Reverse engineering malware samples
☆16Dec 3, 2021Updated 4 years ago
Alternatives and similar repositories for malware-anlaysis
Users that are interested in malware-anlaysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- Utilizing DLang For Offensive Operations.☆15May 29, 2025Updated last year
- Near compile-time string obfuscation for Golang☆13Oct 3, 2023Updated 2 years ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- A tool to read and encrypt shellcode (.bin) and display encrypted bytes as output to be copied in Injectors for evasion☆16Dec 21, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A runtime Assembly dumper for powershell to combat the rise in .net based crypters and malware.☆17Aug 26, 2025Updated last year
- HardwareTurningPoint, Fully Go Compatible Hardware Breakpoint☆15Jan 30, 2025Updated last year
- OFFZONE 2024 Malware Persistence workshop☆23Dec 18, 2024Updated last year
- Spoof the return address of any function call.☆11Jul 21, 2024Updated 2 years ago
- Lightweight Patchless Hooking Library for Windows☆20Dec 31, 2025Updated 8 months ago
- semi-auto static deobfuscator for functions which is obfuscated by lazy importer.☆16Nov 27, 2024Updated last year
- Deobfuscator for : https://github.com/Blank-c/BlankOBF☆13Aug 21, 2023Updated 3 years ago
- golang decryption poc of the new app bound encryption introduced in chrome version 127.☆21Nov 4, 2024Updated last year
- Dynamic COFF object loader☆23Jun 29, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool written in golang which compress using UPX and patch it with the provided PE file to make "UPX -d" flag impossible to decompress a…☆30Jan 2, 2025Updated last year
- Perfect way to spoof SMBios serials before bootx64.efi ( UEFI )☆20Updated this week
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- extract chromium-based browser's cookies using chrome's remote debugging without admin rights☆23Nov 3, 2024Updated last year
- The first open source runtime windows batch and command line deobfuscator☆50Jun 23, 2026Updated 3 months ago
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- Javascript keylogger in a chrome extension that sends keystrokes to discord☆11Jan 5, 2024Updated 2 years ago
- Windows Kernel API wrapper with simplified functions and enterprise driver extensions.☆35Jul 8, 2025Updated last year
- Discord HTTP requests interception POC, including backup codes requests, for educational purposes only.☆24Jul 11, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.☆21Feb 20, 2021Updated 5 years ago
- ☆37Nov 8, 2024Updated last year
- ☆33Oct 19, 2024Updated last year
- A tool designed to hook into Windows applications and output named (and anonymous?) pipe traffic.☆18Feb 27, 2024Updated 2 years ago
- Golang bindings for the Binary Ninja Arm64 Disassembler.☆15Updated this week
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆53Dec 22, 2025Updated 9 months ago
- ATL.dll and WmiMgmt.msc UAC Bypass☆12Apr 26, 2025Updated last year
- IDA Python scripts☆39Apr 11, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An IDA plugin to deobfuscate Pikabot's strings using RC4 and AES☆13Apr 8, 2024Updated 2 years ago
- Exodus and Atomic crypto wallets app.asar injection POC (captures mnemonic and password) for educational purposes only.☆28Jul 3, 2024Updated 2 years ago
- [WIP] A FOSS hook-powered HIPS for Windows / 火绒文件防御功能开源实现☆12Sep 3, 2026Updated 3 weeks ago
- an open source python deobfuscator for pyobfuscate.com☆41Jul 28, 2024Updated 2 years ago
- 驱动开发工具包☆11Dec 8, 2018Updated 7 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆16Apr 10, 2024Updated 2 years ago
- CTF writeups by ./Vespiary☆15Nov 12, 2023Updated 2 years ago