Modified python version of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to unflatten Emotet'S Control Flow Flattening
☆29May 5, 2022Updated 4 years ago
Alternatives and similar repositories for emotet_unflatten_poc
Users that are interested in emotet_unflatten_poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Control-flow-flattening and string deobfuscator☆163Nov 8, 2021Updated 4 years ago
- fork 自 https://gitlab.com/eshard/d810 添加了参考文章、测试样本，作为备份。☆16Nov 18, 2021Updated 4 years ago
- 利用angr去除ollvm的虚假控制流☆14Mar 20, 2021Updated 5 years ago
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆84Jun 29, 2019Updated 7 years ago
- HexRaysPyTools merged! (@NyaMisty @oopsmishap @Tim-Sobolev @OrbitOn-line)☆17Dec 15, 2025Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- code obfuscation via control flow flattening☆13Jan 5, 2018Updated 8 years ago
- ☆19Mar 13, 2018Updated 8 years ago
- This experimetal fuzzer is meant to be used for API in-memory fuzzing on Android.☆17Nov 26, 2019Updated 6 years ago
- Simple POC of Voice C2 using Speech Recognition☆13Apr 27, 2022Updated 4 years ago
- An IDA plugin which demangles Rust function names☆37Dec 11, 2023Updated 2 years ago
- IDA Pro plug-in to fix/extract/view RTTI information☆11Jan 23, 2018Updated 8 years ago
- A simple example of using Windows Hypervisor Platform (WHP)☆13Dec 18, 2020Updated 5 years ago
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆35Feb 17, 2024Updated 2 years ago
- ☆431May 16, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- GhidraScript that allows Tenet traces to be imported and viewed in Ghidra☆16May 7, 2022Updated 4 years ago
- DRAKVUF Black-box Binary Analysis☆15Feb 26, 2026Updated 5 months ago
- Android Security Bug Queries for CheckMarx☆20Sep 13, 2022Updated 3 years ago
- 执行 wasm 转换出来的 C 代码，代码例子☆14Sep 7, 2018Updated 7 years ago
- The future home for a library able to parse in memory lot of complex structures from common shared libs and syscalls☆15Apr 4, 2023Updated 3 years ago
- A small utilitiy to scan process memory and search patterns using frida with a single line of command☆23Aug 4, 2021Updated 5 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- Trace function calls using lldb☆13Jul 5, 2021Updated 5 years ago
- A Multi-Threaded PE Export Collection Utility☆14May 13, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks☆20Jul 19, 2022Updated 4 years ago
- Hook native with xposed☆17Mar 4, 2022Updated 4 years ago
- ☆16Oct 31, 2022Updated 3 years ago
- Hex-Rays Microcode Viewer☆246Nov 13, 2022Updated 3 years ago
- Trace jni calls with eBPF on Android☆24Jun 21, 2022Updated 4 years ago
- substrate framework for android based on frida☆17May 15, 2020Updated 6 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated 2 months ago
- A command-line tool for efficiently extracting files, directories, and alternate data streams directly from NTFS image files.☆21Jun 1, 2026Updated 2 months ago
- Test repo for RunMyCode Online Web Extension - https://runmycode.online☆11Jul 9, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆804Feb 22, 2021Updated 5 years ago
- IDA Pro plugin for recognizing known hashes of API function names☆85May 12, 2022Updated 4 years ago
- Workshop Material on VM-based Deobfuscation☆200Oct 20, 2021Updated 4 years ago
- bypass pairip, bypass google play protect with pairipcore, bypass google play protect with warning dialog，绕过play保护，破解谷歌加固，修复apk，防止闪退，移除谷歌…☆29Jan 2, 2026Updated 7 months ago
- Windows Event Log Knowledge Base☆34Jul 6, 2026Updated last month
- zygisk插件：用于unity游戏hook☆17Dec 27, 2022Updated 3 years ago
- blabla☆50Oct 28, 2020Updated 5 years ago