danielplohmann / apiscout

Related projects ⓘ

Alternatives and complementary repositories for apiscout

• fox-it / mkYARA
  Generating YARA rules based on binary code
  ☆203Updated 3 years ago
• 0xPhoeniX / MazeWalker
  Toolkit for enriching and speeding up static malware analysis
  ☆165Updated 2 years ago
• OALabs / findyara-ida
  IDA python plugin to scan binary with Yara rules
  ☆171Updated 9 months ago
• hyuunnn / Hyara
  Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
  ☆223Updated last month
• OALabs / PyIATRebuild
  Automatically rebuild Import Address Table for dumped PE file. With python bindings!
  ☆115Updated 5 years ago
• OALabs / frida-wshook
  Script analysis tool based on Frida.re
  ☆128Updated 7 years ago
• fboldewin / COM-Code-Helper
  Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code
  ☆178Updated 4 years ago
• google / vxsig
  Automatically generate AV byte signatures from sets of similar binaries.
  ☆259Updated 9 months ago
• therealdreg / DbgChild
  Debug Child Process Tool (auto attach)
  ☆271Updated last year
• VirusTotal / vt-ida-plugin
  Official VirusTotal plugin for IDA Pro
  ☆155Updated 10 months ago
• fkie-cad / RoAMer
  Robust Automated Malware Unpacker
  ☆84Updated last year
• danielplohmann / smda
  SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
  ☆226Updated 3 months ago
• Cisco-Talos / DynDataResolver
  ☆221Updated last year
• danielplohmann / idascope
  An IDA Pro extension for easier (malware) reverse engineering
  ☆110Updated 2 years ago
• OALabs / frida-extract
  Frida.re based RunPE (and MapViewOfSection) extraction tool
  ☆111Updated 7 years ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆102Updated last week
• mandiant / SimplifyGraph
  IDA Pro plugin to assist with complex graphs
  ☆312Updated last year
• Cisco-Talos / Ghidraaas
  ☆219Updated last year
• conix-security / zer0m0n
  zer0m0n driver for cuckoo sandbox
  ☆355Updated 9 years ago
• hasherezade / funky_malware_formats
  Parsers for custom malware formats ("Funky malware formats")
  ☆92Updated 2 years ago
• nccgroup / idahunt
  idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
  ☆376Updated last year
• x64dbg / yarasigs
  Various Yara signatures (possibly to be included in a release later).
  ☆85Updated 5 years ago
• 0xAlexei / WindowsDefenderTools
  Tools for instrumenting Windows Defender's mpengine.dll
  ☆273Updated 6 years ago
• a1ext / labeless
  Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping…
  ☆514Updated 2 years ago
• FSecureLABS / win_driver_plugin
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆422Updated 6 years ago
• 0x6d696368 / ghidra_scripts
  Ghidra scripts such as a RC4 decrypter, Yara search, stack string decoder, etc.
  ☆157Updated 4 years ago
• malwaremusings / unpacker
  Automated malware unpacker
  ☆118Updated 8 years ago
• nccgroup / DriverBuddy
  DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.
  ☆352Updated 4 years ago
• mandiant / flare-dbg
  flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.
  ☆148Updated 7 years ago
• mandiant / FIDL
  A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research
  ☆450Updated last year