romangol / Armariries

Related projects ⓘ

Alternatives and complementary repositories for Armariries

• tum-i4 / dta-vs-osc
  Dynamic Taint Analysis versus Obfuscated Self-Checking
  ☆16Updated 3 years ago
• can1357 / llvm-patches
  Personal curation of Clang/LLVM patches.
  ☆13Updated 3 years ago
• Yuerino / obfuscator-pass
  A collection of LLVM passes for obfuscating
  ☆30Updated last year
• fplu / Detector
  A way to detect DBI frameworks, Debuggers and VMs.
  ☆22Updated 4 years ago
• ExpLife0011 / WinFaults
  A small header file mapping status codes passed to KiExceptionDispatch before KiPreprocessFault to individual CPU faults.
  ☆13Updated 5 years ago
• fvrmatteo / oracle-synthesis-meets-equality-saturation
  ☆21Updated 4 months ago
• megabytefisher / SilentBreakpoints
  a method for undetectable breakpoints in 32-bit Windows programs
  ☆13Updated 10 years ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated last year
• UNC1739 / CodeObfs
  ☆13Updated 4 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆20Updated 2 years ago
• yellowbyte / zero-footprint-opaque-predicates
  obfuscation that aims to not stand out
  ☆22Updated 2 years ago
• adutilleul / tigress-deobfuscation
  A documentation of several Tigress obfuscation passes and an attempt to simplify Mixed Boolean-Arithmetic (MBA) expressions.
  ☆21Updated 2 years ago
• ek0 / hxemu
  Triton based symbolic emulator
  ☆16Updated 2 years ago
• expend20 / llvm-ob-passes
  ☆16Updated last month
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• 9176324 / SyscallTable
  ☆30Updated 6 years ago
• za233 / AilProtect
  a code virtualizer based on angr
  ☆27Updated last year
• bilka00 / vmprotect_import_fixer
  Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)
  ☆16Updated 2 years ago
• Nerlant / SyscallDumper
  ☆19Updated 5 years ago
• Hypercall / COVM
  A lightweight x86/x64 VM
  ☆18Updated 3 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆22Updated 7 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆23Updated last year
• twevs / HighPCodeViewer
  Ghidra plugin that adds a window showing the high P-code for the current function.
  ☆14Updated last year
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆47Updated 3 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆57Updated last year
• Anal-Repair / Vmp3_utils
  ☆36Updated 2 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆23Updated 2 years ago