IDA Python scripts
☆41Apr 11, 2025Updated last year
Alternatives and similar repositories for IDAPython
Users that are interested in IDAPython are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Configuration Extractors for Malware☆128Oct 22, 2026Updated 3 weeks ago
- Plugin for NOPing instructions in IDA☆21May 9, 2024Updated 2 years ago
- Repository of Sigma Rules☆11Apr 20, 2025Updated last year
- IOCs and notes related to malware☆28Jul 7, 2025Updated last year
- Repository of Yara Rules☆154Oct 22, 2026Updated 3 weeks ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- CTF source code(s) from multiple websites.☆10May 4, 2025Updated last year
- ☆12Oct 22, 2026Updated 3 weeks ago
- ☆34Oct 20, 2026Updated 3 weeks ago
- Source Code of MSIL Ransom☆13Feb 11, 2023Updated 3 years ago
- A tool to unpack installers created by Inno Setup☆11Oct 21, 2024Updated 2 years ago
- ☆28Aug 25, 2025Updated last year
- ConfuserEx2 String Decryptor & Full Deobfuscation Guide☆105Aug 5, 2024Updated 2 years ago
- A portfolio demonstrating advanced blue and red team skills, including: SSH MFA implementation, Volatility-based memory forensics to dete…☆24Oct 19, 2025Updated last year
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- iOS Syscall Explorer for IDA 9.X☆15May 26, 2026Updated 5 months ago
- IDA Python deobfuscation script for ConfuserEx binaries☆33Sep 15, 2022Updated 4 years ago
- ☆67Sep 10, 2026Updated 2 months ago
- A simple macOS debugger detection trick☆19Apr 7, 2025Updated last year
- IDA Map File Symbol Renamer☆26Apr 1, 2025Updated last year
- CVE-2024-35250 的 Beacon Object File (BOF) 实现。☆25Nov 28, 2024Updated last year
- Export IDA microcode to BinExport format so that you can use BinDiff to diff microcodes☆12Sep 21, 2024Updated 2 years ago
- OFFZONE 2024 Malware Persistence workshop☆25Dec 18, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Reverse engineering malware samples☆16Dec 3, 2021Updated 4 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆35Mar 28, 2023Updated 3 years ago
- ☆29Oct 15, 2025Updated last year
- Execute shellcode via ASPNET compiler☆61Oct 2, 2025Updated last year
- ☆35Jul 28, 2026Updated 3 months ago
- Plugin for ida pro that copies RVA under cursor to clipboard.☆18Jul 28, 2023Updated 3 years ago
- APT techniques: Token theft via UpdateProcThreadAttribute. C++ implementation☆11Oct 29, 2022Updated 4 years ago
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Jun 5, 2023Updated 3 years ago
- Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise — WAV steganography, credential stealer, Windows persi…☆21Mar 29, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automated script for obfuscating, rebranding and renaming the Havoc C2 Framework to evade AV/EDR and C2 hunters.☆52Aug 13, 2025Updated last year
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- Neutralize KEPServerEX anti-debugging techniques☆33Feb 15, 2023Updated 3 years ago
- Behavorial analysis of malware using machine learning☆16Mar 13, 2018Updated 8 years ago
- The different ways to dump lsass☆290Jul 19, 2026Updated 3 months ago
- IDA plugin: fold decomplied code☆11Nov 26, 2021Updated 4 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆15Apr 25, 2022Updated 4 years ago
Are these results useful?