A command line Windows API tracing tool for Golang binaries.
☆159Dec 4, 2023Updated 2 years ago
Alternatives and similar repositories for gftrace
Users that are interested in gftrace are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- General malware analysis stuff☆37Aug 26, 2024Updated 2 years ago
- ☆12Oct 10, 2026Updated 3 weeks ago
- Resources from Trend Micro Research teams☆26Nov 14, 2024Updated last year
- ☆22Sep 25, 2023Updated 3 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆129Jul 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆893Feb 2, 2024Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆142Sep 19, 2022Updated 4 years ago
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆105Updated this week
- Hiew External Module (HEM) to calculate CRC-32, MD5, SHA-1, and SHA-256 hashes of a given file/block☆43Jun 18, 2026Updated 4 months ago
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆180Updated this week
- DateTime Library - a library written in assembler (for x86 and x64) which provides simple date and time conversion, manipulation and comp…☆17Apr 11, 2024Updated 2 years ago
- Conteúdo do treinamento/brainstorming Introdução a engenharia reversa no Windows feito com muito carinho por mim.☆20Oct 13, 2022Updated 4 years ago
- Use Prolog to analyze memory dumps and stopped live processes in WinDbg.☆15Oct 20, 2026Updated 2 weeks ago
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆268Apr 29, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Malduck is your ducky companion in malware analysis journeys☆357Jun 22, 2025Updated last year
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆84Jun 28, 2023Updated 3 years ago
- Multiplatform CLI and GUI tool to show information about ELF files☆70Jul 1, 2025Updated last year
- A simple multiplatform command line search tool for Windows API.☆48Mar 7, 2025Updated last year
- Quickly debug shellcode extracted during malware analysis☆641May 23, 2023Updated 3 years ago
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- ☆24Oct 30, 2024Updated 2 years ago
- Full Deobfuscator for PEUnion 4.0.0 (.NET & PE32)☆24Apr 21, 2022Updated 4 years ago
- Symbol hash for ELF files☆117Feb 9, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- The Intel 8080 ("eighty-eighty") is the second 8-bit microprocessor designed and manufactured by Intel.☆15May 25, 2022Updated 4 years ago
- Standalone Go implementation of Metasploit's "db_nmap" and "db_import" commands.☆20Nov 6, 2024Updated last year
- Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.☆45Sep 2, 2022Updated 4 years ago
- paste string formatted byte data block into x64dbg easy.☆41Jan 2, 2021Updated 5 years ago
- ☆146Jun 20, 2026Updated 4 months ago
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 5 months ago
- Go symbol recovery tool☆1,123Sep 14, 2026Updated last month
- Graphical interface for PortEx, a Portable Executable and Malware Analysis Library☆194Oct 21, 2026Updated 2 weeks ago
- Basic Deobfuscator for SaintFuscator, Using CCFlow with this tool is recommended☆17Jun 4, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Pin Tool for tracing API calls etc☆1,715Jun 2, 2026Updated 5 months ago
- ☆29Nov 14, 2022Updated 3 years ago
- Windows kernel and user mode emulation.☆2,101Updated this week
- Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions☆199Oct 12, 2023Updated 3 years ago
- Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com☆427Oct 5, 2026Updated 3 weeks ago
- IDApython Scripts for Analyzing Golang Binaries☆675Aug 8, 2024Updated 2 years ago
- Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.☆294May 27, 2024Updated 2 years ago