Alternatives and similar repositories for pcodedmp:

Users that are interested in pcodedmp are comparing it to the libraries listed below

• MalwareCantFly / Vba2Graph
  Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.
  ☆275Updated 3 years ago
• decalage2 / ViperMonkey
  A VBA parser and emulation engine to analyze malicious macros.
  ☆1,064Updated 6 months ago
• Big5-sec / pcode2code
  a vba pcode decompiler based on pcodedmp
  ☆107Updated 3 years ago
• itm4n / VBA-RunPE
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆793Updated 5 years ago
• eset / vba-dynamic-hook
  VBA Dynamic Hook dynamically analyzes VBA macros inside Office documents by hooking function calls
  ☆147Updated 8 years ago
• kirk-sayre-work / VBASeismograph
  A tool for detecting VBA stomping.
  ☆97Updated 2 years ago
• Pepitoh / VBad
  VBA Obfuscation Tools combined with an MS office document generator
  ☆537Updated 7 years ago
• mandiant / flare-wmi
  ☆419Updated last year
• joesecurity / pafishmacro
  Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …
  ☆279Updated 7 years ago
• msuhanov / regf
  Windows registry file format specification
  ☆335Updated 6 years ago
• DissectMalware / XLMMacroDeobfuscator
  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
  ☆574Updated 8 months ago
• R3MRUM / PSDecode
  PowerShell script for deobfuscating encoded PowerShell scripts
  ☆423Updated 3 years ago
• pwndizzle / CodeExecutionOnWindows
  A list of ways to execute code on Windows using legitimate Windows tools
  ☆304Updated 5 years ago
• jschicht / RawCopy
  Commandline low level file extractor for NTFS
  ☆277Updated 5 years ago
• nmantani / FileInsight-plugins
  FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
  ☆159Updated last month
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆433Updated 4 years ago
• OALabs / BlobRunner
  Quickly debug shellcode extracted during malware analysis
  ☆575Updated last year
• NetSPI / PESecurity
  PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.
  ☆629Updated 5 months ago
• endgameinc / ClrGuard
  ☆213Updated 6 years ago
• leechristensen / UnmanagedPowerShell
  Executes PowerShell from an unmanaged process
  ☆476Updated 8 years ago
• christophetd / spoofing-office-macro
  PoC of a VBA macro spawning a process with a spoofed parent and command line.
  ☆375Updated 4 years ago
• MagnetForensics / SwishDbgExt
  Incident Response & Digital Forensics Debugging Extension
  ☆373Updated 6 years ago
• felixweyne / imaginaryC2
  Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …
  ☆446Updated 2 years ago
• nazywam / AutoIt-Ripper
  Extract AutoIt scripts embedded in PE binaries
  ☆178Updated 6 months ago
• williballenthin / python-sdb
  Pure Python parser for Application Compatibility Shim Databases (.sdb files)
  ☆107Updated 3 years ago
• chenerlich / FCL
  FCL (Fileless Command Lines) - Known command lines of fileless malicious executions
  ☆462Updated 3 years ago