Necrosys / zerowine-tryoutLinks
Zero Wine Tryouts: An open source malware analysis tool
☆17Updated 9 years ago
Alternatives and similar repositories for zerowine-tryout
Users that are interested in zerowine-tryout are comparing it to the libraries listed below
Sorting:
- findLoop - find possible encryption/decryption or compression/decompression code☆26Updated 6 years ago
- My manual analysis of malware families☆13Updated 8 years ago
- Use WinDBG to trace the Windows API calls of any Portable Executable file☆31Updated 8 years ago
- My conference presentations and publications☆26Updated 3 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 8 years ago
- ☆34Updated 4 years ago
- ☆24Updated 6 years ago
- Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.☆66Updated 4 years ago
- x86_64 linux rootkit using debug registers☆53Updated 3 years ago
- My collection of unpackers for malware packers/crypters☆28Updated 8 years ago
- A windbg extension for ASLR/DEP/SafeSEH check☆27Updated 7 years ago
- PCAUSA Rawether for Windows Local Privilege Escalation☆39Updated 8 years ago
- A collection of anti disassembly techniques☆19Updated 8 years ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆45Updated 7 years ago
- ☆50Updated 8 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Updated 12 years ago
- Solutions to HackSysExtremeVulnerableDriver challenges though my following of @FuzzySecurity's tutorials plus futher explanations where n…☆22Updated 8 years ago
- Extract OLEv1 objects from RTF files by instrumenting Word☆51Updated 5 years ago
- Rekall Memory Forensic Framework☆33Updated 6 years ago
- 🐧 A simple kernel-level rootkit☆21Updated 9 years ago
- ☆28Updated 5 years ago
- Plugin for x64dbg to generate Yara rules from function basic blocks.☆37Updated 8 years ago
- User-mode part of Zerokit platform☆22Updated 6 years ago
- Linux kernel rootkit to hide certain files and processes.☆36Updated 11 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆124Updated 5 years ago
- Miscellanous scripts used for malware analysis☆23Updated 7 years ago
- IOCTL-Flooder is a verbose tool designed to help with Windows driver fuzzing by brute forcing IOCTLs on loaded drivers. GetLastError is u…☆11Updated 7 years ago
- APIInfo Plugin (x86) - A Plugin For x64dbg☆49Updated 7 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 7 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Updated 10 years ago