BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
☆129Dec 22, 2021Updated 4 years ago
Alternatives and similar repositories for bluepill
Users that are interested in bluepill are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆25Dec 8, 2021Updated 4 years ago
- Collection of DBI evasion techniques☆16Jan 25, 2022Updated 4 years ago
- Library to hide DBI artifacts when using Intel Pin. Code from the ASIA CCS 2019 paper "SoK: Using Dynamic Binary Instrumentation for Secu…☆24Nov 12, 2019Updated 6 years ago
- WhiteRabbitTracker: Analyzing malware evasions with information flow tracking☆20Jul 25, 2021Updated 5 years ago
- This is the home of the raindrop obfuscator. It transforms program functions into obfuscated ROP chains that coexist seamlessly with the …☆64Aug 11, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Slides and stuffs of the meetings during the 2018☆13Jan 18, 2022Updated 4 years ago
- A framework for static analysis of ROP exploits and programs☆41May 13, 2019Updated 7 years ago
- Group coding repository of PltCov, a tool to instrument ELF binaries for fuzzing with ngram coverage of imported APIs☆12Jan 18, 2022Updated 4 years ago
- Slides and stuffs of the meetings during the 2019☆33Jan 18, 2022Updated 4 years ago
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated last year
- VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.☆55Jan 16, 2020Updated 6 years ago
- Windows malware analysis logging tool.☆15May 28, 2016Updated 10 years ago
- This is a simple driver with x64 inline assembly☆55Jun 26, 2020Updated 6 years ago
- Binee: binary emulation environment☆531Feb 25, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Slides and stuffs of the meetings during the 2020.☆16Jan 18, 2022Updated 4 years ago
- A Pin Tool for tracing API calls etc☆1,713Jun 2, 2026Updated 4 months ago
- RopGun is a Linux implementation of a transparent ROP mitigation technique based on runtime detection of abnormal control transfers using…☆27Sep 10, 2019Updated 7 years ago
- Scripts targeting specific families☆13Jul 3, 2017Updated 9 years ago
- Final project for the M.Sc. in Engineering in Computer Science at Università degli Studi di Roma "La Sapienza" (A.Y. 2016/2017).☆35Oct 23, 2017Updated 9 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆127Sep 9, 2020Updated 6 years ago
- Malware Fragmentation Tool its a tool that simply fragment the PE file and it can disassemble the PE file, etc this tool very useful for…☆37Nov 22, 2015Updated 10 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆29Mar 30, 2019Updated 7 years ago
- Kernel mode windows NT API logger☆22Sep 9, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A fast, multithreaded, ROP-gadget semantics analyzer.☆51Feb 3, 2021Updated 5 years ago
- LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger☆220Nov 17, 2020Updated 5 years ago
- simply manual map any system image☆16Feb 1, 2021Updated 5 years ago
- Convert Windows PDB into JSON profile supported by DRAKVUF/LibVMI☆15May 29, 2026Updated 5 months ago
- A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research☆464Apr 10, 2023Updated 3 years ago
- Proof-of-concept code to reconstruct the GUI of a Xen guest running Windows☆14Sep 26, 2021Updated 5 years ago
- Anti-technique Codes, Detection of Anti-technique codes☆38Oct 27, 2013Updated 13 years ago
- Malware Behavior Analyzer☆157Jun 1, 2017Updated 9 years ago
- DRAKVUF Black-box Binary Analysis☆1,288Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- KVM-based Virtual Machine Introspection☆381Updated this week
- Code for the "Predictive Context-sensitive Fuzzing" NDSS'24 paper☆30Feb 29, 2024Updated 2 years ago
- Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins☆136Jan 6, 2019Updated 7 years ago
- IDA plugin for software complexity metrics assessment☆60Jan 4, 2018Updated 8 years ago
- Windows kernel and user mode emulation.☆2,096Updated this week
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- Malware vulnerability research. Coming soon..☆12Apr 20, 2020Updated 6 years ago