mez-0 / YaraEngineLinks
A C++ Yara Rule Runner
☆13Updated 3 years ago
Alternatives and similar repositories for YaraEngine
Users that are interested in YaraEngine are comparing it to the libraries listed below
Sorting:
- Compile shellcode into an exe file from Windows or Linux.☆71Updated 7 months ago
- ☆76Updated 2 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Updated 3 years ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆118Updated 2 years ago
- Standalone Metasploit-like XOR encoder for shellcode☆50Updated last year
- C# implementation to produce ROR-13 numeric hash for given function API name☆34Updated 6 years ago
- Golang bindings for PE-sieve☆42Updated 2 years ago
- Repo containing my public talks☆23Updated 2 years ago
- Python wrappers for mal_unpack☆37Updated 2 years ago
- Piece of code to detect and remove hooks in IAT☆65Updated 3 years ago
- Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/☆40Updated 4 years ago
- Small tool to play with IOCs caused by Imageload events☆44Updated 2 years ago
- A Bumblebee-inspired Crypter☆79Updated 3 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆124Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- Reverse Engineering and Debugging Malware☆32Updated 2 years ago
- A collection of Tools and Rules for decoding Brute Ratel C4 badgers☆66Updated 3 years ago
- Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…☆111Updated 11 months ago
- Embed an executable as a PE resource, drops and launches it in runtime.☆64Updated 4 years ago
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆87Updated 2 years ago
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆80Updated last year
- General malware analysis stuff☆37Updated last year
- ☆23Updated last year
- ☆89Updated last year
- Unpacker and Config Extractor for managed Redline Stealer payloads☆41Updated 2 years ago
- Batch script to compile a binary shellcode blob into an exe file☆89Updated 6 years ago
- (Sim)ulate (Ba)zar Loader☆29Updated 5 years ago
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆75Updated 4 years ago
- ☆37Updated 10 months ago
- Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE☆66Updated 2 years ago