Alternatives and similar repositories for thematrix:

Users that are interested in thematrix are comparing it to the libraries listed below

• hasherezade / mal_unpack_drv
  MalUnpack companion driver
  ☆93Updated 7 months ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆114Updated last year
• jonaslyk / temp
  ☆70Updated last year
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆115Updated 7 months ago
• Signal-Labs / IOCTLDump
  ☆141Updated last year
• EliseZeroTwo / SEH-Helper
  Binary Ninja plugin for exploring Structured Exception Handlers
  ☆81Updated 8 months ago
• jonaslyk / exploitkitpub
  ☆94Updated 3 years ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆243Updated 2 years ago
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆196Updated last week
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆67Updated last year
• daem0nc0re / SharpWnfSuite
  C# Utilities for Windows Notification Facility
  ☆128Updated 2 months ago
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆125Updated 5 months ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated last year
• malwarefrank / dnfile
  Parse .NET executable files.
  ☆75Updated 2 weeks ago
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆109Updated 2 years ago
• nccgroup / DetectWindowsCopyOnWriteForAPI
  Enumerate various traits from Windows processes as an aid to threat hunting
  ☆186Updated 3 years ago
• manyfacedllama / amsi-tracer
  Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …
  ☆107Updated 3 years ago
• p0dalirius / pyPDBdownload
  A Python script to download PDB files associated with a Portable Executable (PE)
  ☆118Updated this week
• KasperskyLab / Apihashes
  IDA Pro plugin for recognizing known hashes of API function names
  ☆81Updated 2 years ago
• zodiacon / Recon2023
  Recon 2023 slides and code
  ☆79Updated last year
• intel471 / coderex
  A tool that automates regex generation for the x86 and x86-64 instruction sets
  ☆68Updated 9 months ago
• riskydissonance / SyscallsExample
  Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.
  ☆74Updated 3 years ago
• jk45054 / CTF-writeups
  Writeups for CTF challenges
  ☆30Updated last year
• ionescu007 / clfs-docs
  Unofficial Common Log File System (CLFS) Documentation
  ☆169Updated 3 years ago
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆153Updated 2 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆75Updated 6 months ago
• mandiant / dncil
  The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
  ☆160Updated this week
• VoidSec / ioctlpus
  IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).
  ☆88Updated 3 years ago
• pathtofile / SealighterTI
  Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider
  ☆169Updated 2 years ago
• waleedassar / RestrictedKernelLeaks
  ☆157Updated 3 years ago