Bunch of techniques potentially used by malware to detect analysis environments
☆160Jul 4, 2016Updated 10 years ago
Alternatives and similar repositories for anti-analysis-tricks
Users that are interested in anti-analysis-tricks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.☆286May 24, 2016Updated 10 years ago
- capstone based disassembler for extracting to binnavi☆230Jun 8, 2016Updated 10 years ago
- Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools☆463Nov 22, 2018Updated 7 years ago
- A malware sandoxed with gdb☆15Jun 27, 2016Updated 10 years ago
- Reverse Engineering and Exploit Development stuff☆31Mar 8, 2018Updated 8 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- MalRecon - Basic Malware Reconnaissance and Analysis Tool☆26Jun 8, 2017Updated 9 years ago
- Distributing the REconstruction of High-Level IR for Large Scale Malware Analysis☆65Sep 15, 2015Updated 11 years ago
- Exposing the Neutrino EK: All the Naughty Bits (BSidesLV16)☆16Oct 10, 2016Updated 10 years ago
- Python Malware Crawler for Zoos and Repositories☆111Apr 9, 2018Updated 8 years ago
- rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested …☆11Apr 2, 2016Updated 10 years ago
- PyAna - Analyzing the Windows shellcode☆247Feb 16, 2016Updated 10 years ago
- Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw☆141Apr 4, 2017Updated 9 years ago
- map file generator for intel x86 binary based on flirt signature☆84May 2, 2016Updated 10 years ago
- Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton☆63Aug 5, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Small tool for disassembling shellcode (using objdump)☆149Jun 19, 2022Updated 4 years ago
- A place holder for Keystone repo. See https://github.com/keystone-engine/keystone for the real stuff☆68Apr 8, 2022Updated 4 years ago
- Packed Malware Analyzer (PACKMAN)☆12Jan 31, 2016Updated 10 years ago
- Linux bind shell with anti-reverse engineering techniques☆294Feb 9, 2017Updated 9 years ago
- Scripts for dealing with various ek's☆68Feb 2, 2017Updated 9 years ago
- Any useful windbg plugins I've written.☆117Apr 10, 2018Updated 8 years ago
- inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extr…☆297Sep 30, 2023Updated 3 years ago
- POC of Mikrotik exploit from Vault 7 CIA Leaks☆15Dec 29, 2017Updated 8 years ago
- TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.☆392Apr 18, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Test suite for bypassing Malware sandboxes.☆39Oct 20, 2014Updated 12 years ago
- ☆22Mar 23, 2016Updated 10 years ago
- PoC for breaking hypervisor ASLR using branch target buffer collisions☆170Sep 24, 2016Updated 10 years ago
- ☆13Aug 12, 2015Updated 11 years ago
- BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.☆176Dec 1, 2022Updated 3 years ago
- Reversing Tools for IDA PRO☆15Jan 27, 2015Updated 11 years ago
- finals-2014☆20Nov 15, 2016Updated 9 years ago
- A static analyzer for PE executables.☆1,152Aug 29, 2026Updated 2 months ago
- Various snippets created during malware analysis☆466Oct 3, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll☆91Aug 22, 2016Updated 10 years ago
- Malware exploits☆572Aug 22, 2025Updated last year
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆385Apr 17, 2017Updated 9 years ago
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆150Oct 5, 2017Updated 9 years ago
- Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization☆146Jul 22, 2016Updated 10 years ago
- IDAPython plugin for finding Xrefs from a function☆47Jul 14, 2016Updated 10 years ago
- IDAPython script in order to auto-rename subs☆21May 17, 2017Updated 9 years ago