DenuvoSoftwareSolutions / GAMBA
Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA
☆125Updated last year
Alternatives and similar repositories for GAMBA:
Users that are interested in GAMBA are comparing it to the libraries listed below
- Port of MBA Solver SiMBA to C/C++☆77Updated 2 weeks ago
- MODeflattener deobfuscates control flow flattened functions obfuscated by OLLVM using Miasm.☆173Updated 3 years ago
- Assets for the "Tickling VMProtect with LLVM" blog post.☆150Updated 3 years ago
- Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions☆154Updated last year
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆116Updated 7 months ago
- IDA Pro plugin that displays all comments in a database☆65Updated 7 months ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆123Updated 2 months ago
- Hex-Rays OLLVM Deobfuscator and MicroCode Explorer☆138Updated 4 years ago
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆64Updated 4 months ago
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆63Updated 3 years ago
- Small programs and scripts that do not require their own repositories☆136Updated 3 years ago
- MBA deobfuscator via Program Synthesis and Term Rewriting☆49Updated last year
- An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining☆207Updated 3 months ago
- ☆115Updated 7 months ago
- A port of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to Python☆166Updated 2 years ago
- Find crypto constants IDA 7.x plugin☆116Updated 2 years ago
- PoC for a taint based attack on VMProtect☆108Updated 5 years ago
- Hex-Rays Block Highlighter plugin for IDA to highlight if/for/do/switch/while blocks☆61Updated 2 years ago
- Library for Capstone instruction to LLVM IR translation☆45Updated 7 years ago
- Non-linear Mixed Boolean-Arithmetic Expressions☆62Updated 11 months ago
- VM devirtualization PoC based on AsmJit and llvm☆113Updated 3 years ago
- D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.☆49Updated 3 years ago
- Toy LLVM obfuscator pass☆72Updated 3 years ago
- Greybox Synthesizer geared for deobfuscation of assembly instructions.☆150Updated last month
- an obfuscator based on LLVM which can obfuscate the program execution trajectory☆91Updated 4 years ago
- Deobfuscate OLLVM Bogus Control Flow via angr☆63Updated 3 years ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆87Updated 2 weeks ago
- LLVM based "VM" obfuscator☆139Updated 3 years ago
- Control-flow-flattening and string deobfuscator☆148Updated 3 years ago
- VMProtectTest☆35Updated 2 years ago