NaC-L / Mergen
Deobfuscation via optimization with usage of LLVM IR and parsing assembly.
☆362Updated last week
Related projects ⓘ
Alternatives and complementary repositories for Mergen
- Native code virtualizer for x64 binaries☆394Updated this week
- VMProtect 2.x-3.x x64 Import Deobfuscator☆259Updated 10 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆222Updated 3 months ago
- Debugger Anti-Detection Benchmark☆290Updated 11 months ago
- ☆383Updated last year
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆247Updated 2 weeks ago
- Themida 3.x unpacking, unwrapping and devirtualization(future)☆160Updated last year
- IDA Class Informer plugin for IDA 8.x and 9.x☆180Updated last month
- IDA Pro plugin to make bitfield accesses easier to grep☆228Updated 7 months ago
- an ida plugin used to decompile vmp☆299Updated 4 months ago
- Signature maker plugin for IDA 8.x and 9.x☆310Updated last month
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆326Updated 2 weeks ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆303Updated 2 years ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆543Updated last month
- A VMP to VTIL lifter.☆422Updated 3 years ago
- Single-header, minimalistic, cross-platform hook library written in pure C☆288Updated last month
- ☆435Updated last year
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆265Updated last year
- Simple Intel VT-x hypervisor☆262Updated 10 months ago
- compile-time control flow obfuscation using mba☆174Updated last year
- [WIP] A forked version of LLVM-18 that prioritizes MSVC compatibility. This version is tailored for Windows users.☆216Updated last month
- VMProtect source code leak (incomplete, some important files are still missing, but you can still see it as a reference on how to virtual…☆159Updated 4 months ago
- IDA Pro plugin to manage classes☆276Updated last month
- FindFunc is an IDA Pro plugin to find code functions that contain a certain assembly or byte pattern, reference a certain name or string,…☆305Updated last month
- VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.☆323Updated 2 years ago
- ☆180Updated last year
- Memory hacking library powered by AMD SVM☆293Updated last year