bontchev / pcodedmpLinks
A VBA p-code disassembler
☆477Updated 4 years ago
Alternatives and similar repositories for pcodedmp
Users that are interested in pcodedmp are comparing it to the libraries listed below
Sorting:
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆279Updated 4 years ago
- a vba pcode decompiler based on pcodedmp☆112Updated 4 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆1,113Updated last year
- Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …☆293Updated 8 years ago
- ☆427Updated 2 years ago
- VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls☆150Updated 9 years ago
- PowerShell script for deobfuscating encoded PowerShell scripts☆428Updated 4 years ago
- Windows registry file format specification☆351Updated 7 years ago
- Extract embedded files and macros from office documents.☆186Updated 2 years ago
- Commandline low level file extractor for NTFS☆306Updated 6 years ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆584Updated last year
- A tool for detecting VBA stomping.☆101Updated 3 years ago
- Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…☆264Updated 3 years ago
- Tool suite for inspecting NTFS artifacts.☆225Updated 2 years ago
- Pure Python parser for Windows Registry hives.☆439Updated 10 months ago
- ☆220Updated 7 years ago
- ETW Python Library☆293Updated 2 years ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆109Updated 4 years ago
- VBA Obfuscation Tools combined with an MS office document generator☆553Updated 8 years ago
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆142Updated 3 years ago
- A tool to detect and crash Cuckoo Sandbox☆295Updated last year
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆511Updated 4 months ago
- Library and tools to access the Windows XML Event Log (EVTX) format☆220Updated 2 weeks ago
- Library and tools to access the Extensible Storage Engine (ESE) Database File (EDB) format.☆369Updated 2 weeks ago
- Live hunting of code injection techniques☆383Updated 6 years ago
- Regipy is an os independent python library for parsing offline registry hives☆265Updated last week
- A YARA-integrated process denial framework for Windows☆397Updated 5 years ago
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆448Updated 3 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆309Updated 6 years ago
- FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis☆162Updated last year