Pusty / Obfuscat
Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.
☆37Updated last year
Alternatives and similar repositories for Obfuscat:
Users that are interested in Obfuscat are comparing it to the libraries listed below
- IDA plugin to deobfuscate emotet CFF☆17Updated 2 years ago
- Implementation of sllvm obfuscator☆66Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…☆46Updated 3 years ago
- Playing with LLVM passes☆36Updated last year
- Disassembler for Zeus VM custom instruction set☆27Updated last year
- Custom instruction length for hex-rays☆18Updated 2 months ago
- Easy-to-use Android library for tampering detection, with a sample app included☆51Updated this week
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 8 months ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- ☆25Updated 4 months ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Updated 3 years ago
- PEIM (UEFI) bootkit targeting OVMF (EDK2)☆34Updated last year
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- ☆28Updated 2 years ago
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆40Updated 2 months ago
- A driver to implement IOCTL hooking☆24Updated 3 years ago
- ☆23Updated last month
- devirtualization vmprotect☆62Updated 2 years ago
- ☆30Updated 2 weeks ago
- Simplifier vmp ultra☆15Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- EDR PoC WIP LLC☆11Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆70Updated last year
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆35Updated last year
- Triton based symbolic emulator☆16Updated 2 years ago
- A Windows API hooking library !☆31Updated 2 years ago
- AndroidDriveSignity is a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loa…☆63Updated last year
- ☆18Updated 5 months ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year