ricardojrdez / anti-analysis-tricks
Bunch of techniques potentially used by malware to detect analysis environments
☆159Updated 8 years ago
Alternatives and similar repositories for anti-analysis-tricks:
Users that are interested in anti-analysis-tricks are comparing it to the libraries listed below
- ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.☆285Updated 8 years ago
- C++ application that uses memory and code hooks to detect packers☆270Updated 7 years ago
- ☆91Updated 8 years ago
- A tool to detect and crash Cuckoo Sandbox☆293Updated 9 months ago
- ATrace is a tool for tracing execution of binaries on Windows.☆238Updated 8 years ago
- Small tool for generating ropchains using unicorn and z3☆197Updated 7 years ago
- I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016☆163Updated 8 years ago
- capstone based disassembler for extracting to binnavi☆227Updated 8 years ago
- kernel exploitation helper class☆77Updated 8 years ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆135Updated 8 years ago
- grap: define and match graph patterns within binaries☆170Updated 4 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆263Updated 7 years ago
- Binary Ninja plugin to decompile binaries using RetDec API☆162Updated 6 years ago
- A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.☆405Updated 10 years ago
- Simple shellcode decoder using unicorn-engine☆99Updated 9 years ago
- hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols☆170Updated 6 years ago
- An open source, multi-architecture ROP compiler written in python☆161Updated 7 years ago
- Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection☆81Updated 8 years ago
- A search tool for IDA☆70Updated 8 years ago
- C++-based shellcode builder☆112Updated 4 years ago
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆150Updated 7 years ago
- Cross Architecture Shellcode in C☆200Updated 8 years ago
- A Tool to Unpack Self-Modifying Code using DynamoRIO☆141Updated 8 years ago
- Python scripts for reverse engineering.☆183Updated 3 years ago
- Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )☆132Updated 9 years ago
- CaptainHook is perfect x86/x64 hook environment☆104Updated 8 years ago
- Example code from "Programming Linux Anti-Reversing Techniques"☆97Updated 8 years ago
- Basic command line, text-based, shellcode debugger.☆92Updated 7 years ago
- Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia…☆88Updated last year
- ☆114Updated 8 years ago