bontchev / pcodedmpLinks
A VBA p-code disassembler
☆483Updated 4 years ago
Alternatives and similar repositories for pcodedmp
Users that are interested in pcodedmp are comparing it to the libraries listed below
Sorting:
- Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.☆280Updated 4 years ago
- a vba pcode decompiler based on pcodedmp☆113Updated 4 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆1,117Updated last year
- Windows registry file format specification☆353Updated 7 years ago
- ☆432Updated 2 years ago
- Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …☆292Updated 8 years ago
- PowerShell script for deobfuscating encoded PowerShell scripts☆433Updated 4 years ago
- Commandline low level file extractor for NTFS☆305Updated 6 years ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆587Updated last year
- VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls☆151Updated 9 years ago
- Regipy is an os independent python library for parsing offline registry hives☆266Updated last week
- Extract embedded files and macros from office documents.☆186Updated 2 years ago
- Pure Python parser for Windows Registry hives.☆440Updated last year
- Library and tools to access the Windows XML Event Log (EVTX) format☆225Updated last month
- Live hunting of code injection techniques☆385Updated 6 years ago
- analyzeMFT.py is designed to fully parse the MFT file from an NTFS filesystem and present the results as accurately as possible in multip…☆519Updated 5 months ago
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆142Updated 3 years ago
- Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launche…☆264Updated 4 years ago
- ETW Python Library☆293Updated 2 years ago
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆447Updated 3 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆309Updated 6 years ago
- A tool for detecting VBA stomping.☆101Updated 3 years ago
- Tool suite for inspecting NTFS artifacts.☆225Updated 2 years ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆814Updated 6 years ago
- ☆220Updated 7 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆97Updated 3 weeks ago
- EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.☆206Updated 10 months ago
- Pure Python parser for Application Compatibility Shim Databases (.sdb files)☆109Updated 5 years ago
- Allows you to quickly query a Windows machine for RAM artifacts☆218Updated 5 years ago
- A tool to detect and crash Cuckoo Sandbox☆296Updated last year