Cisco-Talos / dotNET_WinDBG

Related projects: ⓘ

• helpsystems / GDIObjDump
  ☆33Updated 9 years ago
• subTee / DriveCrypt
  ☆33Updated this week
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆25Updated 5 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆48Updated 8 years ago
• williamshowalter / hdroot-bootkit-analysis
  Supporting Files on my analysis of the malware designated hdroot.
  ☆59Updated 7 years ago
• jjo-sec / idataco
  IDATACO IDA Pro Plugin
  ☆47Updated 8 years ago
• deroko / payloadrestrictions
  ☆32Updated 7 years ago
• sam-b / windows_syscalls_dumper
  A dirty IDAPython script to dump windows system call number/name pairs as JSON
  ☆37Updated 7 years ago
• roastbeef / compileShellCode
  ☆44Updated this week
• nihilus / idascope
  ☆26Updated 10 years ago
• bfosterjr / ufgraph
  ☆39Updated 3 years ago
• zynamics / msdn-plugin-ida
  Imports MSDN documentation into IDA Pro
  ☆51Updated 12 years ago
• RISCYBusiness / Jadoube
  ☆22Updated 7 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆23Updated 7 years ago
• vallejocc / PoC-Inject-Data-WM_COPYDATA
  A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
  ☆49Updated 6 years ago
• joxeankoret / maltindex
  Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns
  ☆65Updated 7 years ago
• AdiKo / RPCSniffer
  RPCSniffer sniffs WINDOWS RPC messages in a given RPC server process.
  ☆64Updated 10 years ago
• mandiant / rvmi-qemu
  QEMU with rVMI extensions
  ☆25Updated 7 years ago
• Cn33liz / HSEVD-ArbitraryOverwriteGDI
  ☆48Updated this week
• r41p41 / snippets
  fragments of dirty, and quick code. possible error checking or none.
  ☆25Updated 7 years ago
• kukfa / bindbg
  Binary Ninja plugin that syncs WinDbg to Binary Ninja
  ☆47Updated 6 years ago
• NorthBit / bulletin-scraper
  Download all of Microsoft's security updates and symbols
  ☆42Updated 8 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆73Updated 9 years ago
• rwfpl / rewolf-gogogadget
  kernel exploitation helper class
  ☆75Updated 7 years ago
• tylerha97 / IoTAnalysis
  ☆26Updated this week
• necst / crave
  Framework to automatically test and explore the capabilities of generic AV engines
  ☆70Updated 5 years ago
• mandiant / remote_lookup
  Resolves DLL API entrypoints for a process w/ remote query capabilities.
  ☆55Updated 7 years ago
• conix-security / machoke
  ☆51Updated 6 years ago
• Fare9 / ANBU
  ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
  ☆88Updated 5 years ago
• dilagit / yaragui
  ☆64Updated this week