ELF static analysis and injection framework that parse, manipulate, patch and camouflage ELF files.
☆144Jan 28, 2026Updated last month
Alternatives and similar repositories for elfspirit
Users that are interested in elfspirit are comparing it to the libraries listed below
Sorting:
- Use Markdown content on your site by combining it with HTML! Implemented from scratch with 100% syntax support.☆16Apr 11, 2025Updated 10 months ago
- Adds a layer on top of IDA Python to make it easier to write scripts☆29Updated this week
- ☆12Jan 18, 2026Updated last month
- ☆13Dec 20, 2023Updated 2 years ago
- Redirects a specified API for a one time execution of code upon injection into a process.☆15Nov 24, 2020Updated 5 years ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆146Dec 6, 2025Updated 2 months ago
- Pure-Python x86 disassembler, ported to modern Python, with bugfixes☆26Jan 24, 2018Updated 8 years ago
- A collection of position independent coding resources☆107Nov 15, 2025Updated 3 months ago
- Elastic Security Labs' malware analysis and reverse engineering library☆52Feb 13, 2026Updated 2 weeks ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆766Sep 29, 2025Updated 5 months ago
- Kernel mode to user mode so injection☆93Nov 6, 2020Updated 5 years ago
- DateTime Library - a library written in assembler (for x86 and x64) which provides simple date and time conversion, manipulation and comp…☆19Apr 11, 2024Updated last year
- ☆38Feb 20, 2023Updated 3 years ago
- 操作系统大作业：ELF文件注入☆28Jun 2, 2018Updated 7 years ago
- An Obfuscator-LLVM based mingw-w64 toolchain.☆46Dec 9, 2021Updated 4 years ago
- Dump Teams conversations☆18Jun 9, 2021Updated 4 years ago
- ☆36Jul 1, 2025Updated 8 months ago
- Request device ticket/token using the device's MSA☆38Aug 25, 2025Updated 6 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- Symbolic executor for Binary Ninja's MLIL☆25Oct 3, 2024Updated last year
- rust port of pspy with support for process monitoring over dbus☆35Jan 4, 2026Updated last month
- Hook native with xposed☆18Mar 4, 2022Updated 3 years ago
- A simple ptrace-less shared library injector for x64 Linux☆282Jan 27, 2023Updated 3 years ago
- A high-performance C++ framework for emulating executable binaries☆128Nov 23, 2025Updated 3 months ago
- IDA Pro plugin AntiXorstr☆154Feb 24, 2025Updated last year
- Titan is a VMProtect devirtualizer☆118Mar 6, 2024Updated last year
- Native code virtualizer for x64 binaries☆517Dec 20, 2024Updated last year
- ☆26Mar 6, 2025Updated 11 months ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆104Feb 25, 2025Updated last year
- An App Domain Manager Injection DLL PoC on steroids☆212Dec 14, 2023Updated 2 years ago
- ☆49Nov 7, 2024Updated last year
- GitLab Attack TOolkit☆34Oct 8, 2025Updated 4 months ago
- Resources from Trend Micro Research teams☆26Nov 14, 2024Updated last year
- Tiny C header that allows easy hiding of WinAPI imports via PEB☆41Sep 1, 2025Updated 6 months ago
- ARM TrustZone Audit: Securing vs. Non-Securing Memory Separation☆23Mar 1, 2025Updated last year
- Python Command-Line Ghidra Binary Diffing Engine☆740Sep 25, 2025Updated 5 months ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆49Nov 10, 2024Updated last year
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆171Updated this week
- A simple Sleepmask BOF example☆168Nov 24, 2025Updated 3 months ago