kkent030315 / detect-anyrunLinks
ANY.RUN sandbox detection collection
☆22Updated last year
Alternatives and similar repositories for detect-anyrun
Users that are interested in detect-anyrun are comparing it to the libraries listed below
Sorting:
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆108Updated 2 months ago
- WinApi Patcher is a straightforward tool leveraging windows API hooking to patch and modify certain behaviors in a targeted environment.☆43Updated last year
- An x64dbg plugin which helps make sense of long C++ symbols☆57Updated 2 years ago
- ☆28Updated 2 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆67Updated 3 months ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆45Updated last year
- Generate a PDB file given the old PDB file and an address mapping☆50Updated 4 months ago
- A journal for $6,000 Riot Vanguard bounty.☆66Updated 2 years ago
- devirtualization vmprotect☆63Updated 2 years ago
- dynamic binary instrumentation, analysis, and patching framework☆98Updated this week
- Header-only C++ library for producing PE files.☆35Updated 2 years ago
- monitors hidden syscalls called from call of duty anticheat☆87Updated 10 months ago
- LLVM based obfuscation engine☆108Updated 5 months ago
- windows rootkit☆60Updated last year
- Report and exploit of CVE-2024-21305.☆38Updated last year
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆131Updated last year
- Load dll with undocumented functions and debug symbols☆47Updated last year
- An improved version of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆74Updated 8 months ago
- An x86-64 code virtualizer for VM based obfuscation☆146Updated 11 months ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆59Updated last year
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆216Updated last month
- Integration of Microsoft Warbird with the MSVC compiler☆115Updated 2 years ago
- Small driver that uses alternative syscalls feature (the project is still under development).☆18Updated last year
- This repo contains EXPs about Vulnerable Windows Driver☆46Updated last year
- compile-time control flow obfuscation using mba☆199Updated 2 years ago
- ☆22Updated 11 months ago
- All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit☆26Updated 7 months ago
- A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.☆90Updated last month
- Me fockin' pe protector☆45Updated 3 years ago
- kASLR bypass technique on Intel CPUs.☆33Updated 6 months ago