Parse .NET executable files.
☆88Apr 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for dnfile
Users that are interested in dnfile are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆175Updated this week
- ☆27Sep 13, 2023Updated 2 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆120Apr 8, 2023Updated 3 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆17Oct 8, 2016Updated 9 years ago
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Jun 14, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆118Feb 13, 2026Updated 3 months ago
- An extremely experimental Binary Ninja importer for the type layout information emitted by the -Zprint-type-sizes flag of the Rust compil…☆39Mar 19, 2026Updated 2 months ago
- Collection of generic YARA rules☆16Mar 18, 2026Updated 2 months ago
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated last year
- A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL☆142Mar 24, 2024Updated 2 years ago
- Dynamic unpacker based on PE-sieve☆813Apr 14, 2026Updated last month
- Generates YARA rules to detect malware using API hashing☆17Mar 16, 2021Updated 5 years ago
- CLI tool to compute the TypeRefHash for .NET binaries.☆19Nov 10, 2021Updated 4 years ago
- Anything related to Ghidra☆12Apr 22, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A collection of ready-to-use library code and symbols for the MinHash-based Code Relationship & Investigation Toolkit (MCRIT)☆12Dec 10, 2025Updated 5 months ago
- Capa analysis importer for Ghidra.☆64Dec 2, 2020Updated 5 years ago
- A little implant which SSH's back with a shell☆39Feb 1, 2022Updated 4 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆170Aug 23, 2024Updated last year
- A Rust library along with a Win32 GUI application to determine the driver load order of a Windows system (cf. https://colinfinck.de/posts…☆13Jan 26, 2025Updated last year
- An IDA Pro extension for easier (malware) reverse engineering☆115Aug 2, 2022Updated 3 years ago
- ☆16Apr 30, 2024Updated 2 years ago
- Specialized tool to dump Position Independent Code.☆22Aug 4, 2020Updated 5 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆126Jul 12, 2024Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆38Jan 3, 2022Updated 4 years ago
- really ?☆12Feb 29, 2024Updated 2 years ago
- Deobfuscator for remove proxy calls methods☆27Jan 30, 2023Updated 3 years ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆28Feb 15, 2022Updated 4 years ago
- An automatic unpacker and logger for DotNet Framework targeting files☆268Aug 23, 2023Updated 2 years ago
- GreenLambert macOS IDA plugin to deobfuscate strings☆14Oct 4, 2021Updated 4 years ago
- ConventionEngine - A Yara Rulepack for PDB Path Hunting☆37Mar 15, 2023Updated 3 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Jun 28, 2023Updated 2 years ago
- Binary Ninja plugin to identify obfuscated code and other interesting code constructs☆654Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A golang CLI tool to download malware from a variety of sources.☆151Jul 3, 2025Updated 10 months ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Apr 10, 2022Updated 4 years ago
- Trigram database written in C++, suited for malware indexing☆130Jan 26, 2026Updated 3 months ago
- all credits go to @mgeeky☆65Oct 14, 2021Updated 4 years ago
- a IDA plugin helps you to manage your IDA Comments☆26Sep 30, 2024Updated last year
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆24May 29, 2023Updated 2 years ago
- The following repository contains a modified version of SUNBURST with cracekd hashes, comments and annotations.☆56Dec 23, 2020Updated 5 years ago