hexfati / SharpDllLoader

Related projects ⓘ

Alternatives and complementary repositories for SharpDllLoader

• advanced-threat-research / DotDumper
  An automatic unpacker and logger for DotNet Framework targeting files
  ☆249Updated last year
• malwarefrank / dnfile
  Parse .NET executable files.
  ☆74Updated last week
• hasherezade / pe_unmapper
  Small tool to convert beteween the PE alignments (raw and virtual).
  ☆81Updated last year
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆114Updated last year
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated 10 months ago
• pan-unit42 / dotnetfile
  ☆100Updated last year
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆226Updated 3 months ago
• LAC-Japan / IDA_Plugin_AntiDebugSeeker
  Automatically identify and extract potential anti-debugging techniques used by malware.
  ☆132Updated last week
• PI-Defender / pi-defender
  Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
  ☆148Updated 2 years ago
• KasperskyLab / Apihashes
  IDA Pro plugin for recognizing known hashes of API function names
  ☆81Updated 2 years ago
• repnz / autochk-rootkit
  Reverse engineered source code of the autochk rootkit
  ☆197Updated 5 years ago
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆180Updated 3 weeks ago
• mandiant / dncil
  The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
  ☆158Updated 2 weeks ago
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆160Updated 8 months ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆102Updated last week
• hasherezade / antianalysis_demos
  Set of antianalysis techniques found in malware
  ☆129Updated last year
• mandiant / jitm
  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
  ☆50Updated 3 years ago
• jackullrich / syscall-detect
  PoC capable of detecting manual syscalls from usermode.
  ☆183Updated 3 years ago
• jeremybeaume / packer-tutorial
  Files for the packer tutorial
  ☆70Updated 3 years ago
• synacktiv / dotNIET
  ☆93Updated 3 years ago
• enkomio / thematrix
  a PE Loader and Windows API tracer. Useful in malware analysis.
  ☆137Updated 2 years ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆355Updated 8 months ago
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆213Updated last year
• Signal-Labs / IOCTLDump
  ☆131Updated last year
• d35ha / xLogger
  Simple windows API logger
  ☆98Updated 5 years ago
• idan1288 / ProcessHollowing32-64
  Process Hollowing for 32 bit and 64 bit
  ☆80Updated 7 years ago
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆296Updated last month
• LJP-TW / JITHook
  ☆43Updated 2 years ago
• NozomiNetworks / upx-recovery-tool
  ☆96Updated last year
• repnz / apc-research
  APC Internals Research Code
  ☆158Updated 4 years ago