Alternatives and similar repositories for Binja-SigMaker

Users that are interested in Binja-SigMaker are comparing it to the libraries listed below

• ajkhoury / pdbfetch
  Fetch PDB symbols directly from Microsoft's symbol servers
  ☆41Updated 3 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 10 months ago
• shareef12 / driveranalyzer
  Binary Ninja plugin to perform automated analysis of Windows drivers
  ☆17Updated 5 years ago
• archercreat / llvm_stuff
  LLVM based devirtualization PoC’s.
  ☆20Updated 3 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆45Updated 4 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 7 months ago
• vtil-project / VTIL-Common
  A common set of helpers used across VTIL toolchain. Moved into -->
  ☆20Updated 5 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• POPFD / cascade
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆13Updated last year
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆60Updated 10 months ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆45Updated last year
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆41Updated 4 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆77Updated 14 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆67Updated 5 years ago
• vtil-project / VTIL-Utils
  VTIL command line utility
  ☆27Updated 3 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆49Updated 4 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆60Updated 2 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆75Updated 10 months ago
• LLVMParty / UnsupportedInstructionsLiftingToLLVM
  Using Zydis and LLVM to lift unsupported instructions to LLVM-IR
  ☆29Updated 3 years ago
• SinaKarvandi / x64-Driver-Inline-Assembly
  This is a simple driver with x64 inline assembly
  ☆55Updated 4 years ago
• vtil-project / VTIL-BinaryNinja
  ☆91Updated 4 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆43Updated 7 years ago
• Midi12 / QueryWorkingSetExample
  Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
  ☆16Updated 3 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆60Updated 9 months ago
• expend20 / x64dbg_ext
  Extensions for x64dbg written in Rust: Telescope and Unicorn powered disassembly
  ☆25Updated 2 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• hfiref0x / AsIo3Unlock
  ASUSTeK AsIO3 I/O driver unlock
  ☆21Updated 4 years ago
• joshfinley / SyscallDumper
  Dump system call codes, names, and offsets from Ntdll.dll
  ☆78Updated last year
• apekros / binja_sigmaker
  Create and find signatures in Binary Ninja
  ☆27Updated last year
• RceNinja / Re-Scripts
  ☆34Updated 3 years ago