AmrThabet / x86Emulator
☆72Updated 10 years ago
Related projects: ⓘ
- reverse engineering extension plugin for windbg☆114Updated 4 years ago
- ☆112Updated 11 years ago
- A branch-monitor-based solution for process monitoring.☆124Updated 4 years ago
- *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg☆31Updated 7 years ago
- Blackhat 2012 Sample Codes☆91Updated 8 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆73Updated 9 years ago
- IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.☆106Updated 9 months ago
- libemu shim layer and win32 environment for Unicorn Engine☆71Updated 7 years ago
- Load a Windows Kernel Driver☆89Updated 7 years ago
- Static unpacker for FinSpy VM☆97Updated 3 years ago
- IntelVT-X nice feature -> tool☆92Updated 10 years ago
- ☆52Updated this week
- A C polymorphic and metamorphic engine☆65Updated 5 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub☆76Updated 12 years ago
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆72Updated 13 years ago
- A simple API monitor for Windbg☆62Updated 7 years ago
- IDA script for vmprotect Windows Api address decoder☆51Updated 3 years ago
- Elevation of privilege detector based on HyperPlatform☆118Updated 7 years ago
- Decompiler for Code Virtualizer 1.3.8 (Oreans)☆79Updated 11 years ago
- A library for intercepting native functions by hooking KiFastSystemCall☆71Updated 4 years ago
- Polymorphic VM and PoliCTF '17 reversing challenge.☆72Updated 3 weeks ago
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆70Updated 2 months ago
- A project that aims to automatically devirtualize code that has been virtualized using x86virt☆125Updated last year
- VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.☆54Updated 4 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆52Updated 5 years ago
- Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process☆91Updated 5 years ago
- IDA plugin to explore and browse tags☆51Updated 5 years ago
- Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine☆90Updated 11 years ago
- IDA Pro plugin that changes color of call instructions and works with all architectures☆56Updated 5 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆43Updated 7 years ago