mandiant / jitm
JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
☆50Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for jitm
- CTF writeups☆34Updated last week
- Dump .net assembly from a native loader which uses ClrCreateinstance☆53Updated 2 years ago
- ☆21Updated last year
- A small virtualizer for .NET which works together with ConfuserEx☆62Updated 5 years ago
- Universal unpacker and fixer for a number of modded ConfuserEx protections☆99Updated 4 years ago
- Simple x64dbg plugin to save a full memory dump☆49Updated 2 years ago
- Resolve DOS MZ executable symbols at runtime☆93Updated 3 years ago
- Devirtualizer for VirtualGuard Protector using AsmResolver☆37Updated last year
- ☆101Updated 2 years ago
- Yet another CawkVM unpacker...☆74Updated last year
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆73Updated 13 years ago
- A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET☆45Updated last year
- A newly programmed tool that will deobfuscate Agile.Net Obfuscation.☆72Updated 2 years ago
- Think APIMonitor, but for .NET binaries.☆53Updated last year
- VMProtect, VMP, Devirter, 3,5☆104Updated last year
- This is just a x64dbg script system support.☆45Updated 2 years ago
- fix vmprotect import function used unicorn-engine.☆92Updated last year
- Works with KoiVM/EazVM/AgileVM☆24Updated 5 years ago
- Deobfuscator for remove proxy calls methods☆21Updated last year
- An automatic tool for fixing dumped PE files☆41Updated 4 years ago
- DarksVM is a modified version of KoiVM, a complex ConfuserEx plugin that made it possible to virtualize methods and other data, increasin…☆32Updated 5 years ago
- Simple tool to extract and decompress embedded resources processed by Fody Costura☆63Updated 4 months ago
- VMP Mutation API Fix☆39Updated 2 years ago
- ☆32Updated 9 months ago
- JITK - JIT Killer is hooker for clrjit☆29Updated last year
- 🔎 Analysis of Oreans: Looking inside Themida, WinLicense, and CodeVirtualizer☆34Updated 4 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆42Updated 3 years ago
- ☆47Updated 3 years ago