nhpcc502 / MBA-Obfuscator
Non-linear Mixed Boolean-Arithmetic Expressions
☆56Updated 6 months ago
Related projects ⓘ
Alternatives and complementary repositories for MBA-Obfuscator
- Port of MBA Solver SiMBA to C/C++☆76Updated this week
- Assets for the "Tickling VMProtect with LLVM" blog post.☆141Updated 3 years ago
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆118Updated 11 months ago
- Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions☆144Updated last year
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆98Updated 2 months ago
- Obfuscator based on logic-bombs☆65Updated 4 years ago
- MBA deobfuscator via Program Synthesis and Term Rewriting☆47Updated 7 months ago
- Binary Ninja plugin for automating VMProtect analysis☆56Updated last year
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆58Updated 3 months ago
- PoC for a taint based attack on VMProtect☆109Updated 5 years ago
- ☆92Updated 3 years ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆73Updated this week
- A Generalized Dynamic Opaque Predicate Obfuscator☆45Updated 8 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆115Updated last year
- VM devirtualization PoC based on AsmJit and llvm☆103Updated 3 years ago
- ☆90Updated 4 years ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆71Updated 4 years ago
- Lifting from native architecture to VTIL. (WIP)☆72Updated 2 years ago
- A deobfuscation plugin for IDA☆59Updated 2 years ago
- Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions☆54Updated last week
- fix vmprotect import function used unicorn-engine.☆91Updated last year
- Toy LLVM obfuscator pass☆69Updated 3 years ago
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆62Updated 3 years ago
- ☆109Updated 2 months ago
- A documentation of several Tigress obfuscation passes and an attempt to simplify Mixed Boolean-Arithmetic (MBA) expressions.☆21Updated 2 years ago
- Control-flow-flattening and string deobfuscator☆145Updated 3 years ago
- MODeflattener deobfuscates control flow flattened functions obfuscated by OLLVM using Miasm.☆165Updated 3 years ago
- Small programs and scripts that do not require their own repositories☆129Updated 2 years ago