K2 / EhTrace
ATrace is a tool for tracing execution of binaries on Windows.
☆235Updated 8 years ago
Related projects ⓘ
Alternatives and complementary repositories for EhTrace
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆148Updated 7 years ago
- C++ application that uses memory and code hooks to detect packers☆268Updated 6 years ago
- capstone based disassembler for extracting to binnavi☆226Updated 8 years ago
- ☆91Updated 8 years ago
- A Tool to Unpack Self-Modifying Code using DynamoRIO☆141Updated 7 years ago
- Semantic Binary Code Analysis Framework☆124Updated 9 years ago
- Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )☆132Updated 8 years ago
- Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll☆92Updated 8 years ago
- map file generator for intel x86 binary based on flirt signature☆83Updated 8 years ago
- An open source, multi-architecture ROP compiler written in python☆160Updated 7 years ago
- I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016☆159Updated 7 years ago
- Small tool for generating ropchains using unicorn and z3☆197Updated 6 years ago
- hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols☆170Updated 6 years ago
- grap: define and match graph patterns within binaries☆169Updated 3 years ago
- ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.☆284Updated 8 years ago
- IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplot…☆135Updated 3 years ago
- This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.☆80Updated 9 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆422Updated 6 years ago
- Toolkit for enriching and speeding up static malware analysis☆165Updated 2 years ago
- REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.☆154Updated 5 years ago
- The CrowdDetox plugin for Hex-Rays automatically removes junk code and variables from Hex-Rays function decompilations.☆160Updated 3 years ago
- PyAna - Analyzing the Windows shellcode☆247Updated 8 years ago
- ☆110Updated 7 years ago
- Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators☆85Updated 7 years ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆136Updated 7 years ago
- PEDA-like debugger UI for WinDbg☆201Updated 7 months ago
- Automatically exported from code.google.com/p/ioctlfuzzer☆156Updated 9 years ago
- Python scripts for reverse engineering.☆181Updated 3 years ago