FFRI / PackerDetectionToolEvaluation
Evaluation of packer type estimation/detection tools
☆12Updated 4 years ago
Alternatives and similar repositories for PackerDetectionToolEvaluation:
Users that are interested in PackerDetectionToolEvaluation are comparing it to the libraries listed below
- UnpacMe IDA Byte Search☆28Updated last year
- Dataset of packed PE samples☆33Updated 8 months ago
- Các IDC và IDAPython scripts nhỏ, có ích trong quá trình dùng IDA☆10Updated last year
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- IDA plugin to deobfuscate emotet CFF☆17Updated 2 years ago
- VinCSS Reverse Engineering, Malware Analysing Tools & Ultilities☆27Updated 3 years ago
- Collection of source code for Polymorphic, Metamorphic, and Permutation Engines used in Malware☆26Updated 5 years ago
- ☆22Updated last year
- JITK - JIT Killer is hooker for clrjit☆29Updated 2 years ago
- Dataset of packed ELF samples☆19Updated 2 years ago
- Simple tool to check visual studio project files for Exec, PreBuildEvent and PostBuildEvent☆12Updated 4 years ago
- A tool to automatically defeat .NET crackmes based on string equality comparisons☆18Updated 3 years ago
- Deobfuscator for remove proxy calls methods☆24Updated 2 years ago
- ☆31Updated 2 years ago
- ☆28Updated 2 years ago
- ☆25Updated 5 months ago
- Malware AV evasion via disable Windows Defender (Registry). C++☆35Updated 2 years ago
- CTF writeups☆35Updated 4 months ago
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆24Updated 3 years ago
- ☆22Updated 4 years ago
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Updated 2 years ago
- Easy-to-use IDA plugin for code emulation☆30Updated 10 months ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆9Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆70Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆114Updated last year
- Simple String Cleaner for .NET Reactor 6.7.0.0 using Invoke☆9Updated 3 years ago
- JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.☆52Updated 4 years ago
- ☆28Updated 4 years ago
- Tools developed by the Zscaler ThreatLabz Threat Intelligence team☆72Updated 4 months ago