ricardojrdez / anti-analysis-tricks
Bunch of techniques potentially used by malware to detect analysis environments
☆159Updated 8 years ago
Alternatives and similar repositories for anti-analysis-tricks
Users that are interested in anti-analysis-tricks are comparing it to the libraries listed below
Sorting:
- ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.☆286Updated 8 years ago
- C++ application that uses memory and code hooks to detect packers☆270Updated 7 years ago
- ATrace is a tool for tracing execution of binaries on Windows.☆238Updated 8 years ago
- Small tool for generating ropchains using unicorn and z3☆198Updated 7 years ago
- ☆91Updated 8 years ago
- I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016☆163Updated 8 years ago
- A tool to detect and crash Cuckoo Sandbox☆293Updated 9 months ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆135Updated 8 years ago
- Binary Ninja plugin to decompile binaries using RetDec API☆162Updated 6 years ago
- grap: define and match graph patterns within binaries☆171Updated 4 years ago
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆263Updated 7 years ago
- Using WinDBG to tap into JavaScript and help with deobfuscation and browser exploit detection☆82Updated 8 years ago
- A search tool for IDA☆70Updated 8 years ago
- hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols☆171Updated 6 years ago
- kernel exploitation helper class☆77Updated 8 years ago
- capstone based disassembler for extracting to binnavi☆228Updated 8 years ago
- Cosa Nostra, a FOSS graph based malware clusterization toolkit.☆230Updated last year
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆434Updated 6 years ago
- Simple shellcode decoder using unicorn-engine☆98Updated 9 years ago
- Collection Of Anti-Debugging Tricks☆99Updated 9 years ago
- "Just Another ReVersIng Suite" or whatever other bullshit you can think of☆150Updated 2 years ago
- Linux bind shell with anti-reverse engineering techniques☆287Updated 8 years ago
- A kernel driver to practice writing exploits against, as well as some example exploits using public techniques.☆405Updated 10 years ago
- Semantic Binary Code Analysis Framework☆124Updated 9 years ago
- A Tool to Unpack Self-Modifying Code using DynamoRIO☆141Updated 8 years ago
- Basic command line, text-based, shellcode debugger.☆91Updated 7 years ago
- Cross Architecture Shellcode in C☆200Updated 8 years ago
- An open source, multi-architecture ROP compiler written in python☆162Updated 7 years ago
- Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )☆132Updated 9 years ago
- Content from presentation at BHUSA 2017☆180Updated 7 years ago