chen-charles / PEDetour

Related projects: ⓘ

• Cr4sh / IDA-VMware-GDB
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
  ☆76Updated 12 years ago
• long123king / tokenext
  A windbg extension, extracting token related contents
  ☆41Updated 3 years ago
• nihilus / ida-pro-swf
  ☆30Updated 8 years ago
• eschweiler / ProReversing
  Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
  ☆63Updated 11 years ago
• stephenfewer / OllyHeapTrace
  OllyHeapTrace is a plugin for OllyDbg to trace the heap operations being performed by a process.
  ☆53Updated 12 years ago
• mandiant / unicorn-libemu-shim
  libemu shim layer and win32 environment for Unicorn Engine
  ☆71Updated 7 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆58Updated 8 years ago
• maldevel / driver-loader
  Load a Windows Kernel Driver
  ☆89Updated 7 years ago
• Rootkitsmm-zz / CVEXX-XX
  Windows kernel vulnerability in win32k.sys Driver
  ☆34Updated 8 years ago
• fdiskyou / WinAllocTracer
  ☆34Updated this week
• zerosum0x0 / ShellcodeDriver
  ☆81Updated this week
• NtQuery / DebugDetector
  ☆26Updated 10 years ago
• siberas / IDA2Sym
  IDAScript to create Symbol file which can be loaded in WinDbg via AddSyntheticSymbol
  ☆40Updated 10 years ago
• hasherezade / MyPinTools
  ☆69Updated this week
• KurapicaBS / x64_tracer
  x64dbg conditional branches logger [Plugin]
  ☆67Updated 7 years ago
• tandasat / findpg
  Windbg extension to find PatchGuard pages
  ☆116Updated 10 years ago
• int0 / ProcessIsolator
  ☆73Updated 6 years ago
• Nukem9 / IDASkins
  *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
  ☆31Updated 7 years ago
• nektra / vtbl-ida-pro-plugin
  Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
  ☆90Updated 11 years ago
• yaseralnajjar / IDA-MSDN-helper
  IDA Pro MSDN Helper
  ☆39Updated 8 years ago
• sam-b / windows_syscalls_dumper
  A dirty IDAPython script to dump windows system call number/name pairs as JSON
  ☆37Updated 7 years ago
• dro / uac-launchinf-poc
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆34Updated 6 years ago
• gcoinman / atom-bombing-
  Brand New Code Injection for Windows https://breakingmalware.com/injection-techniques/atombombing-brand-new-code-injection-for-windows
  ☆19Updated 7 years ago
• RISCYBusiness / RISCYpacker
  ☆57Updated this week
• Captainarash / Reverse-Engineer
  ☆37Updated this week
• 0xeb / ida-climacros
  Create and use macros in IDA's CLIs
  ☆63Updated last year
• tandasat / DumpVTable
  Generates a Python script to give public interface names in an ActiveX file to an IDB file.
  ☆47Updated 3 years ago
• tandasat / cs_driver
  A sample project for using Capstone from a driver in Visual Studio 2015
  ☆34Updated 8 years ago
• ajkhoury / IDA_Signsrch-7.0
  ☆16Updated 6 years ago