Towards Generic Deobfuscation of Windows API Calls
☆49May 21, 2019Updated 7 years ago
Alternatives and similar repositories for winapi-deobfuscation
Users that are interested in winapi-deobfuscation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Jun 24, 2017Updated 9 years ago
- This is a fuzzer for Windows SEH buffer overflow.☆15Oct 17, 2017Updated 9 years ago
- Code for my blog post on combining S2E and Kaitai Struct☆15Jun 1, 2019Updated 7 years ago
- VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.☆55Jan 16, 2020Updated 6 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Reproducible BinProv implementation and pretrained model for binary compilation provenance identification without disassembly.☆10Sep 6, 2026Updated last month
- Convert libvirt-QEMU-save (LQS) files to raw memory files☆14Sep 22, 2018Updated 8 years ago
- Windows API tracer for malware (oldname: unitracer)☆119Oct 16, 2017Updated 9 years ago
- CVE-2014-1303 (WebKit Heap based BOF) proof of concept for Linux☆24Aug 10, 2025Updated last year
- more at http://www.zer0mem.sk/?p=271☆12Jun 11, 2013Updated 13 years ago
- A simple tool to help reverse engineers while dealing with obfuscated code.☆20Sep 5, 2016Updated 10 years ago
- My take on the capcom driver vulnerability☆27Aug 7, 2017Updated 9 years ago
- mruby running inside the bare-metal hypervisor☆19Mar 8, 2020Updated 6 years ago
- ☆14Jan 12, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- Windows inject☆17Jun 7, 2018Updated 8 years ago
- Towards Automatically Generating a Sound and Complete Dataset for Evaluating Static Analysis Tools☆14Feb 19, 2019Updated 7 years ago
- Malware Dynamic Analysis Platform enhanced Cuckoo Sandbox☆25Jan 10, 2018Updated 8 years ago
- Sample Program for rust-uefi. It's running as a UEFI apps written by Rust.☆17Sep 14, 2019Updated 7 years ago
- This is a sample approach of data analysis in security scene.☆18Oct 21, 2018Updated 8 years ago
- simple PE packer written in C++☆57Feb 23, 2018Updated 8 years ago
- PoC for detecting and dumping process hollowing code injection☆53Oct 23, 2018Updated 8 years ago
- Code for the paper EvilCoder: Automated Bug Insertion at ACSAC 2016☆47Jan 18, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆24Feb 21, 2016Updated 10 years ago
- Implementation trade-offs in using Intel Pin for instruction tracing of complex programs☆15Oct 16, 2019Updated 7 years ago
- BE-PUM (Binary Emulation for PUshdown Model) is a project for analyzing and detecting binary files. Its main focus is on generating CFG (…☆20Dec 25, 2017Updated 8 years ago
- It's not just UsnJrnl (USN Journal Records/Change Journal Records) parser.☆24Nov 11, 2018Updated 7 years ago
- Simple PE packer with RtlCompressBuffer☆21Sep 20, 2015Updated 11 years ago
- https://github.com/sk2sat/emu のほうで一から作り直ししてます☆24Jul 8, 2017Updated 9 years ago
- gdbserver implementation on BitVisor☆26Nov 8, 2017Updated 8 years ago
- HackSys Extreme Vulnerable Driver - Various Windows 7 x86 Kernel Exploits☆20Jan 13, 2018Updated 8 years ago
- A C/C++ implementation of Microsoft's Antimalware Scan Interface☆182Mar 30, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Small tool which loads Windows drivers with NtLoadDriver☆46Apr 28, 2021Updated 5 years ago
- Augmenting Static Analysis Using Pintool: Ablation☆40Aug 4, 2016Updated 10 years ago
- Reversed C++ source code from the CAPCOM.SYS driver☆15Sep 28, 2016Updated 10 years ago
- bmod parses binaries for modification/patching and disassembles machine code sections.☆12Apr 19, 2018Updated 8 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆45Dec 22, 2021Updated 4 years ago
- Similarity Analysis to Defeat Malware Compiler Variations☆25Oct 3, 2017Updated 9 years ago
- An analytical debugger programmed in C++, using Qt.☆22May 20, 2012Updated 14 years ago