Alternatives and similar repositories for Binja-SigMaker:

Users that are interested in Binja-SigMaker are comparing it to the libraries listed below

• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 6 months ago
• ajkhoury / pdbfetch
  Fetch PDB symbols directly from Microsoft's symbol servers
  ☆41Updated 3 years ago
• vtil-project / VTIL-Common
  A common set of helpers used across VTIL toolchain. Moved into -->
  ☆20Updated 4 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 2 months ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• Gbps / CapcomLib
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆39Updated 6 years ago
• nlykkei / llvm-ir-obfuscation
  Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.
  ☆71Updated 5 years ago
• blaquee / SlothEmu
  unicorn emulator for x64dbg
  ☆30Updated 6 years ago
• Midi12 / QueryWorkingSetExample
  Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
  ☆16Updated 3 years ago
• LLVMParty / UnsupportedInstructionsLiftingToLLVM
  Using Zydis and LLVM to lift unsupported instructions to LLVM-IR
  ☆28Updated 3 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆57Updated 4 months ago
• fvrmatteo / DeobfuscatorTest
  ☆24Updated 8 years ago
• vtil-project / VTIL-SymEx
  Symbolic expression simplifier used across VTIL toolchain. Moved into -->
  ☆24Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆44Updated 4 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆58Updated 2 years ago
• dro / uac-launchinf-poc
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆34Updated 6 years ago
• dro / win10-ida-types
  Windows 10 kernel and ntdll internal types, directly compatible with ida.
  ☆50Updated 6 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆75Updated 13 years ago
• vtil-project / VTIL-Utils
  VTIL command line utility
  ☆27Updated 2 years ago
• archercreat / llvm_stuff
  LLVM based devirtualization PoC’s.
  ☆20Updated 3 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆49Updated 4 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆43Updated 7 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆54Updated 6 years ago
• Rat431 / ColdHide
  (DEPRECATED) A simple anti-anti debug library for Windows
  ☆29Updated 4 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• calware / HV-Playground
  A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x
  ☆29Updated 4 years ago