ergrelet / themida-spotter-bn
A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
☆78Updated 8 months ago
Alternatives and similar repositories for themida-spotter-bn:
Users that are interested in themida-spotter-bn are comparing it to the libraries listed below
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆108Updated 11 months ago
- devirtualization vmprotect☆62Updated 2 years ago
- Rust library for lifting raw binary data to LLVM IR☆47Updated this week
- Lightweight PDB symbol parser and resolver☆24Updated 5 months ago
- Me fockin' pe protector☆45Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆57Updated last year
- WinLicense key extraction via Intel PIN☆100Updated 11 months ago
- x86-64 user mode emulation using Zydis☆45Updated 2 months ago
- Cross-Platform Framework for High-Speed Memory Pattern Scanning with Multithreading, SIMD Support, and Alternative STL ETL Integration☆37Updated 2 months ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆50Updated 8 months ago
- A devirtualization engine for Themida.☆97Updated last year
- A portable header only library extending the C++20 STL.☆74Updated 11 months ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated last year
- Easy-to-use IDA plugin for code emulation☆30Updated 10 months ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 8 months ago
- ☆27Updated last year
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆87Updated 3 weeks ago
- Generate a PDB file given the old PDB file and an address mapping☆42Updated 3 weeks ago
- Windows kernel debugger for Linux hosts running Windows under KVM/QEMU☆71Updated 5 months ago
- A parser for Microsoft PDB (Program Database) debugging information☆27Updated 4 months ago
- Symbolic Execution based on lifting amd64 to z3☆26Updated 9 months ago
- Header-only C++ library for producing PE files.☆31Updated last year
- A set of LLVM and GCC based plugins that perform code obfuscation.☆121Updated 3 weeks ago
- 🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.☆108Updated 11 months ago
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆21Updated 7 months ago
- x86-64 virtualizing obfuscator written in Rust☆75Updated last year
- Windows kernel driver template for cmkr (with testsigning).☆30Updated last year
- bypassing intel txt's tboot integrity checks via coreboot shim☆64Updated 2 weeks ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆133Updated 7 months ago
- Windows PDB parser for kernel-mode environment.☆95Updated 2 years ago