Alternatives and similar repositories for Anti-Disassembly

Users that are interested in Anti-Disassembly are comparing it to the libraries listed below

• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 7 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• NtRaiseHardError / Windows-Binary-Exploitation
  Resources from my journey into Windows binary exploitation
  ☆22Updated 6 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆35Updated 7 years ago
• NtRaiseHardError / NoREpls
  NoREpls - Application designed for the purposes of reverse engineering.
  ☆11Updated 6 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆29Updated 8 years ago
• zodiacon / AccessMask
  ☆20Updated 5 years ago
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 7 years ago
• scmanjarrez / pymetangine
  A python metamorphic engine for PE/PE+ files.
  ☆15Updated 2 years ago
• sciencemanx / x86-analysis
  Static analysis tools for x86 assembly
  ☆13Updated 8 years ago
• roadwy / Record
  ☆16Updated 11 years ago
• Jb05s / Exploit-Dev-C
  ☆22Updated 4 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆38Updated 8 years ago
• hasherezade / beardisasm
  A wrapper for capstone for bearparser
  ☆14Updated 2 years ago
• michaeljgoodman / Dumpulator-IDA
  Currently proof-of-concept
  ☆17Updated 3 years ago
• John-Yu / Simple_PE_packer
  The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…
  ☆19Updated 7 years ago
• DoubleLabyrinth / ProcessHollowing
  ☆36Updated 6 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆17Updated 6 years ago
• secrary / findLoop
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆26Updated 6 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 3 years ago
• pedro-javierf / Twicexploit
  Proof of concept open source implementation of an UAC bypass exploit, based in 2 windows failures.
  ☆12Updated 5 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆22Updated 5 years ago
• HFaeiro / Remote-Admin-Tool
  Simple remote administration tool. Written in c++ and MASM.
  ☆18Updated 7 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22Updated 8 years ago
• own2pwn / r0ak
  r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
  ☆26Updated 6 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆20Updated 6 years ago
• JaanusKaapPublic / Slides
  Will try to put here slides from now on when I give a talk
  ☆24Updated 3 years ago
• deroko / activationcontexthook
  ☆34Updated 7 years ago