Washi1337 / ghidra-nativeaot
Helper scripts for analyzing NativeAOT compiled .NET binaries with Ghidra
☆63Updated last year
Alternatives and similar repositories for ghidra-nativeaot:
Users that are interested in ghidra-nativeaot are comparing it to the libraries listed below
- ☆23Updated last year
- Example JIT Hook for .NET FW/Core.☆51Updated 5 years ago
- JITK - JIT Killer is hooker for clrjit☆29Updated 2 years ago
- Transforms a .NET binary into a chain of meaningless-looking await expressions.☆68Updated last month
- Devirtualizer for VirtualGuard Protector using AsmResolver☆39Updated last year
- CTF writeups☆35Updated 3 months ago
- A modern and open source .NET obfuscation engine for everyone.☆22Updated 2 months ago
- Think APIMonitor, but for .NET binaries.☆54Updated last year
- Compile time string encryption with NativeAOT☆28Updated 2 years ago
- Simple tool that allows you to have multiple Just-In-Time debuggers at once.☆92Updated 2 months ago
- A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET☆45Updated 2 years ago
- Yet another CawkVM unpacker...☆76Updated last year
- Utility that tries to generate every single CIL opcode possible in a valid context.☆27Updated 2 years ago
- Dump .net assembly from a native loader which uses ClrCreateinstance☆54Updated 2 years ago
- Universal unpacker and fixer for a number of modded ConfuserEx protections☆104Updated 4 years ago
- A fast and lightweight .Net library for reading and writing .class files.☆36Updated last year
- Babel-Deobfuscator is an open-source deobfuscator for Babel Obfuscator.☆38Updated 4 years ago
- A console debugger using DbgX and Terminal.Gui☆29Updated 2 years ago
- devirtualization vmprotect☆62Updated last year
- .NET library for hooking and dumping Clr☆42Updated 8 months ago
- JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.☆50Updated 4 years ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆74Updated 6 months ago
- Control flow deobfuscation using Z3 and ILAst☆43Updated 7 years ago
- VM for crackmes, just for fun☆11Updated last year
- Bringing kernel driver to C# with NativeAOT (Surpassed by https://github.com/ZeroLP/WDK.NET)☆45Updated 2 years ago
- A dnSpy extension to add WebAssembly support☆44Updated 2 years ago
- A small virtualizer for .NET which works together with ConfuserEx☆63Updated 5 years ago
- HookDetector.NET is a .NET Library to detect hooks in API functions☆28Updated 4 years ago
- devirtualizer for memevm☆17Updated 4 years ago
- Lightweight PDB symbol parser and resolver☆24Updated 3 months ago