aserper / ahk-dumper
Ahk-dumper is a tool to dump AutoHotKey code from the RDATA section of a PE file.
☆20Updated 7 years ago
Alternatives and similar repositories for ahk-dumper
Users that are interested in ahk-dumper are comparing it to the libraries listed below
Sorting:
- Memory searching utilities☆42Updated 11 years ago
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- Carves EXEs from given data files, using intelligent carving based upon PE headers☆38Updated 8 years ago
- Microsoft Windows HTA (HTML Application) - Remote Code Execution☆29Updated 9 years ago
- Privilege Escilation training project, with an emphasis on the distinction between vulnerability research & it's exposure and exploitatio…☆35Updated 8 years ago
- pykd script to dynamically find vtables on heap (windows x86/x64)☆25Updated 10 years ago
- MALM: Malware Monitor☆49Updated 11 years ago
- PAC HTTPS leak demo from DEF CON 24 'Toxic Proxies' talk☆30Updated 8 years ago
- Force-Directed Graph Generator for Volatility Ouputs☆26Updated 6 years ago
- Analysis PE file or Shellcode☆49Updated 8 years ago
- Basic demo for Hidden Treasure talk.☆49Updated 7 years ago
- Simple list of decrypt tools that could help recover data encrypted by ransomwares☆17Updated 9 years ago
- This script is used for extracting DDE in docx and xlsx☆12Updated 7 years ago
- Disables ASLR flag IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE in IMAGE_OPTIONAL_HEADER on pre-compiled EXE. Works for both 32 and 64 bit Windo…☆20Updated 4 years ago
- Recover event log entries from an image by heurisitically looking for record structures.☆27Updated 9 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 7 years ago
- Sample libraries to be used with IAT Patcher☆33Updated 2 years ago
- Discover TimeDateStamps In PE File☆17Updated 9 years ago
- A PowerShell binding for the Unicorn Engine☆17Updated 9 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Updated 6 years ago
- All TMF files that I extracted from Microsoft PDBs.☆12Updated 5 years ago
- ☆22Updated 7 years ago
- Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed …☆20Updated 9 years ago
- IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing…☆35Updated 10 years ago
- Resolves DLL API entrypoints for a process w/ remote query capabilities.☆55Updated 7 years ago
- Recurse through a registry, identifying values with large data -- a registry malware hunter☆44Updated 8 years ago
- Lansweeper Password Recovery Tool☆11Updated 8 years ago
- Identify botnet panels with Ensembled Decision Trees☆18Updated 8 years ago
- MS Windows LNK file parser☆12Updated 8 years ago
- Emulating Virtual Environment to stay protected against advanced malware☆100Updated 6 years ago