sophoslabs / emotet_unflatten_poc

Related projects ⓘ

Alternatives and complementary repositories for emotet_unflatten_poc

• merces / showcomments
  IDA Pro plugin that displays all comments in a database
  ☆63Updated 3 months ago
• janbbeck / CleanTricks
  Binary Ninja plugin to clean up some common obfuscation techniques.
  ☆19Updated 4 years ago
• vmallet / ida-hex-highlighter
  Hex-Rays Block Highlighter plugin for IDA to highlight if/for/do/switch/while blocks
  ☆60Updated 2 years ago
• david-lazar / IDAPatternSearch
  IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…
  ☆62Updated 3 years ago
• binarly-io / idapcode
  IDA plugin displaying the P-Code for the current function
  ☆64Updated last year
• Accenture / Condstanta
  ☆56Updated 2 years ago
• harelon / GoFastAnalyzer
  Go fastcall analysis for ida decompiler
  ☆28Updated 6 months ago
• mrphrazer / hitb2021ams_deobfuscation
  ☆71Updated 3 years ago
• Mizari / phrank
  Tool that automates some useful structure routines in IDA PRO
  ☆74Updated 8 months ago
• quarkslab / qsynthesis
  Greybox Synthesizer geared for deobfuscation of assembly instructions.
  ☆141Updated last year
• pgarba / SiMBA-
  Port of MBA Solver SiMBA to C/C++
  ☆76Updated 2 weeks ago
• allthingsida / strikeout
  IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree
  ☆99Updated 2 months ago
• vmware-archive / HexRaysDeob
  Hex-Rays microcode API plugin for breaking an obfuscating compiler
  ☆67Updated 5 years ago
• eset / stadeo
  Control-flow-flattening and string deobfuscator
  ☆147Updated 3 years ago
• cxiao / ida-rust-untangler
  An IDA plugin which demangles Rust function names
  ☆31Updated 11 months ago
• nhpcc502 / MBA-Obfuscator
  Non-linear Mixed Boolean-Arithmetic Expressions
  ☆57Updated 7 months ago
• qilingframework / rootfs
  ☆46Updated 4 months ago
• DenuvoSoftwareSolutions / GAMBA
  Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA
  ☆120Updated last year
• zerotypic / wilhelm
  Alternative API for IDA / Hex-Rays
  ☆72Updated last year
• NyaMisty / idasdk-collection
  ☆44Updated last month
• mazeworks-security / MSiMBA
  Deobfuscation of Semi-Linear Mixed Boolean-Arithmetic Expressions
  ☆58Updated 2 weeks ago
• RolfRolles / Miscellaneous
  Small programs and scripts that do not require their own repositories
  ☆129Updated 2 years ago
• veritas501 / ToyObfuscator
  Toy LLVM obfuscator pass
  ☆70Updated 3 years ago
• Cirn09 / idavscode
  Debug IDAPython in VSCode
  ☆19Updated last year
• kweatherman / ida_missinglink
  IDA Plugin that fills in missing indirect CALL & JMP target information
  ☆115Updated last year
• mrphrazer / r2con2020_deobfuscation
  ☆76Updated 3 years ago
• overfl0 / IDAPython-pycharm-setup
  How to setup Pycharm to run scripts in IDA using the Run menu (or a keybind)
  ☆39Updated 5 months ago
• archercreat / ida_names
  IDA-names automatically renames pseudocode windows with the current function name.
  ☆49Updated last year