CKCat / d810Links
fork 自 https://gitlab.com/eshard/d810 添加了参考文章、测试样本，作为备份。
☆16Updated 4 years ago
Alternatives and similar repositories for d810
Users that are interested in d810 are comparing it to the libraries listed below
Sorting:
- Taint Analysis Engine and Trace Exploration : Overcome Obfuscation☆52Updated 3 months ago
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆199Updated 2 years ago
- ollvm de-obfuscator☆63Updated 4 years ago
- silent syscall hooking without modifying sys_call_table/handlers via patching exception handler☆152Updated last year
- Hex-Rays OLLVM Deobfuscator and MicroCode Explorer☆180Updated 5 years ago
- D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.☆64Updated 4 years ago
- IDA Python3 Plugin to make your RE life easier. Trace execution and save code/memory for detailed exploration.☆32Updated last year
- Deobfuscate OLLVM Bogus Control Flow via angr☆68Updated 4 years ago
- deflat plugins for ida pro☆45Updated 2 years ago
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆126Updated 2 months ago
- ☆34Updated 4 years ago
- A deobfuscation plugin for IDA☆66Updated 3 years ago
- Toy LLVM obfuscator pass☆76Updated 4 years ago
- LLVM based "VM" obfuscator☆152Updated 4 years ago
- tprt ollvm 反混淆 修改 binja il☆50Updated last year
- Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.☆90Updated 9 months ago
- break ollvm.☆115Updated 9 months ago
- ☆48Updated last year
- This is a IDA plugin that integrates several modules of miasm☆22Updated 5 years ago
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆66Updated 4 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆78Updated 2 years ago
- LLVM Obfuscation Pass☆24Updated last year
- My toy llvm pass☆139Updated 3 years ago
- A static devirtualizer for VMProtect x64 3.x. powered by VTIL.☆24Updated 7 months ago
- Find crypto constants IDA 7.x plugin☆122Updated 3 years ago
- Kernel mode to user mode so injection☆91Updated 5 years ago
- ☆56Updated 5 years ago
- Library for Capstone instruction to LLVM IR translation☆47Updated 8 years ago
- MODeflattener deobfuscates control flow flattened functions obfuscated by OLLVM using Miasm.☆203Updated 4 years ago
- ☆55Updated 7 months ago