Packer detection and unpacking workflow for malware analysis: UPX, ASPack, Themida, VMProtect, PE and ELF.
☆37Aug 5, 2026Updated 2 months ago
Alternatives and similar repositories for Unpacker
Users that are interested in Unpacker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generic Themida/WinLicense payload extractor. Launches protected PE as suspended process, detects section decryption, dumps unpacked bin…☆40Apr 18, 2026Updated 6 months ago
- Unprotect VMProtect Binaries☆39May 13, 2026Updated 5 months ago
- A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images☆157Sep 5, 2026Updated last month
- 这是一个Ollydbg插件，它提供了非常多友好的功能包括但不限于方便的数据提取，一键trace，跟踪api调用，iat修复等等☆18Sep 13, 2023Updated 3 years ago
- Two-stage unpacking pipeline: Themida/WinLicense (unlicense) → Nuitka onefile (KAX/KAY) extractor.☆29Sep 12, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Scripts, notes, and other files about the analysis of VMProtect with Dragon Tales☆25Updated this week
- SigilHook☆31Updated this week
- Detect It Easy engine in pure C☆17Updated this week
- easily extract, edit, or analyze data from x64dbg traces (.trace32/64) and output data back into a valid .trace file or w/e format desire…☆16Nov 7, 2025Updated 11 months ago
- An ILProtector Unpacker with a dynamic approach for deobfuscation☆18Apr 30, 2024Updated 2 years ago
- A PoC of Themida 3.xx Cyclic Redundancy Check Bypass☆23Jul 10, 2023Updated 3 years ago
- vmp .net devirtualizer☆84Mar 14, 2026Updated 7 months ago
- map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10☆57Aug 28, 2026Updated 2 months ago
- A custom tool to unpack VMProtect-obfuscated executables and restore the original binary☆71Jul 30, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Updated VMP Demutator from sn0w☆48Jan 13, 2022Updated 4 years ago
- Themida v3 x64 automatic unpacker — Rust reimplementation of Hendi48/Magicmida (Pascal). Deletes shell sections, fixes absolute addresses…☆15Updated this week
- A faster-updated fork of pycdc/decompyle++ focused on current Python bytecode support.☆57Updated this week
- A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent fi…☆22Sep 15, 2026Updated last month
- static & runtime vmprotect unpacker☆24Oct 6, 2026Updated 3 weeks ago
- ☆14Sep 17, 2023Updated 3 years ago
- Themida unpacker☆751May 14, 2026Updated 5 months ago
- WIP PoC for license emulation in Oreans products☆55Jan 9, 2026Updated 9 months ago
- Metamask Desktop client and Web3 dApp browser for Windows, macOS, and Linux. Built with EVM and Solana support.☆1,237Oct 7, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Debugger and analyzer for ARM ELF executables.☆18Oct 24, 2022Updated 4 years ago
- Ghidra BSim platform for large-scale binary similarity analysis. Automated scripts, Docker deployment, Spring Boot API, and web dashboard…☆23Updated this week
- syscall hook by replace fp☆16Jul 7, 2025Updated last year
- vmprotect devirtualization lab☆28Feb 20, 2026Updated 8 months ago
- 🔓 Decrypt strings from a .NET module dump protected by Themida, the advanced windows software protection system☆20Mar 20, 2021Updated 5 years ago
- Ida Pro plugin to aid in reverse engineering Rust binaries.☆20Dec 9, 2024Updated last year
- Implementation of VexIR2Vec. Scalable Program Embeddings for Binary Codes.☆18May 7, 2026Updated 5 months ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆321Jul 30, 2026Updated 2 months ago
- Bypasses VMProtect's VMWare & VMWare Tools detection trough user-mode API hooks.☆30Aug 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Full Python Decompiler for Python 3.12 and 3.13☆12Mar 28, 2025Updated last year
- A Qt Widgets desktop UI for exploring Python bytecode with pycdc/pycdas, inspecting native decompilation, and using AI fallback for unsup…☆43Apr 12, 2026Updated 6 months ago
- AutoIt Obfuscator (Python module) lets you protect AutoIt script source code against analysis, reverse engineering, and decompilation usi…☆15Jun 14, 2026Updated 4 months ago
- VMProtect Web端打包&序列号生成工具。☆14Oct 6, 2026Updated 3 weeks ago
- ☆31Sep 3, 2026Updated last month
- Themida 3.x unpacking, unwrapping and devirtualization(future)☆212Mar 14, 2023Updated 3 years ago
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆38Aug 15, 2026Updated 2 months ago