hexfati / SharpDllLoader

Related projects ⓘ

Alternatives and complementary repositories for SharpDllLoader

• advanced-threat-research / DotDumper
  An automatic unpacker and logger for DotNet Framework targeting files
  ☆248Updated last year
• malwarefrank / dnfile
  Parse .NET executable files.
  ☆74Updated 3 weeks ago
• hasherezade / pe_unmapper
  Small tool to convert beteween the PE alignments (raw and virtual).
  ☆81Updated last year
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆113Updated last year
• LAC-Japan / IDA_Plugin_AntiDebugSeeker
  Automatically identify and extract potential anti-debugging techniques used by malware.
  ☆116Updated 2 weeks ago
• OALabs / hashdb-ida
  HashDB API hash lookup plugin for IDA Pro
  ☆296Updated 3 weeks ago
• d35ha / xLogger
  Simple windows API logger
  ☆98Updated 5 years ago
• PI-Defender / pi-defender
  Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.
  ☆147Updated 2 years ago
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆180Updated 2 weeks ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated 10 months ago
• mandiant / dncil
  The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.
  ☆158Updated this week
• pan-unit42 / dotnetfile
  ☆99Updated 11 months ago
• enkomio / thematrix
  a PE Loader and Windows API tracer. Useful in malware analysis.
  ☆137Updated 2 years ago
• KasperskyLab / Apihashes
  IDA Pro plugin for recognizing known hashes of API function names
  ☆81Updated 2 years ago
• etormadiv / HostingCLR
  Executing a .NET Assembly from C++ in Memory (CLR Hosting)
  ☆186Updated 7 years ago
• mandiant / jitm
  JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
  ☆49Updated 3 years ago
• jeremybeaume / packer-tutorial
  Files for the packer tutorial
  ☆69Updated 3 years ago
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆223Updated 3 months ago
• kevoreilly / capemon
  capemon: CAPE's monitor
  ☆100Updated 2 weeks ago
• NozomiNetworks / upx-recovery-tool
  ☆96Updated last year
• Dewera / Pluto
  A manual system call library that supports functions from both ntdll.dll and win32u.dll
  ☆107Updated last year
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆328Updated last week
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆109Updated 3 months ago
• hasherezade / antianalysis_demos
  Set of antianalysis techniques found in malware
  ☆129Updated last year
• pathtofile / PPLRunner
  Run Processes as PPL with ELAM
  ☆146Updated 2 years ago
• xuanxuan0 / TiEtwAgent
  PoC memory injection detection agent based on ETW, for offensive and defensive research purposes
  ☆253Updated 3 years ago
• rajiv2790 / FalconEye
  ☆290Updated 3 years ago
• fkie-cad / RoAMer
  Robust Automated Malware Unpacker
  ☆84Updated last year
• danielplohmann / idascope
  An IDA Pro extension for easier (malware) reverse engineering
  ☆110Updated 2 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆258Updated 3 weeks ago