Alternatives and similar repositories for idapython-cheatsheet:

Users that are interested in idapython-cheatsheet are comparing it to the libraries listed below

• Bigdrea6 / winapi-ghidra
  Make the Windows API in Ghidra easy to read and informative.
  ☆27Updated 3 years ago
• n01e0 / pRETzel_logic
  LLVM-based ROP obfuscated compiler
  ☆13Updated 3 years ago
• LAC-Japan / Ghidra_AntiDebugSeeker
  Automatically identify and extract potential anti-debugging techniques used by malware.
  ☆16Updated 4 months ago
• shuakabane / stelftools
  cross-architecture static library detector for IoT malware
  ☆36Updated last year
• AllsafeCyberSecurity / malware-analysis-at-scale-defeating-emotet-by-ghidra
  Ghidra Script for automated analysis of EMOTET
  ☆17Updated 4 years ago
• tandasat / UEFI-BIOS-Security
  Security Camp 2021 & GCC 2022
  ☆110Updated 2 years ago
• sophoslabs / emotet_unflatten_poc
  Modified python version of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to unflatten Emotet'S Control Flow Flattening
  ☆25Updated 2 years ago
• hugsy / recon_2024_windbg_workshop
  ☆73Updated 9 months ago
• Rupan / idapin
  A debugger backend for IDA Pro built on top of of Intel’s PIN framework
  ☆31Updated last year
• LJP-TW / JITHook
  ☆47Updated 2 years ago
• LAC-Japan / IDA_Plugin_AntiDebugSeeker
  Automatically identify and extract potential anti-debugging techniques used by malware.
  ☆152Updated 4 months ago
• OALabs / UnpacMe-IDA-Byte-Search
  UnpacMe IDA Byte Search
  ☆28Updated last year
• vmallet / ida-hex-highlighter
  Hex-Rays Block Highlighter plugin for IDA to highlight if/for/do/switch/while blocks
  ☆61Updated 2 years ago
• vmware-archive / HexRaysDeob
  Hex-Rays microcode API plugin for breaking an obfuscating compiler
  ☆82Updated 5 years ago
• govcert-ch / ConfuserEx_IDAPython
  IDA Python deobfuscation script for ConfuserEx binaries
  ☆35Updated 2 years ago
• mrphrazer / hitb2021ams_deobfuscation
  ☆72Updated 3 years ago
• eset / wslink-vm-analyzer
  WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
  ☆45Updated 2 years ago
• smallkirby / seccamp23c2-assets
  Assets used in lecture "手を動かして理解するLinux Kernel Exploit" at SecurityCamp2023.
  ☆13Updated last year
• n1ght-w0lf / QilingForMalwareAnalysis
  Code snippets for Qiling Tutorials
  ☆20Updated 4 years ago
• patois / FuncScanner
  Collects extended function properties from IDA Pro databases
  ☆93Updated 4 years ago
• msmania / procjack
  Not Another Code Injection Toolkit
  ☆16Updated 3 years ago
• cylance / winapi-deobfuscation
  Towards Generic Deobfuscation of Windows API Calls
  ☆50Updated 5 years ago
• idiom / stackstack
  ☆31Updated 2 years ago
• cxiao / ida-rust-untangler
  An IDA plugin which demangles Rust function names
  ☆32Updated last year
• codeblue-ctf / codeblue-2018
  ☆11Updated 5 years ago
• milankovo / YaraVM
  This repository contains an IDA processor for loading and disassembling compiled yara rules.
  ☆40Updated 3 months ago
• eset / stadeo
  Control-flow-flattening and string deobfuscator
  ☆148Updated 3 years ago
• patois / hexrays_scripts
  Various scripts for the Hexrays decompiler
  ☆94Updated last year
• LLVMParty / RemillWorkshop
  ☆47Updated last month
• ElvisBlue / emotet-deobfuscator
  IDA plugin to deobfuscate emotet CFF
  ☆17Updated 2 years ago