KiFilterFiberContext / microsoft-warbird
Reimplementation of Microsoft's Warbird obuscator
☆112Updated 7 months ago
Alternatives and similar repositories for microsoft-warbird:
Users that are interested in microsoft-warbird are comparing it to the libraries listed below
- Integration of Microsoft Warbird with the MSVC compiler☆93Updated last year
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆74Updated 6 months ago
- Research on obfuscated licensing APIs / CLIP service in the Windows kernel☆107Updated 2 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆125Updated 5 months ago
- Inlay hints for hex-rays☆41Updated 4 months ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 5 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆122Updated last month
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 7 months ago
- A C compiler targeting an artistically pleasing nightmare for reverse engineers☆95Updated 2 months ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆243Updated 2 years ago
- A devirtualization engine for Themida.☆95Updated 11 months ago
- Abusing exceptions for code execution.☆109Updated 2 years ago
- devirtualization vmprotect☆62Updated last year
- WinLicense key extraction via Intel PIN☆99Updated 10 months ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆56Updated last year
- Me fockin' pe protector☆44Updated 2 years ago
- Makes IDA (most versions) to crash upon opening it.☆82Updated 5 months ago
- 🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.☆90Updated 10 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- This IDA plugin extends the functionality of the assembly and hex view. With this plugin, you can conveniently decode/decrypt/alter data …☆76Updated last month
- ☆141Updated last year
- IDA's Lumina feature, reimplemented for Binary Ninja, with new error handeling!☆37Updated 2 months ago
- Symbolic Execution based on lifting amd64 to z3☆26Updated 7 months ago
- alternative smm driver for ryzen motherboards☆114Updated 4 months ago
- x86-64 virtualizing obfuscator written in Rust☆71Updated last year
- Easy-to-use IDA plugin for code emulation☆27Updated 9 months ago
- Report and exploit of CVE-2023-36427☆89Updated last year
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆86Updated 3 months ago
- x86-64 user mode emulation using Zydis☆44Updated last month