UNC1739 / CodeObfs

Related projects ⓘ

Alternatives and complementary repositories for CodeObfs

• fvrmatteo / oracle-synthesis-meets-equality-saturation
  ☆19Updated 4 months ago
• tum-i4 / dta-vs-osc
  Dynamic Taint Analysis versus Obfuscated Self-Checking
  ☆16Updated 3 years ago
• romangol / Armariries
  An obfuscator bases on llvm for multiple language and platform
  ☆19Updated 7 years ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated last year
• adutilleul / tigress-deobfuscation
  A documentation of several Tigress obfuscation passes and an attempt to simplify Mixed Boolean-Arithmetic (MBA) expressions.
  ☆21Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆22Updated last year
• MoePus / SPiCall
  Yet another windows syscall library
  ☆16Updated 4 years ago
• yellowbyte / zero-footprint-opaque-predicates
  obfuscation that aims to not stand out
  ☆20Updated 2 years ago
• Yuerino / obfuscator-pass
  A collection of LLVM passes for obfuscating
  ☆30Updated last year
• archercreat / llvm_stuff
  LLVM based devirtualization PoC’s.
  ☆20Updated 2 years ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆17Updated last year
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆22Updated 7 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Updated last year
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆47Updated 3 years ago
• can1357 / llvm-patches
  Personal curation of Clang/LLVM patches.
  ☆13Updated 3 years ago
• CZashi / win-reverse
  ntos shit
  ☆21Updated 8 months ago
• ioncodes / pooldump
  ☆29Updated 2 years ago
• mrexodia / cxx-common-cmake
  Experiment building lifting-bits dependencies with pure CMake. Migrated to:
  ☆19Updated last month
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆44Updated 4 years ago
• bilka00 / vmprotect_import_fixer
  Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)
  ☆16Updated 2 years ago
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆19Updated 2 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆20Updated 2 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆33Updated 4 months ago
• alfarom256 / MinifilterResearch
  ☆16Updated 2 years ago
• OALabs / ZVM
  Disassembler for Zeus VM custom instruction set
  ☆23Updated 9 months ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆23Updated 2 years ago
• Midi12 / whse
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆19Updated 2 years ago
• ek0 / hxemu
  Triton based symbolic emulator
  ☆16Updated 2 years ago