s3team / gdop
A Generalized Dynamic Opaque Predicate Obfuscator
☆45Updated 8 years ago
Related projects: ⓘ
- ☆76Updated 2 years ago
- PoC for a taint based attack on VMProtect☆108Updated 5 years ago
- ☆71Updated 3 years ago
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆66Updated 5 years ago
- Build your emulation environment as needed☆64Updated 3 years ago
- Toy LLVM obfuscator pass☆69Updated 3 years ago
- This repo contains the tests and results that were done during the research of SATURN☆36Updated 3 years ago
- LLVM Obfuscation Pass via Extracted Basic Blocks☆21Updated 5 years ago
- IDA script for vmprotect Windows Api address decoder☆51Updated 3 years ago
- Small programs and scripts that do not require their own repositories☆125Updated 2 years ago
- ☆63Updated last year
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆60Updated 3 years ago
- Obfuscator based on logic-bombs☆65Updated 4 years ago
- Library for Capstone instruction to LLVM IR translation☆41Updated 6 years ago
- Non-linear Mixed Boolean-Arithmetic Expressions☆55Updated 5 months ago
- ☆46Updated 2 years ago
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆115Updated 9 months ago
- VMX intrinsics plugin for Hex-Rays decompiler☆69Updated 4 years ago
- Port of MBA Solver SiMBA to C/C++☆73Updated this week
- ☆27Updated 6 years ago
- Modified python version of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to unflatten Emotet'S Control Flow Flattening☆24Updated 2 years ago
- Futile attempt to solve the Tigress challenges using angr☆22Updated 5 years ago
- TTexplore is a library that performs path exploration on binary code using symbolic execution☆72Updated last year
- Emulation Wrapper Solution is a IDA Pro plugin that brings emulator capacities to provide features such as debugging an mocking.☆14Updated last year
- Decode machine code into VEX IR and translate into LLVM IR☆25Updated 5 years ago
- Collects extended function properties from IDA Pro databases☆92Updated 3 years ago
- MBA-Blast is a tool for simplification of MBA expressions.☆57Updated 3 years ago
- Greybox Synthesizer geared for deobfuscation of assembly instructions.☆137Updated 10 months ago
- Xyntia, the black-box deobfuscator☆61Updated last year
- ☆18Updated 2 months ago