gkucherin / de4dot
.NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).
☆28Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for de4dot
- ☆25Updated 3 weeks ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆51Updated 2 years ago
- C# implementation to produce ROR-13 numeric hash for given function API name☆31Updated 5 years ago
- Here are some of my malware reversing papers that I will be publishing☆31Updated 2 years ago
- ☆22Updated 6 months ago
- Progress of learning kernel development☆14Updated 2 years ago
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- ☆28Updated 2 years ago
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆39Updated 3 months ago
- Extract data of TTD trace file to a minidump☆28Updated last year
- ☆18Updated 11 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆24Updated last year
- A simple commandline application to automatically decrypt strings from Obfuscator protected binaries☆38Updated 5 months ago
- IDA plugin to deobfuscate emotet CFF☆13Updated 2 years ago
- A small tool to unmap PE memory dumps.☆11Updated last year
- ☆38Updated last month
- Winbindex bot to pull in binaries for specific releases☆46Updated last year
- Process Injection without R/W target memory and without creating a remote thread☆19Updated 2 years ago
- ☆18Updated last year
- genpatch is IDA plugin that generates a python script for patching binary☆31Updated 11 months ago
- Các IDA Flirt signatures HTC tạo☆15Updated last month
- ☆66Updated 11 months ago
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆32Updated last year
- Enabled / Disable LSA Protection via BYOVD☆62Updated 2 years ago
- Clone running process with ZwCreateProcess☆58Updated 4 years ago
- The Frida-Jit-unPacker aims at helping researchers and analysts understand the behavior of packed malicious .NET samples.☆54Updated 7 months ago
- An Xdbg Plugin of the ERC Library.☆26Updated 9 months ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆27Updated 2 years ago
- Standalone Metasploit-like XOR encoder for shellcode☆46Updated 6 months ago
- ☆15Updated last year