enkomio / sacara
Sacara VM
☆122Updated 5 years ago
Alternatives and similar repositories for sacara:
Users that are interested in sacara are comparing it to the libraries listed below
- .NET instrumentation framework☆72Updated 7 years ago
- A binary analysis framework☆132Updated 4 years ago
- .NET runtime inspector☆270Updated 6 years ago
- A simple utility to list all methods of a given .NET Assembly and to invoke them☆74Updated 3 years ago
- Grep-like WinDbg extension☆43Updated 8 years ago
- Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).☆116Updated 6 years ago
- ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.☆90Updated 5 years ago
- A project that aims to automatically devirtualize code that has been virtualized using x86virt☆126Updated 2 years ago
- Scripts for disassembling VBScript p-code in the memory to aid in exploits analysis☆85Updated 2 years ago
- A simple API monitor for Windbg☆63Updated 8 years ago
- An obfuscation engine which obfuscates Intel x86 32-bit binary code.☆55Updated 7 years ago
- A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.☆91Updated 10 years ago
- My repository to upload drivers from different books and all the information related to windows internals.☆156Updated 5 years ago
- Old mitigation-bounty code that was applicable to edge before it use webkit/chrome☆86Updated 8 years ago
- Sample use cases of the .NET native code hooking technique☆211Updated 7 years ago
- ☆216Updated 7 years ago
- Diff tool for comparing symbols in PDB files☆82Updated 5 years ago
- Driver Initial Reconnaissance Tool☆123Updated 5 years ago
- PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.☆151Updated 5 years ago
- [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;☆73Updated 5 years ago
- Polymorphic VM and PoliCTF '17 reversing challenge.☆73Updated 7 months ago
- kernel exploitation helper class☆77Updated 8 years ago
- ☆110Updated 4 years ago
- POC viruses I have created to demo some ideas☆59Updated 5 years ago
- Collection of VC++ example applications to demonstrate Win10 userland heap behavior (BEA & FEA)☆84Updated 8 years ago
- Demos for Presentation on Windows Runtime Security☆70Updated 6 years ago
- Mario & Luigi - Tools for sniffing Windows Named Pipes communication☆129Updated 8 years ago
- kernel pool windbg extension☆82Updated 9 years ago
- HackSys Extreme Vulnerable Driver - ArbitraryOverwrite Exploit using GDI☆41Updated 8 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 8 years ago