DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
☆279Nov 3, 2019Updated 6 years ago
Alternatives and similar repositories for DrSemu
Users that are interested in DrSemu are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An open source script to perform malware static analysis on Portable Executable☆333May 23, 2023Updated 3 years ago
- A function tracer☆92Jun 4, 2019Updated 7 years ago
- makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]☆744Mar 17, 2019Updated 7 years ago
- User-mode part of Zerokit platform☆23Mar 30, 2019Updated 7 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆828Mar 10, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- findLoop - find possible encryption/decryption or compression/decompression code☆29Mar 30, 2019Updated 7 years ago
- A static analyzer for PE executables.☆1,142Updated this week
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- Kernel driver to fuzz Hyper-V hypercalls☆139Feb 15, 2019Updated 7 years ago
- Virtual Machine Introspection, Tracing & Debugging☆601Feb 22, 2022Updated 4 years ago
- executing JS from x86 code☆27May 9, 2019Updated 7 years ago
- idenLib - Library Function Identification [This project is not maintained anymore]☆395Mar 17, 2019Updated 7 years ago
- Zerokit/GAPZ rootkit (non buildable and only for researching)☆184Mar 30, 2019Updated 7 years ago
- Binee: binary emulation environment☆530Feb 25, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools☆463Nov 22, 2018Updated 7 years ago
- PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.☆430May 22, 2020Updated 6 years ago
- Malware Configuration And Payload Extraction☆761Nov 22, 2024Updated last year
- Pocs for Antivirus Software‘s Kernel Vulnerabilities☆264Jul 6, 2017Updated 9 years ago
- Analysis and Modification Tool for Executables☆18Mar 28, 2019Updated 7 years ago
- libemu shim layer and win32 environment for Unicorn Engine☆74Apr 14, 2017Updated 9 years ago
- ☆34Jul 28, 2018Updated 8 years ago
- Windows 10 UAC bypass PoC using LaunchInfSection☆36Aug 3, 2018Updated 8 years ago
- crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks☆110Dec 11, 2019Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A comprehensive binary emulation and instrumentation platform.☆420Jan 31, 2023Updated 3 years ago
- A project that aims to automatically devirtualize code that has been virtualized using x86virt☆128Dec 3, 2022Updated 3 years ago
- Drltrace is a library calls tracer for Windows and Linux applications.☆419Aug 16, 2020Updated 6 years ago
- A branch-monitor-based solution for process monitoring.☆138Feb 9, 2020Updated 6 years ago
- Reverse engineering toolkit for exploit/malware analysis☆35May 10, 2020Updated 6 years ago
- Fuzzer for finding Open Mail Relays☆14May 16, 2026Updated 3 months ago
- BASS - BASS Automated Signature Synthesizer☆181Sep 19, 2018Updated 7 years ago
- FCL (Fileless Command Lines) - Known command lines of fileless malicious executions☆478Apr 8, 2021Updated 5 years ago
- Live hunting of code injection techniques☆384Aug 22, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engin…☆304Sep 16, 2022Updated 3 years ago
- Process reimaging proof of concept code☆95Jun 21, 2019Updated 7 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- DRAKVUF Black-box Binary Analysis☆1,270Aug 6, 2026Updated 3 weeks ago
- Kernel mode windows NT API logger☆22Sep 9, 2019Updated 6 years ago
- win10 pgContext dynamic dump (btc version)☆113Jan 15, 2020Updated 6 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆439Aug 22, 2018Updated 8 years ago