Reverse engineering malware samples
☆16Dec 3, 2021Updated 4 years ago
Alternatives and similar repositories for malware-anlaysis
Users that are interested in malware-anlaysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- Utilizing DLang For Offensive Operations.☆15May 29, 2025Updated last year
- Near compile-time string obfuscation for Golang☆13Oct 3, 2023Updated 2 years ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated 11 months ago
- A tool to read and encrypt shellcode (.bin) and display encrypted bytes as output to be copied in Injectors for evasion☆16Dec 21, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A runtime Assembly dumper for powershell to combat the rise in .net based crypters and malware.☆18Aug 26, 2025Updated 11 months ago
- HardwareTurningPoint, Fully Go Compatible Hardware Breakpoint☆14Jan 30, 2025Updated last year
- OFFZONE 2024 Malware Persistence workshop☆23Dec 18, 2024Updated last year
- Spoof the return address of any function call.☆11Jul 21, 2024Updated 2 years ago
- semi-auto static deobfuscator for functions which is obfuscated by lazy importer.☆16Nov 27, 2024Updated last year
- Lightweight Patchless Hooking Library for Windows☆20Dec 31, 2025Updated 7 months ago
- Deobfuscator for : https://github.com/Blank-c/BlankOBF☆13Aug 21, 2023Updated 2 years ago
- golang decryption poc of the new app bound encryption introduced in chrome version 127.☆21Nov 4, 2024Updated last year
- Dynamic COFF object loader☆23Jun 29, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A tool written in golang which compress using UPX and patch it with the provided PE file to make "UPX -d" flag impossible to decompress a…☆30Jan 2, 2025Updated last year
- Perfect way to spoof SMBios serials before bootx64.efi ( UEFI )☆18May 14, 2025Updated last year
- CTF source code(s) from multiple websites.☆10May 4, 2025Updated last year
- Shellcode capable of bypassing EAF / IAF mitigations☆30Apr 11, 2023Updated 3 years ago
- Clumsy 0.3 with keybinds☆11Apr 16, 2024Updated 2 years ago
- extract chromium-based browser's cookies using chrome's remote debugging without admin rights☆23Nov 3, 2024Updated last year
- The first open source runtime windows batch and command line deobfuscator☆50Jun 23, 2026Updated last month
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- Javascript keylogger in a chrome extension that sends keystrokes to discord☆11Jan 5, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows Kernel API wrapper with simplified functions and enterprise driver extensions.☆35Jul 8, 2025Updated last year
- Discord HTTP requests interception POC, including backup codes requests, for educational purposes only.☆23Jul 11, 2024Updated 2 years ago
- Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.☆21Feb 20, 2021Updated 5 years ago
- ☆37Nov 8, 2024Updated last year
- ☆33Oct 19, 2024Updated last year
- Header only library for obfuscation import winapi functions.☆43Feb 12, 2025Updated last year
- A tool designed to hook into Windows applications and output named (and anonymous?) pipe traffic.☆17Feb 27, 2024Updated 2 years ago
- Golang bindings for the Binary Ninja Arm64 Disassembler.☆15Mar 16, 2026Updated 5 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 6 months ago
- An IDA plugin to deobfuscate Pikabot's strings using RC4 and AES☆13Apr 8, 2024Updated 2 years ago
- Exodus and Atomic crypto wallets app.asar injection POC (captures mnemonic and password) for educational purposes only.☆27Jul 3, 2024Updated 2 years ago
- [WIP] A FOSS hook-powered HIPS for Windows / 火绒文件防御功能开源实现☆11Updated this week
- an open source python deobfuscator for pyobfuscate.com☆41Jul 28, 2024Updated 2 years ago
- 驱动开发工具包☆11Dec 8, 2018Updated 7 years ago
- sample bypass anti-anti-debug tool by race condition☆25Aug 2, 2022Updated 4 years ago