Alternatives and similar repositories for jmp2it:

Users that are interested in jmp2it are comparing it to the libraries listed below

• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆86Updated 5 years ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆93Updated 3 years ago
• Dump-GUY / ghidra_scripts
  ☆67Updated last year
• OALabs / PyIATRebuild
  Automatically rebuild Import Address Table for dumped PE file. With python bindings!
  ☆118Updated 6 years ago
• karttoon / binsequencer
  BinSequencer is a script designed to find a common pattern of bytes within a set of samples and generate a YARA rule from the identified…
  ☆76Updated 3 years ago
• alexander-hanel / gopep
  Go Lang Portable Executable Parser
  ☆39Updated 3 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated last year
• Tera0017 / TAFOF-Unpacker
  TA505 unpacker Python 2.7
  ☆47Updated 4 years ago
• spender-sandbox / cuckoomon-modified
  Modified edition of cuckoomon
  ☆49Updated 6 years ago
• Fare9 / ANBU
  ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.
  ☆89Updated 5 years ago
• Neo23x0 / DLLRunner
  Smart DLL execution for malware analysis in sandbox systems
  ☆143Updated 10 years ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆108Updated 4 years ago
• angelkillah / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆87Updated 8 years ago
• tildedennis / malware
  ☆44Updated 6 years ago
• tehsyntx / loffice
  Lazy Office Analyzer
  ☆119Updated 8 years ago
• monnappa22 / HollowFind
  Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …
  ☆132Updated 2 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆34Updated 5 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆120Updated 4 years ago
• d00rt / emotet_research
  ☆134Updated 6 years ago
• mandiant / Volatility-Plugins
  ☆82Updated 8 years ago
• reb311ion / CapaExplorer
  Capa analysis importer for Ghidra.
  ☆61Updated 4 years ago
• conix-security / machoke
  ☆51Updated 6 years ago
• PonyPC / myaut_contrib
  mod to myaut2exe decompiler
  ☆13Updated 7 years ago
• brad-sp / community-modified
  Modified edition of cuckoo community modules
  ☆32Updated 5 years ago
• stvemillertime / ConventionEngine
  ConventionEngine - A Yara Rulepack for PDB Path Hunting
  ☆38Updated last year
• SouhailHammou / IDARay-Plugin
  IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.
  ☆18Updated 6 years ago
• telsy-cyberops / research
  Telsy CTI Research Team
  ☆57Updated 4 years ago
• kcreyts / plugxdecoder
  Decodes PlugX traffic and encrypted/compressed artifacts
  ☆38Updated 11 years ago
• OALabs / frida-extract
  Frida.re based RunPE (and MapViewOfSection) extraction tool
  ☆111Updated 8 years ago
• seth1002 / tracecorn_tina
  a modified version base on Tracecorn
  ☆20Updated 5 years ago