Washi1337 / ghidra-nativeaot
Helper scripts for analyzing NativeAOT compiled .NET binaries with Ghidra
☆62Updated last year
Related projects ⓘ
Alternatives and complementary repositories for ghidra-nativeaot
- ☆21Updated last year
- Devirtualizer for VirtualGuard Protector using AsmResolver☆37Updated last year
- Transforms a .NET binary into a chain of meaningless-looking await expressions.☆61Updated 5 months ago
- Think APIMonitor, but for .NET binaries.☆53Updated last year
- Example JIT Hook for .NET FW/Core.☆49Updated 4 years ago
- A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET☆45Updated last year
- Bringing kernel driver to C# with NativeAOT (Surpassed by https://github.com/ZeroLP/WDK.NET)☆45Updated 2 years ago
- JITK - JIT Killer is hooker for clrjit☆29Updated last year
- A console debugger using DbgX and Terminal.Gui☆29Updated 2 years ago
- CTF writeups☆34Updated this week
- Universal unpacker and fixer for a number of modded ConfuserEx protections☆100Updated 4 years ago
- Dump .net assembly from a native loader which uses ClrCreateinstance☆53Updated 2 years ago
- A modern and open source .NET obfuscation engine for everyone.☆19Updated last month
- Yet another CawkVM unpacker...☆74Updated last year
- .NET library for hooking and dumping Clr☆42Updated 5 months ago
- Lightweight PDB symbol parser and resolver☆24Updated 3 weeks ago
- AMx64 is a simulated 64-bit environment that can interpret nasm-like asm code. It allows a usage of different 64-bit registers and 64-bit…☆23Updated 10 months ago
- JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.☆50Updated 3 years ago
- A small virtualizer for .NET which works together with ConfuserEx☆62Updated 5 years ago
- Utility that tries to generate every single CIL opcode possible in a valid context.☆26Updated 2 years ago
- ConfuserEx2 String Decryptor & Full Deobfuscation Guide☆55Updated 3 months ago
- Compile time string encryption with NativeAOT☆27Updated 2 years ago
- VMProtect, VMP, Devirter, 3,5☆104Updated last year
- devirtualization vmprotect☆61Updated last year
- A post-processing script for TinyTracer☆37Updated last year
- Sample for Creating a new kernel object type and supporting API☆22Updated 2 months ago
- Delphi-Kawaii is a plugin for Ida Pro.☆18Updated last year
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated last year
- Me fockin' pe protector☆45Updated 2 years ago
- ☆101Updated 2 years ago