Salvaging Static Analysis
☆88Jun 7, 2019Updated 7 years ago
Alternatives and similar repositories for SalSA
Users that are interested in SalSA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Mar 13, 2017Updated 9 years ago
- Windows kernel-mode callbacks tutorial driver☆46Aug 8, 2016Updated 10 years ago
- Microsoft decompiled IrDA drivers☆16Apr 15, 2015Updated 11 years ago
- Confirms the capability of Hardware-Accelerated Virtualization Technology.☆10Feb 26, 2026Updated 7 months ago
- A Proof-of-Concept win32 DLL that makes use of netbios session token replay to propagate through a Windows Domain☆26Apr 14, 2018Updated 8 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆20Jan 25, 2019Updated 7 years ago
- The exploit for Panda AV LPE☆37May 22, 2019Updated 7 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 12 years ago
- a net filter drive developed by wfp and msddk☆23Jul 15, 2019Updated 7 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Oct 10, 2018Updated 8 years ago
- ☆14Mar 28, 2018Updated 8 years ago
- Provides a way which you can load a .NET dll/exe from disk, modify/inject IL, and then run the assembly all in memory without modifying t…☆29Mar 31, 2017Updated 9 years ago
- Windows NDIS 6.3 Protocol Driver that provides usermode access to an IsoSwitch or CrowdSwitch☆10May 4, 2018Updated 8 years ago
- This repo is deprecated as of 2019.08.20, all code moved to https://github.com/grimm-co/killerbeez☆16Nov 22, 2018Updated 7 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Zerokit shared code☆18Mar 28, 2019Updated 7 years ago
- Kernel mode windows NT API logger☆22Sep 9, 2019Updated 7 years ago
- Process / thread-level system call tracer for Windows 7 / 8 / 2008 / 2012☆21May 19, 2015Updated 11 years ago
- Hypervisor-based debugger☆192Dec 2, 2020Updated 5 years ago
- A IDA plugin to enable linking to locations in an IDB with a disas:// URI☆35Oct 18, 2023Updated 3 years ago
- Analysis and Modification Tool for Executables☆18Mar 28, 2019Updated 7 years ago
- Some crazy PE executables protection kernel driver☆20May 2, 2020Updated 6 years ago
- ☆25Jul 24, 2020Updated 6 years ago
- A little WinDbg extension to help dump the state of Win32k Type Isolation structures.☆38Feb 2, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Class implementation of PowerLoader injection technique☆32Dec 23, 2016Updated 9 years ago
- This is an OllyDbg plugin which will help you to import map files exported by IDA, Dede, IDR, Microsoft and Borland linkers.☆22Aug 12, 2015Updated 11 years ago
- idenLib (Library Function Identification) plugin for x32dbg☆41Feb 26, 2019Updated 7 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆39Oct 7, 2021Updated 5 years ago
- penter hook example and driver time recorder☆33Oct 2, 2017Updated 9 years ago
- Common Malware Techniques☆13Mar 26, 2023Updated 3 years ago
- Security Evaluation of Dynamic Binary Instrumentation Engines☆81Sep 1, 2018Updated 8 years ago
- Using Undocumented NTDLL Functions to Read/Write/Delete File☆18Jan 25, 2021Updated 5 years ago
- Anti-Anti-VM solution via Windows Driver☆60May 8, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Varoius IDC-scripts I've collected during the years.☆142Sep 5, 2014Updated 12 years ago
- Tool for finding KPOT XOR key using known-plaintext attack.☆13Jun 9, 2020Updated 6 years ago
- Lua Extension for Windbg☆20Oct 22, 2018Updated 7 years ago
- This is a simple example and explanation of obfuscating API resolution via hashing☆239May 25, 2020Updated 6 years ago
- VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its func…☆63Feb 28, 2021Updated 5 years ago
- PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.☆33Jul 31, 2018Updated 8 years ago
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago