scmanjarrez / pymetangine
A python metamorphic engine for PE/PE+ files.
☆15Updated last year
Related projects ⓘ
Alternatives and complementary repositories for pymetangine
- Kernel Shellcode to add all privileges in token☆13Updated 7 years ago
- Static analysis tools for x86 assembly☆13Updated 7 years ago
- Plugin for x64dbg to break on unresolved APIs.☆12Updated 7 years ago
- Kernel-mode file scanner☆17Updated 6 years ago
- A wrapper for capstone for bearparser☆13Updated last year
- A collection of anti disassembly techniques☆18Updated 7 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆21Updated 7 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆26Updated 5 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆36Updated 3 years ago
- Simple PE packer with RtlCompressBuffer☆21Updated 9 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆18Updated 8 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 6 years ago
- Static library and headers for linking your software with ntdll.dll☆30Updated 4 years ago
- ☆10Updated 7 years ago
- hooking KiUserApcDispatcher☆22Updated 7 years ago
- ☆24Updated 8 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆52Updated 8 months ago
- ☆13Updated 7 years ago
- ☆16Updated 4 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆22Updated 7 years ago
- Proof of concept headless GUI DLL☆12Updated 3 years ago
- Toy approach to VMProtect virtualization☆15Updated 6 years ago
- Code Integrity Violation Spotter☆17Updated 5 months ago
- Using Undocumented NTDLL Functions to Read/Write/Delete File☆18Updated 3 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Updated 6 years ago
- Windows Application Loader Running *.Exe files in Memory against Scrylla☆21Updated 4 years ago