Quickly debug shellcode extracted during malware analysis
☆641May 23, 2023Updated 3 years ago
Alternatives and similar repositories for BlobRunner
Users that are interested in BlobRunner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel and user mode emulation.☆2,097Updated this week
- A Pin Tool for tracing API calls etc☆1,713Jun 2, 2026Updated 5 months ago
- IDA python plugin to scan binary with Yara rules☆184Jan 30, 2024Updated 2 years ago
- HashDB API hash lookup plugin for IDA Pro☆366Oct 26, 2026Updated last week
- Dynamic unpacker based on PE-sieve☆844Apr 14, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,936Jun 6, 2026Updated 4 months ago
- Converts PE into a shellcode☆2,801Aug 30, 2025Updated last year
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆7,173Jul 1, 2026Updated 4 months ago
- Assortment of hashing algorithms used in malware☆413Sep 9, 2026Updated last month
- Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode☆2,555Nov 15, 2023Updated 2 years ago
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,428Jun 6, 2026Updated 4 months ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆4,207Updated this week
- IFL - Interactive Functions List (plugin for IDA Pro)☆502Jun 25, 2026Updated 4 months ago
- Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping…☆586Feb 23, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- IDApython Scripts for Analyzing Golang Binaries☆675Aug 8, 2024Updated 2 years ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆591May 5, 2024Updated 2 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆77Oct 29, 2014Updated 12 years ago
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆893Feb 2, 2024Updated 2 years ago
- ☆1,133Dec 19, 2023Updated 2 years ago
- AV/EDR evasion via direct system calls.☆2,028Jan 1, 2023Updated 3 years ago
- A Binary Genetic Traits Lexer Framework☆606Jul 1, 2026Updated 4 months ago
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 5 months ago
- ☆956Aug 14, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆4,744Jul 8, 2025Updated last year
- IDA Pro utilities from FLARE team☆2,450Oct 29, 2024Updated 2 years ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,221Updated this week
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆446Oct 26, 2022Updated 4 years ago
- HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux☆3,120Feb 24, 2025Updated last year
- Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loadi…☆3,384Sep 3, 2022Updated 4 years ago
- A community driven collection of IDA FLIRT signature files☆1,365Sep 3, 2021Updated 5 years ago
- AV/EDR evasion via direct system calls.☆1,833Sep 3, 2022Updated 4 years ago
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆761Nov 16, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A static analyzer for PE executables.☆1,154Aug 29, 2026Updated 2 months ago
- Official x64dbg plugin for IDA Pro.☆579Sep 24, 2024Updated 2 years ago
- A Coverage Explorer for Reverse Engineers☆2,609Feb 14, 2026Updated 8 months ago
- SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…☆1,299Aug 27, 2023Updated 3 years ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,293Updated this week
- A VBA parser and emulation engine to analyze malicious macros.☆1,133Jul 10, 2024Updated 2 years ago
- Frida.re based RunPE (and MapViewOfSection) extraction tool☆115Mar 2, 2017Updated 9 years ago