calware / Deobfuscation
Binary Deobfuscation Series
☆22Updated 5 years ago
Alternatives and similar repositories for Deobfuscation:
Users that are interested in Deobfuscation are comparing it to the libraries listed below
- Reversing library based off sleigh from the Ghidra project. Pcode IR access, disassembly, C++17☆14Updated 3 years ago
- A library to translate native code for multiple architectures into Tiny Code Generator (TCG) based intermediate representation (IR), base…☆46Updated 4 years ago
- A common set of helpers used across VTIL toolchain. Moved into -->☆20Updated 4 years ago
- obfuscation that aims to not stand out☆23Updated 2 years ago
- Binary Ninja plugin for automating VMProtect analysis☆58Updated 2 years ago
- Symbolic expression simplifier used across VTIL toolchain. Moved into -->☆24Updated 4 years ago
- transpile llil to c++ for execution and testing☆42Updated last year
- ☆30Updated 4 years ago
- Set of plugins and library for dynamic pdb generation and synchronisation☆35Updated 9 months ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 5 years ago
- x86/x64 architecture plugin☆39Updated 11 months ago
- ☆22Updated 2 weeks ago
- VMX intrinsics plugin for Hex-Rays decompiler☆70Updated 5 years ago
- An Integrity-Check Monitoring Pintool☆56Updated 4 years ago
- Build your emulation environment as needed☆65Updated 3 years ago
- LLVM based devirtualization PoC’s.☆20Updated 3 years ago
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆81Updated 5 years ago
- IDA script for vmprotect Windows Api address decoder☆51Updated 3 years ago
- clone of armadillo patched for windows☆46Updated 3 months ago
- PoC for a taint based attack on VMProtect☆109Updated 5 years ago
- Symbolic executor for Binary Ninja's MLIL☆22Updated 4 months ago
- Using Zydis and LLVM to lift unsupported instructions to LLVM-IR☆28Updated 3 years ago
- Python bindings for BochsCPU☆35Updated 4 months ago
- ☆27Updated 6 years ago
- Small programs and scripts that do not require their own repositories☆134Updated 2 years ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 6 months ago
- IDA plugin to explore and browse tags☆54Updated 5 years ago
- ☆40Updated 3 years ago
- Decode machine code into VEX IR and translate into LLVM IR☆25Updated 5 years ago
- ☆24Updated 8 years ago