ElvisBlue / emotet-deobfuscator
IDA plugin to deobfuscate emotet CFF
☆17Updated 2 years ago
Alternatives and similar repositories for emotet-deobfuscator:
Users that are interested in emotet-deobfuscator are comparing it to the libraries listed below
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- Simplifier vmp ultra☆15Updated last year
- ☆25Updated 4 months ago
- Currently proof-of-concept☆16Updated 3 years ago
- devirtualization vmprotect☆62Updated 2 years ago
- A driver to implement IOCTL hooking☆24Updated 2 years ago
- Different tools for Microsoft Hyper-V researching☆48Updated 9 months ago
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆34Updated 3 years ago
- Process Creation, Image Load and Thread Creation Notification☆11Updated last year
- Injects position-dependent code into a code cave in an executable file, and applies relocations.☆22Updated last year
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆59Updated 6 months ago
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆26Updated 7 months ago
- Custom instruction length for hex-rays☆18Updated 2 months ago
- Code Integrity Violation Spotter☆16Updated 9 months ago
- Simple x64dbg plugin to save a full memory dump☆50Updated 2 years ago
- Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.☆37Updated last year
- ☆19Updated 7 years ago
- genpatch is IDA plugin that generates a python script for patching binary☆32Updated last year
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆32Updated last year
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Updated 2 years ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆26Updated 3 years ago
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆19Updated 5 months ago
- ☆15Updated 2 years ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated last year
- UnpacMe IDA Byte Search☆28Updated last year