Alternatives and similar repositories for Binja-SigMaker:

Users that are interested in Binja-SigMaker are comparing it to the libraries listed below

• ajkhoury / pdbfetch
  Fetch PDB symbols directly from Microsoft's symbol servers
  ☆41Updated 3 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆41Updated 6 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 10 months ago
• hfiref0x / AsIo3Unlock
  ASUSTeK AsIO3 I/O driver unlock
  ☆21Updated 4 years ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆46Updated last year
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• vtil-project / VTIL-Utils
  VTIL command line utility
  ☆27Updated 3 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 6 months ago
• thesecretclub / Vagrant-Kernel-Debug-Sample
  Sample project for kernel debugging automation with Vagrant
  ☆59Updated 5 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆49Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• 0dayatday0 / BattleFN-cheat-analysis
  ☆47Updated 3 years ago
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆41Updated 4 years ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 6 years ago
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆59Updated 9 months ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆60Updated 2 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆49Updated 4 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆60Updated 8 months ago
• nlykkei / llvm-ir-obfuscation
  Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.
  ☆72Updated 5 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆45Updated 4 years ago
• Tai7sy / BE_Fuck
  BattlEye Emulator, modified from slicktors work.
  ☆13Updated 6 years ago
• archercreat / llvm_stuff
  LLVM based devirtualization PoC’s.
  ☆20Updated 3 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆43Updated 7 years ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆72Updated last year
• HyperSine / siren-hypervisor
  ☆38Updated 2 years ago
• ajkhoury / Errata1337
  ☆68Updated 4 years ago
• DownWithUp / KLoad_C
  A simple command line utility to quickly load and unload Windows drivers
  ☆17Updated 2 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆58Updated 6 years ago
• apekros / binja_sigmaker
  Create and find signatures in Binary Ninja
  ☆27Updated last year