charlesnathansmith / whatlicense

Related projects: ⓘ

• ergrelet / themida-spotter-bn
  A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
  ☆62Updated last month
• KasperskyLab / hrtng
  IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…
  ☆101Updated 2 weeks ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆49Updated 7 months ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆59Updated last year
• sodareverse / TDE
  A devirtualization engine for Themida.
  ☆81Updated 6 months ago
• mzakocs / VirtualizationObfuscatorAnalysis
  A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators
  ☆60Updated last year
• KiFilterFiberContext / windows-software-policy
  Research on obfuscated licensing APIs / CLIP service in the Windows kernel
  ☆81Updated 2 years ago
• can1357 / IdaThemer
  🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.
  ☆81Updated 5 months ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated last year
• archercreat / vm_jit
  VM devirtualization PoC based on AsmJit and llvm
  ☆102Updated 3 years ago
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆56Updated 2 months ago
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆101Updated 3 weeks ago
• pgarba / SiMBA-
  Port of MBA Solver SiMBA to C/C++
  ☆73Updated this week
• Azvanzed / CVE-2024-44083
  Makes IDA (most versions) to crash upon opening it.
  ☆52Updated 3 weeks ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆39Updated 2 years ago
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆172Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆57Updated last year
• KiFilterFiberContext / warbird-obfuscator
  Integration of Microsoft Warbird with the MSVC compiler
  ☆80Updated last year
• mazeworks-security / Simplifier
  Efficient mixed boolean-arithmetic (MBA) simplifier
  ☆67Updated this week
• generic-trash / themdem
  ☆31Updated 7 months ago
• zer0condition / Demystifying-PatchGuard
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆100Updated last year
• AzzOnFire / emuit
  Easy-to-use IDA plugin for code emulation
  ☆23Updated 4 months ago
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆58Updated last year
• Colton1skees / Dna
  Static analysis & deobfuscation framework for x86/x64
  ☆88Updated last year
• Anal-Repair / Vmp3_64bit_disasm-prerelease-
  ☆105Updated this week
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆58Updated 9 months ago
• mike1k / pepp
  C++ library for parsing and manipulating PE files statically and dynamically.
  ☆82Updated 11 months ago
• sunwm518 / VMProtect-3-5-DEvirt
  VMProtect, VMP, Devirter, 3,5
  ☆103Updated last year
• mrexodia / driver_unpacking
  Ghetto user mode emulation of Windows kernel drivers.
  ☆113Updated 2 years ago
• KiFilterFiberContext / microsoft-warbird
  Reimplementation of Microsoft's Warbird obuscator
  ☆84Updated 2 months ago