merces / entropy
CLI program to calculate the entropy of files
☆71Updated last year
Alternatives and similar repositories for entropy:
Users that are interested in entropy are comparing it to the libraries listed below
- MalUnpack companion driver☆95Updated 9 months ago
- General malware analysis stuff☆36Updated 7 months ago
- Native Python3 bindings for @horsicq's Detect-It-Easy☆62Updated 2 weeks ago
- How to set up 2 VirtualBox VM to debug kernel driver using windbg☆54Updated 2 years ago
- A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.☆93Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆138Updated 2 years ago
- masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)☆119Updated last year
- Hiew External Module (HEM) to calculate CRC-32, MD5, SHA-1, and SHA-256 hashes of a given file/block☆40Updated 3 months ago
- A simple multiplatform command line search tool for Windows API.☆45Updated 3 weeks ago
- Small visualizator for PE files☆67Updated last year
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆163Updated 3 weeks ago
- Recon 2023 slides and code☆79Updated last year
- short crackme for Windows XP SP3 (32 bit version). ring0 stuff. IMO very fun x-)☆23Updated last year
- A collection of tools, source code, and papers researching Windows' implementation of CET.☆81Updated 4 years ago
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆70Updated 11 months ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆114Updated last year
- ☆70Updated 2 years ago
- ☆61Updated last year
- Set of antianalysis techniques found in malware☆129Updated last year
- Abusing exceptions for code execution.☆109Updated 2 years ago
- A Python script to download PDB files associated with a Portable Executable (PE)☆120Updated last month
- Parse .NET executable files.☆76Updated last month
- A post-processing script for TinyTracer☆38Updated 2 years ago
- Capture newly created files on Windows☆64Updated 3 years ago
- ☆34Updated 7 years ago
- Keep it secret, keep it safe☆77Updated last month
- Scripts to aid analysis of files obfuscated with ScatterBee.☆20Updated 2 years ago
- A command line Windows API tracing tool for Golang binaries.☆156Updated last year
- A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …☆142Updated 2 years ago
- Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks☆64Updated 3 years ago