ExpLife0011 / anti-anti-vm-detection-dll-1Links
☆29Updated 7 years ago
Alternatives and similar repositories for anti-anti-vm-detection-dll-1
Users that are interested in anti-anti-vm-detection-dll-1 are comparing it to the libraries listed below
Sorting:
- Parsers for custom malware formats ("Funky malware formats")☆98Updated 4 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆78Updated 10 years ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆99Updated 4 years ago
- Driver Initial Reconnaissance Tool☆126Updated 6 years ago
- ☆117Updated 13 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆124Updated 5 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 8 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆42Updated 6 years ago
- ☆73Updated 2 years ago
- ☆35Updated 2 years ago
- Automatically rebuild Import Address Table for dumped PE file. With python bindings!☆121Updated 7 years ago
- A simple API monitor for Windbg☆65Updated 8 years ago
- IDA script for vmprotect Windows Api address decoder☆53Updated 4 years ago
- Official VirusTotal plugin for IDA Pro☆177Updated this week
- Hidden kernel mode code execution for bypassing modern anti-rootkits.☆84Updated 15 years ago
- PoC designed to evade userland-hooking anti-virus.☆90Updated 6 years ago
- Enumerate Windows Defender threat families and dump their names according category☆93Updated 6 years ago
- ☆23Updated 4 years ago
- The Minimalistic x86/x64 API Hooking Library for Windows☆34Updated 7 years ago
- Go Lang Portable Executable Parser☆39Updated 4 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆58Updated 7 years ago
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆111Updated 7 years ago
- Load a Windows Kernel Driver☆94Updated 8 years ago
- ☆12Updated 4 years ago
- PoC for detecting and dumping process hollowing code injection☆52Updated 7 years ago
- IDA python plugin to scan binary with Yara rules☆180Updated 2 years ago
- Crackmes Keygenmes Serialmes y más☆43Updated 3 years ago
- ☆109Updated 6 years ago
- My collection of unpackers for malware packers/crypters☆28Updated 8 years ago
- Write-ups for FireEye's FLARE-On challenges☆25Updated 6 years ago