DidierStevens / AnalyzePESigLinks
☆19Updated 2 years ago
Alternatives and similar repositories for AnalyzePESig
Users that are interested in AnalyzePESig are comparing it to the libraries listed below
Sorting:
- A simple API monitor for Windbg☆65Updated 8 years ago
- Scripts to prepare Windows system for debugging.☆31Updated 5 years ago
- Diff tool for comparing symbols in PDB files☆84Updated 5 years ago
- Adding exceptions to Microsoft's Control Flow Guard (CFG)☆57Updated 9 years ago
- ☆35Updated 4 years ago
- Demos for Presentation on Windows Runtime Security☆70Updated 7 years ago
- ☆34Updated 8 years ago
- Plugin for x64dbg to generate Yara rules from function basic blocks.☆37Updated 8 years ago
- ☆23Updated 5 years ago
- ☆28Updated 5 years ago
- [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;☆76Updated 6 years ago
- IDAPython scripts☆15Updated 8 years ago
- Use WinDBG to trace the Windows API calls of any Portable Executable file☆32Updated 8 years ago
- ☆16Updated 8 years ago
- An IDA plugin to deal with Event Tracing for Windows (ETW)☆55Updated 3 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆18Updated 9 years ago
- Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.☆25Updated last year
- Windows API listing in JSON format - generated from SDK headers + SDK API documentation☆67Updated 5 years ago
- CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…☆35Updated 9 years ago
- My commands and scripts extending WinDbg☆44Updated 10 months ago
- A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.☆33Updated last year
- View handles and object for each object type☆64Updated 6 years ago
- Enumerate user mode shared memory mappings on Windows.☆126Updated 4 years ago
- APIInfo Plugin (x86) - A Plugin For x64dbg☆50Updated 7 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆124Updated 5 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆63Updated last year
- A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.☆54Updated 6 years ago
- A set of small utilities, helpers for PIN tracers☆36Updated 4 months ago
- collection of links related to using and improving windbg☆20Updated 7 years ago
- This contains Helpful PYKD (Python Extension for Windbg) scripts☆49Updated 10 years ago