K2 / Reloc

Transform dumped executable memory back into an identical match from disk. Use network or local database to de-locate relocated binaries and ensure a cryptographically secure hash match for code running on your legacy systems. A client tool that downloads relocation data for various PE files. This ensures when extracting data from memory dump…

☆11

Related projects ⓘ

Alternatives and complementary repositories for Reloc

int0 / ltmdm64_poc
☆28Updated 7 years ago
iphelix / ida-pomidor
IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing…
☆35Updated 10 years ago
paullj1 / W-SWFIT
x64 Windows Software Fault Injection Tool
☆17Updated 6 years ago
TheEnergyStory / malware_analysis
Malware analyses and helpful scripts
☆29Updated 2 years ago
SummitRoute / srepp_client
Summit Route End Point Protection - Client code
☆17Updated 8 years ago
carlosgprado / Python-to-the-rescue
Misc Python tools or PoCs. Mainly focused in helping RE, fuzzing
☆20Updated 12 years ago
majdi / deadlands
🐧 A simple kernel-level rootkit
☆19Updated 8 years ago
0x00ach / idadiff
IDAPython script in order to auto-rename subs
☆20Updated 7 years ago
BinSigma / BinClone
☆27Updated 2 years ago
tandasat / CVE-2014-0816
CVE-2014-0816
☆24Updated 8 years ago
endeav0r / bt
binary toolkit
☆12Updated 7 years ago
zodiacon / InterceptionDemo
Sample showing the use of CoGetInterceptor
☆21Updated 3 years ago
sporst / IDA-Pro-plugins
Collection of IDA Pro plugins I wrote over the years
☆23Updated 14 years ago
tandasat / CheckSDL
A tool evaluates security configurations of a given PE based on SDL without source code
☆12Updated 10 years ago
wirepair / Ninko
PIN Tool for monitoring calls and writes from obfuscated code.
☆26Updated 5 years ago
tandasat / cs_driver
A sample project for using Capstone from a driver in Visual Studio 2015
☆33Updated 8 years ago
adrianherrera / reil-parser
Haskell parser for the REIL intermediate language (currently a work-in-progress)
☆11Updated 6 years ago
NorthBit / bulletin-scraper
Download all of Microsoft's security updates and symbols
☆42Updated 8 years ago
wirepair / IDAPinLogger
Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
☆41Updated 11 years ago
4B5F5F4B / PoCs
☆26Updated 8 years ago
jbremer / godware
Short for Good Ware; it assists Reverse Engineers in the analysis of Windows Malware.
☆24Updated 12 years ago
sam-b / windows_syscalls_dumper
A dirty IDAPython script to dump windows system call number/name pairs as JSON
☆37Updated 7 years ago
egoktas / PACKMAN
Packed Malware Analyzer (PACKMAN)
☆12Updated 8 years ago