LLVMParty / TicklingVMProtectLinks
Assets for the "Tickling VMProtect with LLVM" blog post.
☆165Updated 4 years ago
Alternatives and similar repositories for TicklingVMProtect
Users that are interested in TicklingVMProtect are comparing it to the libraries listed below
Sorting:
- Port of MBA Solver SiMBA to C/C++ (MBA deobfuscation in real world applications)☆106Updated 2 months ago
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆197Updated 2 years ago
- MODeflattener deobfuscates control flow flattened functions obfuscated by OLLVM using Miasm.☆202Updated 4 years ago
- Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions☆180Updated 2 years ago
- Non-linear Mixed Boolean-Arithmetic Expressions☆71Updated last year
- LLVM based "VM" obfuscator☆152Updated 4 years ago
- Greybox Synthesizer geared for deobfuscation of assembly instructions.☆165Updated 11 months ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆141Updated last year
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆80Updated last week
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆125Updated 2 months ago
- PoC for a taint based attack on VMProtect☆123Updated 6 years ago
- An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining☆223Updated last year
- Hex-Rays OLLVM Deobfuscator and MicroCode Explorer☆178Updated 5 years ago
- Control-flow-flattening and string deobfuscator☆160Updated 4 years ago
- Simple CMake files for the IDASDK☆136Updated last month
- VM devirtualization PoC based on AsmJit and llvm☆123Updated 4 years ago
- IDA Pro plugin that displays all comments in a database☆74Updated last month
- IDA script to parse RTTI information in executable.☆163Updated 2 years ago
- ☆93Updated 5 years ago
- Small programs and scripts that do not require their own repositories☆139Updated 3 years ago
- Tool that automates some useful structure routines in IDA PRO☆83Updated last year
- MBA-Blast is a tool for simplification of MBA expressions.☆70Updated 4 years ago
- Header only wrapper around Hex-Rays API in C++20.☆168Updated last year
- ☆120Updated last year
- An AVX Lifter for the Hex-Rays Decompiler