Small tool to convert beteween the PE alignments (raw and virtual).
☆120Mar 28, 2026Updated 7 months ago
Alternatives and similar repositories for pe_unmapper
Users that are interested in pe_unmapper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆129Jul 12, 2024Updated 2 years ago
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆353Oct 13, 2024Updated 2 years ago
- Standalone Metasploit-like XOR encoder for shellcode☆54May 12, 2024Updated 2 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆79Sep 26, 2026Updated last month
- Packet Injection With WFP☆16Jun 5, 2026Updated 5 months ago
- A Pin Tool for tracing API calls etc☆1,715Jun 2, 2026Updated 5 months ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆364Mar 12, 2026Updated 7 months ago
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆891Feb 2, 2024Updated 2 years ago
- Dynamic unpacker based on PE-sieve☆844Apr 14, 2026Updated 6 months ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- ☆55Dec 21, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A set of small utilities, helpers for PIN tracers☆40Feb 15, 2026Updated 8 months ago
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆615Aug 2, 2025Updated last year
- Sleep Obfuscation☆45Oct 13, 2022Updated 4 years ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- Virtualization Simply Code☆24May 13, 2022Updated 4 years ago
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆649Aug 30, 2022Updated 4 years ago
- Decoders for 7ev3n ransomware☆17Oct 24, 2016Updated 10 years ago
- anti-ransomware file-system filter☆70Sep 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,431Jun 6, 2026Updated 5 months ago
- Windows kernel and user mode emulation.☆2,105Updated this week
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,397Apr 18, 2026Updated 6 months ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,964Updated this week
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆301Apr 10, 2021Updated 5 years ago
- Process Injection using Thread Name☆312Apr 18, 2025Updated last year
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 7 years ago
- PE (and elf now!) bin2bin obfuscator☆861Oct 11, 2025Updated last year
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆135Jan 2, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Get information about stripped rust executables☆46May 16, 2025Updated last year
- Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread☆268Aug 31, 2025Updated last year
- SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also conta…☆492Mar 22, 2026Updated 7 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆171Aug 23, 2024Updated 2 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆927Sep 22, 2026Updated last month
- IDA Type Info Libraries for RE☆30Jan 11, 2025Updated last year
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago