Modified python version of Rolf Rolles' https://github.com/RolfRolles/HexRaysDeob to unflatten Emotet'S Control Flow Flattening
☆29May 5, 2022Updated 4 years ago
Alternatives and similar repositories for emotet_unflatten_poc
Users that are interested in emotet_unflatten_poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Control-flow-flattening and string deobfuscator☆163Nov 8, 2021Updated 4 years ago
- fork 自 https://gitlab.com/eshard/d810 添加了参考文章、测试样本，作为备份。☆17Nov 18, 2021Updated 4 years ago
- 利用angr去除ollvm的虚假控制流☆14Mar 20, 2021Updated 5 years ago
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆84Jun 29, 2019Updated 7 years ago
- HexRaysPyTools merged! (@NyaMisty @oopsmishap @Tim-Sobolev @OrbitOn-line)☆17Dec 15, 2025Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- code obfuscation via control flow flattening☆13Jan 5, 2018Updated 8 years ago
- ☆19Mar 13, 2018Updated 8 years ago
- This experimetal fuzzer is meant to be used for API in-memory fuzzing on Android.☆17Nov 26, 2019Updated 6 years ago
- Simple POC of Voice C2 using Speech Recognition☆13Apr 27, 2022Updated 4 years ago
- An IDA plugin which demangles Rust function names☆37Dec 11, 2023Updated 2 years ago
- IDA Pro plug-in to fix/extract/view RTTI information☆11Jan 23, 2018Updated 8 years ago
- A simple example of using Windows Hypervisor Platform (WHP)☆13Dec 18, 2020Updated 5 years ago
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆35Feb 17, 2024Updated 2 years ago
- GhidraScript that allows Tenet traces to be imported and viewed in Ghidra☆16May 7, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- DRAKVUF Black-box Binary Analysis☆16Feb 26, 2026Updated 6 months ago
- Android Security Bug Queries for CheckMarx☆20Sep 13, 2022Updated 3 years ago
- 执行 wasm 转换出来的 C 代码，代码例子☆14Sep 7, 2018Updated 8 years ago
- The future home for a library able to parse in memory lot of complex structures from common shared libs and syscalls☆15Apr 4, 2023Updated 3 years ago
- A small utilitiy to scan process memory and search patterns using frida with a single line of command☆24Aug 4, 2021Updated 5 years ago
- Wrapper for TSK (Sleuth Kit) Bindings☆11Jan 10, 2023Updated 3 years ago
- Trace function calls using lldb☆13Jul 5, 2021Updated 5 years ago
- A Multi-Threaded PE Export Collection Utility☆14May 13, 2023Updated 3 years ago
- Hopefully an insightful XPC tracer that helps vulerability research by tracing server and client call stacks☆20Jul 19, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Hook native with xposed☆17Mar 4, 2022Updated 4 years ago
- ☆16Oct 31, 2022Updated 3 years ago
- Trace jni calls with eBPF on Android☆24Jun 21, 2022Updated 4 years ago
- substrate framework for android based on frida☆17May 15, 2020Updated 6 years ago
- A command-line tool for parsing Windows Master File Table ($MFT) and importing the results into Elasticsearch.☆12Jun 3, 2026Updated 3 months ago
- A command-line tool for efficiently extracting files, directories, and alternate data streams directly from NTFS image files.☆21Jun 1, 2026Updated 3 months ago
- tprt ollvm 反混淆 修改 binja il☆53Sep 5, 2024Updated 2 years ago
- Test repo for RunMyCode Online Web Extension - https://runmycode.online☆11Jul 9, 2020Updated 6 years ago
- Hex-Rays microcode API plugin for breaking an obfuscating compiler☆806Feb 22, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- IDA Pro plugin for recognizing known hashes of API function names☆87May 12, 2022Updated 4 years ago
- Workshop Material on VM-based Deobfuscation☆200Oct 20, 2021Updated 4 years ago
- bypass pairip, bypass google play protect with pairipcore, bypass google play protect with warning dialog，绕过play保护，破解谷歌加固，修复apk，防止闪退，移除谷歌…☆31Jan 2, 2026Updated 8 months ago
- Windows Event Log Knowledge Base☆34Jul 6, 2026Updated 2 months ago
- zygisk插件：用于unity游戏hook☆17Dec 27, 2022Updated 3 years ago
- blabla☆50Oct 28, 2020Updated 5 years ago
- ☆12Oct 19, 2017Updated 8 years ago