avast / yaracpp

Related projects ⓘ

Alternatives and complementary repositories for yaracpp

• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆37Updated 11 years ago
• GDATAAdvancedAnalytics / bindifflib
  Automated library compilation and PDB annotation with CMake and IDA Pro
  ☆20Updated 6 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆71Updated 5 years ago
• tandasat / cs_driver
  A sample project for using Capstone from a driver in Visual Studio 2015
  ☆33Updated 8 years ago
• SekoiaLab / BinaryInjectionMitigation
  Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
  ☆53Updated 7 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆44Updated 7 years ago
• swwwolf / obderef
  Decrement Windows Kernel for fun and profit
  ☆39Updated 6 years ago
• avast / pelib
  PE file manipulation library.
  ☆63Updated 4 years ago
• JuanJMarques / pymetamorph
  metamorphic engine in python
  ☆35Updated 8 years ago
• avast / retdec-regression-tests-framework
  A framework for writing and running regression tests for RetDec and related tools.
  ☆24Updated 8 months ago
• rwfpl / rewolf-gogogadget
  kernel exploitation helper class
  ☆75Updated 7 years ago
• sam-b / windows_syscalls_dumper
  A dirty IDAPython script to dump windows system call number/name pairs as JSON
  ☆37Updated 7 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆36Updated 7 years ago
• zynamics / msdn-plugin-ida
  Imports MSDN documentation into IDA Pro
  ☆51Updated 12 years ago
• nihilus / idascope
  ☆26Updated 10 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• SouhailHammou / IDARay-Plugin
  IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.
  ☆18Updated 6 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 9 years ago
• int0 / ltmdm64_poc
  ☆28Updated 7 years ago
• kukfa / bindbg
  Binary Ninja plugin that syncs WinDbg to Binary Ninja
  ☆47Updated 6 years ago
• cysinfo / Exescan
  ExeScan is the FREE console based tool to detect anomalies in PE (Portable Executable) files. It quickly scans given executable file and …
  ☆20Updated 5 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆38Updated 4 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆50Updated 9 years ago
• nihilus / ida-pro-swf
  ☆30Updated 8 years ago
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆26Updated 5 years ago