, Devirter, 3,5☆107Updated 2 years ago
- ☆42Updated last year
- A x86_64 software emulator☆161Updated 4 months ago
- VM devirtualization PoC based on AsmJit and llvm☆122Updated 4 years ago
- A C++ wrapper for icedx86 decoder☆45Updated 5 months ago
- LLVM based, compile-time obfuscator plugin.☆78Updated 3 weeks ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆117Updated last week
- Kernel ReClassEx☆66Updated 2 years ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆85Updated 2 months ago
- ☆125Updated 5 months ago
- VMProtect2 Deobfuscation Tooling☆81Updated 2 months ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆71Updated 3 years ago
- Mixed Boolean-Arithmetic in Rust for WebAssembly☆30Updated 7 months ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆63Updated last year
- Class Informer updated for 32bit targets in 64bit IDA 8.2+/9.0/9.1☆65Updated 9 months ago
- Symbolic Execution based on lifting amd64 to z3☆29Updated last year
- Easy-to-use IDA plugin for code emulation☆52Updated last month