snemes / aplib
Module for decompressing aPLib compressed data
☆14Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for aplib
- Use this library to automatically extract PE files compressed with aplib from a binary blob.☆32Updated 5 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆73Updated 10 years ago
- ☆66Updated last year
- Go Lang Portable Executable Parser☆37Updated 3 years ago
- Hansel - a simple but flexible search for IDA☆26Updated 5 years ago
- ☆21Updated 3 years ago
- IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.☆18Updated 6 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆39Updated 5 years ago
- Parsers for custom malware formats ("Funky malware formats")☆92Updated 2 years ago
- A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.☆30Updated 5 months ago
- A simple API monitor for Windbg☆62Updated 7 years ago
- ☆33Updated 3 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆117Updated 4 years ago
- A python script that can be used to scan data within in an IDB using Yara.☆22Updated 6 years ago
- Import DynamoRIO drcov code coverage data into Ghidra☆42Updated 11 months ago
- analysis of visual basic code☆39Updated 6 years ago
- ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.☆88Updated 5 years ago
- Flare-On solutions☆36Updated 5 years ago
- CAPE monitor DLLs☆38Updated 4 years ago
- MALM: Malware Monitor☆45Updated 11 years ago
- Yet another rule generator for Yara☆25Updated 4 years ago
- Use WinDBG to trace the Windows API calls of any Portable Executable file☆30Updated 7 years ago
- Plugin for x64dbg to generate Yara rules from function basic blocks.☆35Updated 7 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆16Updated 8 years ago
- Analyses in IDA/Hex-Rays☆78Updated last year
- ☆28Updated 4 years ago
- IDA script for vmprotect Windows Api address decoder☆51Updated 3 years ago
- My collection of unpackers for malware packers/crypters☆28Updated 7 years ago
- x86 bootloader emulation with Miasm (case of NotPetya)☆40Updated 5 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Updated last year