mandiant / jitm
JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.
☆52Updated 4 years ago
Alternatives and similar repositories for jitm:
Users that are interested in jitm are comparing it to the libraries listed below
- CTF writeups☆35Updated 5 months ago
- Dump .net assembly from a native loader which uses ClrCreateinstance☆57Updated 2 years ago
- ☆23Updated last year
- Universal unpacker and fixer for a number of modded ConfuserEx protections☆105Updated 4 years ago
- A small virtualizer for .NET which works together with ConfuserEx☆65Updated 5 years ago
- A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET☆47Updated 2 years ago
- A newly programmed tool that will deobfuscate Agile.Net Obfuscation.☆71Updated 3 years ago
- Deobfuscator for remove proxy calls methods☆25Updated 2 years ago
- Devirtualizer for Eazfuscator.NET☆30Updated 7 years ago
- .NET Assemblies Deobfuscator.☆64Updated 2 years ago
- ☆102Updated 2 years ago
- Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI☆79Updated 3 years ago
- Babel-Deobfuscator is an open-source deobfuscator for Babel Obfuscator.☆40Updated 4 years ago
- DarksVM is a modified version of KoiVM, a complex ConfuserEx plugin that made it possible to virtualize methods and other data, increasin…☆33Updated 5 years ago
- Resolve DOS MZ executable symbols at runtime☆95Updated 3 years ago
- StringsAnalyzer is a simple, yet powerful plugin for analyzing string literals in .NET assemblies within dnSpy. It provides a comprehensi…☆62Updated 4 months ago
- Utility that tries to generate every single CIL opcode possible in a valid context.☆27Updated 2 years ago
- Simple tool to extract and decompress embedded resources processed by Fody Costura☆69Updated 9 months ago
- Static Obfuscar Deobfuscator☆22Updated 5 years ago
- A library to decode EazFuscator's encrypted symbol names, if you have the password.☆42Updated 5 years ago
- Yet another CawkVM unpacker...☆77Updated 2 years ago
- JITK - JIT Killer is hooker for clrjit☆29Updated 2 years ago
- Simple Controlflow Deobfuscator for .NET Reactor 6.7.0.0☆16Updated 3 years ago
- Think APIMonitor, but for .NET binaries.☆55Updated 2 years ago
- A really basic emulator to understand how IL code works.☆56Updated 3 years ago
- fix vmprotect import function used unicorn-engine.☆92Updated 2 years ago
- Decrypts strings dynamically, using https://github.com/Washi1337/AsmResolver☆28Updated 4 years ago
- A simple dnSpy extension for easily renaming members.☆18Updated last year
- ☆31Updated 4 years ago
- Extracts the files embedded inside of a .NET AppHost.☆18Updated 8 months ago