VoidSec / ida-helpers

Related projects ⓘ

Alternatives and complementary repositories for ida-helpers

• Broihon / SetDebugPrivilege
  ☆11Updated 3 years ago
• sterrasec / genpatch
  genpatch is IDA plugin that generates a python script for patching binary
  ☆31Updated 10 months ago
• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆13Updated 2 years ago
• ElvisBlue / emotet-deobfuscator
  IDA plugin to deobfuscate emotet CFF
  ☆13Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆17Updated 5 years ago
• allthingsida / idax
  idax: IDASDK extension libraries
  ☆17Updated 3 months ago
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆20Updated 6 years ago
• michaeljgoodman / Dumpulator-IDA
  Currently proof-of-concept
  ☆16Updated 2 years ago
• namazso / PawnIO
  Input-output driver
  ☆23Updated last year
• cocomelonc / 2022-01-24-malware-injection-15
  Process injection via KernelCallbackTable
  ☆14Updated 2 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆18Updated 3 years ago
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆19Updated 3 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆18Updated last month
• wwh1004 / MethodsMap
  A tool to show the method info at runtime
  ☆12Updated 5 years ago
• Inndy / idapython-cheatsheet
  scripting IDA like a Pro
  ☆22Updated 4 years ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆19Updated last year
• ergrelet / themida-unmutate-bn
  A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆21Updated 3 months ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 6 years ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆10Updated 9 months ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆17Updated 5 months ago
• NtRaiseHardError / Windows-Binary-Exploitation
  Resources from my journey into Windows binary exploitation
  ☆22Updated 5 years ago
• vmallet / ida-describekey
  IDA plugin to quickly learn what a shortcut does
  ☆9Updated 2 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆14Updated last year
• buzzer-re / Gancho
  A tiny Windows hook library for x86/x64
  ☆11Updated last year
• XaFF-XaFF / WinREPL
  WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.
  ☆10Updated 2 years ago