CKCat / d810Links
fork 自 https://gitlab.com/eshard/d810 添加了参考文章、测试样本,作为备份。
☆16Updated 4 years ago
Alternatives and similar repositories for d810
Users that are interested in d810 are comparing it to the libraries listed below
Sorting:
- Taint Analysis Engine and Trace Exploration : Overcome Obfuscation☆48Updated last month
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆145Updated last year
- ollvm de-obfuscator☆61Updated 4 years ago
- Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.☆88Updated 7 months ago
- Hex-Rays OLLVM Deobfuscator and MicroCode Explorer☆173Updated 5 years ago
- D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.☆60Updated 4 years ago
- LLVM based "VM" obfuscator☆147Updated 4 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆76Updated last year
- break ollvm.☆109Updated 6 months ago
- deflat plugins for ida pro☆41Updated 2 years ago
- Deobfuscate OLLVM Bogus Control Flow via angr☆67Updated 3 years ago
- tprt ollvm 反混淆 修改 binja il☆48Updated last year
- ☆33Updated 4 years ago
- A deobfuscation plugin for IDA☆65Updated 3 years ago
- silent syscall hooking without modifying sys_call_table/handlers via patching exception handler☆147Updated last year
- ☆50Updated 4 months ago
- This is a IDA plugin that integrates several modules of miasm☆22Updated 5 years ago
- Find crypto constants IDA 7.x plugin☆120Updated 2 years ago
- deobfuse compiler☆213Updated 4 years ago
- 内核硬件调试器模块,rootkit操作 dump☆34Updated 3 years ago
- Injecting into SELinux-protected system service processes under root on Android.☆47Updated last year
- ☆55Updated 5 years ago
- a code virtualizer based on angr☆32Updated 2 years ago
- IDA Python3 Plugin to make your RE life easier. Trace execution and save code/memory for detailed exploration.☆32Updated last year
- MODeflattener deobfuscates control flow flattened functions obfuscated by OLLVM using Miasm.☆194Updated 4 years ago
- D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time …☆66Updated 3 weeks ago
- Toy LLVM obfuscator pass