CERT-Polska / drakvufLinks
DRAKVUF Black-box Binary Analysis
☆15Updated last month
Alternatives and similar repositories for drakvuf
Users that are interested in drakvuf are comparing it to the libraries listed below
Sorting:
- Port of the binary diffing library, diaphora, for radare2 and mariadb☆51Updated 2 years ago
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆94Updated 3 weeks ago
- ☆72Updated 2 years ago
- Robust Automated Malware Unpacker☆85Updated 2 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆42Updated 5 years ago
- An IDA Pro extension for easier (malware) reverse engineering☆113Updated 3 years ago
- Analyses in IDA/Hex-Rays☆84Updated 2 years ago
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆70Updated last year
- pyGoRE - Python library for analyzing Go binaries☆65Updated 3 years ago
- Parsing of YARA rules into AST and building new rulesets in C++.☆128Updated last month
- Symbol hash for ELF files☆111Updated 3 years ago
- ☆28Updated 5 years ago
- Yet another rule generator for Yara☆29Updated 4 months ago
- IDA Pro plugin for recognizing known hashes of API function names☆81Updated 3 years ago
- Go Lang Portable Executable Parser☆38Updated 4 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Updated 2 years ago
- Notes on using the Python bindings for the Unicorn Engine☆79Updated 5 years ago
- Ghidra plugin for https://analyze.intezer.com☆72Updated 2 years ago
- Automatically generate AV byte signatures from sets of similar binaries.☆280Updated 10 months ago
- A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.☆58Updated 4 years ago
- CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- p…☆134Updated last month
- Use YARA rules on Time Travel Debugging traces☆93Updated 2 years ago
- ☆53Updated 7 years ago
- Import DynamoRIO drcov code coverage data into Ghidra☆44Updated last year
- Exploits for YARA 3.7.1 & 3.8.1☆32Updated 6 years ago
- ☆109Updated 2 years ago
- Tools for inspecting YARA bytecode☆21Updated 5 years ago
- IDA python plugin to scan binary with Yara rules☆178Updated last year
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆24Updated 3 years ago
- Capa analysis importer for Ghidra.☆63Updated 4 years ago