govcert-ch / ConfuserEx_IDAPythonLinks
IDA Python deobfuscation script for ConfuserEx binaries
☆35Updated 3 years ago
Alternatives and similar repositories for ConfuserEx_IDAPython
Users that are interested in ConfuserEx_IDAPython are comparing it to the libraries listed below
Sorting:
- ☆24Updated last year
- ☆32Updated 3 years ago
- IDA plugin for quickly copying disassembly as encoded hex bytes☆65Updated 4 years ago
- binary instrumentation, analysis, and patching framework☆100Updated last week
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Updated 3 years ago
- VinCSS Reverse Engineering, Malware Analysing Tools & Ultilities☆27Updated 4 years ago
- Easy-to-use IDA plugin for code emulation☆53Updated 2 months ago
- UnpacMe IDA Byte Search☆29Updated 2 years ago
- Binary Ninja plugin for exploring Structured Exception Handlers☆82Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆37Updated 2 years ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆44Updated last year
- ☆29Updated 3 years ago
- WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware☆48Updated 3 years ago
- [deprecated] Simple x64dbg plugin to save a full memory dump☆50Updated 3 years ago
- An IDA plugin which demangles Rust function names☆34Updated 2 years ago
- ☆22Updated 2 years ago
- devirtualization vmprotect☆65Updated 2 years ago
- A journal for $6,000 Riot Vanguard bounty.☆67Updated 2 years ago
- Process Injection without R/W target memory and without creating a remote thread☆19Updated 3 years ago
- IDA plugin to pinpoint obfuscated code☆144Updated 3 years ago
- IDA plugin to deobfuscate emotet CFF☆18Updated 3 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆68Updated 2 years ago
- A post-processing script for TinyTracer☆39Updated 2 years ago
- Different tools for Microsoft Hyper-V researching☆64Updated last month
- LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…☆49Updated 4 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Updated 3 years ago
- C# implementation to produce ROR-13 numeric hash for given function API name☆34Updated 6 years ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆128Updated 11 months ago
- LLVM based obfuscation engine☆109Updated 7 months ago