Capability extraction from Time Travel Debugging Traces with C++ Implementation of CAPA that supports code scanning
☆31Sep 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for ttd-capa-cpp
Users that are interested in ttd-capa-cpp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LLVM 21 pass plugin for A²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.☆27Oct 10, 2026Updated last week
- ☆24Sep 12, 2026Updated last month
- PE/ELF x86/x64 CFG extractor☆61Jul 2, 2026Updated 3 months ago
- A lexer and parser for Sleep☆21Feb 20, 2026Updated 7 months ago
- Verified IDA is a harness for model-led reverse engineering.☆44Sep 14, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- modern gdbstub/rsp server library☆18Feb 11, 2026Updated 8 months ago
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated last month
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Emulation framework for Android & iOS native libraries☆23Sep 10, 2026Updated last month
- ☆19May 30, 2025Updated last year
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated 3 weeks ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆136Oct 7, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆59Updated this week
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆14May 8, 2026Updated 5 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- ☆26Oct 11, 2026Updated last week
- ☆82Jan 1, 2026Updated 9 months ago
- Process dumper wrote in rust.☆14Sep 16, 2024Updated 2 years ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated last week
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- Drift Corpus : repository of Windows Kernel patch diffs.☆28Jul 15, 2026Updated 3 months ago
- Private, searchable screen history for macOS.☆25Updated this week
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.☆49Aug 12, 2026Updated 2 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆27Apr 24, 2022Updated 4 years ago
- [Fork] Hardening code obfuscation against automated attacks☆20Jul 1, 2026Updated 3 months ago
- Python bindings for the Icicle emulator.☆44Nov 6, 2025Updated 11 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆171Updated this week
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 8 years ago
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆113Updated this week
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆33Aug 8, 2026Updated 2 months ago
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 6 months ago
- An Android cloud-phone runtime on Apple Silicon macOS and Linux ARM hosts☆145Updated this week
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆118Sep 25, 2026Updated 3 weeks ago