Alternatives and similar repositories for ida-helpers:

Users that are interested in ida-helpers are comparing it to the libraries listed below

• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• keowu / winsystemprogramming
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆9Updated 2 years ago
• d35ha / DumpPE
  Dump mapped PE files from memory to the disk
  ☆19Updated 5 years ago
• buzzer-re / Gancho
  A tiny Windows hook library for x86/x64
  ☆14Updated last year
• blaquee / APCHook
  hooking KiUserApcDispatcher
  ☆24Updated 7 years ago
• sterrasec / genpatch
  genpatch is IDA plugin that generates a python script for patching binary
  ☆32Updated last year
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated 8 months ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆19Updated last year
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆18Updated 4 months ago
• wyyqyl / HookIAT
  ☆14Updated 12 years ago
• cocomelonc / 2022-01-24-malware-injection-15
  Process injection via KernelCallbackTable
  ☆13Updated 3 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• OSRDrivers / deleteex
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Updated 7 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆19Updated 3 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆20Updated 3 years ago
• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆16Updated 5 years ago
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆17Updated last year
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆18Updated 7 years ago
• am0nsec / masm64
  Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.
  ☆16Updated 4 years ago
• Darkabode / 0lib
  Zerokit shared code
  ☆16Updated 5 years ago
• 0neb1n / CVE-2020-1349
  ☆11Updated 4 years ago
• michaeljgoodman / Dumpulator-IDA
  Currently proof-of-concept
  ☆16Updated 3 years ago
• zodiacon / AccessMask
  ☆18Updated 5 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 2 years ago
• rbmm / LIB
  ☆7Updated 3 weeks ago
• mq1n / ForceThreadSuspend
  Windows hidden thread suspend POC with code injection
  ☆12Updated 7 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆20Updated 5 years ago