DidierStevens / AnalyzePESig

Related projects ⓘ

Alternatives and complementary repositories for AnalyzePESig

• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆26Updated 7 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• thalium / WinDbgFastObj
  ☆20Updated 3 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• OsandaMalith / ApiMon
  A simple API monitor for Windbg
  ☆62Updated 7 years ago
• RceNinja / Re-Scripts
  ☆33Updated 3 years ago
• AndreyBazhan / DbgPkg
  Scripts to prepare Windows system for debugging.
  ☆30Updated 3 years ago
• shamrockhoax / mazedecoder
  ☆28Updated 4 years ago
• lowleveldesign / lldext
  My commands and scripts extending WinDbg
  ☆28Updated 2 months ago
• hasherezade / tag_converter
  ☆21Updated 3 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆34Updated 4 years ago
• mrfearless / APIInfo-Plugin-x86
  APIInfo Plugin (x86) - A Plugin For x64dbg
  ☆49Updated 6 years ago
• tyranid / WindowsRuntimeSecurityDemos
  Demos for Presentation on Windows Runtime Security
  ☆70Updated 6 years ago
• 0xAlexei / Publications
  My conference presentations and publications
  ☆26Updated 2 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆59Updated 8 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• rcx / ida-scripts
  Collection of IDA Pro/Hex-Rays configs, scripts, and plugins
  ☆22Updated 4 years ago
• deroko / activationcontext
  ☆14Updated 6 years ago
• panoramixor / GDIObjDump
  ☆28Updated 9 years ago
• d00rt / easy_way_nymaim
  An IDA Pro script for creating a clearer idb for nymaim malware
  ☆10Updated 6 years ago
• AaLl86 / retroware
  This repository contains some tools that I have written in the past
  ☆26Updated last year
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆50Updated 2 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆36Updated 6 years ago
• avast / authenticode-parser
  Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.
  ☆16Updated 8 months ago
• hasherezade / beardisasm
  A wrapper for capstone for bearparser
  ☆13Updated last year
• danielplohmann / empty_msvc
  A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.
  ☆30Updated 5 months ago
• nccgroup / ICPin
  An Integrity-Check Monitoring Pintool
  ☆56Updated 4 years ago
• dro / uac-launchinf-poc
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆34Updated 6 years ago