crappycrypto / wincryptoLinks
Windows Crypto API compatible decryption/encryption for python
☆49Updated 3 years ago
Alternatives and similar repositories for wincrypto
Users that are interested in wincrypto are comparing it to the libraries listed below
Sorting:
- Automatically rebuild Import Address Table for dumped PE file. With python bindings!☆121Updated 6 years ago
- Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code☆184Updated 5 years ago
- Write-ups for crackmes and CTF challenges☆54Updated 3 years ago
- An IDA Pro extension for easier (malware) reverse engineering☆116Updated 3 years ago
- IDA python plugin to scan binary with Yara rules☆180Updated last year
- Analyses in IDA/Hex-Rays☆84Updated 2 years ago
- Static unpacker for FinSpy VM☆103Updated 4 years ago
- Go Lang Portable Executable Parser☆39Updated 4 years ago
- ☆73Updated 2 years ago
- Windows API tracer for malware (oldname: unitracer)☆120Updated 8 years ago
- Parsers for custom malware formats ("Funky malware formats")☆98Updated 4 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Updated 3 years ago
- Official VirusTotal plugin for IDA Pro☆176Updated last month
- Use this library to automatically extract PE files compressed with aplib from a binary blob.☆34Updated 6 years ago
- ☆116Updated 9 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆77Updated 11 years ago
- ☆99Updated last year
- Script analysis tool based on Frida.re☆130Updated 8 years ago
- Driver Initial Reconnaissance Tool☆125Updated 6 years ago
- scripts/plugins for IDA Pro☆177Updated last year
- Tools for instrumenting Windows Defender's mpengine.dll☆308Updated 7 years ago
- pyGoRE - Python library for analyzing Go binaries☆66Updated 3 years ago
- Yet another rule generator for Yara☆29Updated 7 months ago
- IDA Pro resources, scripts, and configurations☆119Updated last month
- Automatically generate AV byte signatures from sets of similar binaries.☆285Updated last year
- Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis☆86Updated 3 years ago
- Malware dynamic instrumentation tool based on frida framework☆110Updated 5 years ago
- FLARE Kernel Shellcode Loader☆179Updated 6 years ago
- ☆108Updated 6 years ago
- IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.☆118Updated 2 years ago