splishy-splash / RE-scripts
a small curation of created/stolen scripts for reverse engineering
☆12Updated 10 months ago
Alternatives and similar repositories for RE-scripts:
Users that are interested in RE-scripts are comparing it to the libraries listed below
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆127Updated 6 months ago
- Small tool to convert beteween the PE alignments (raw and virtual).☆85Updated 2 years ago
- Easy-to-use IDA plugin for code emulation☆28Updated 9 months ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆56Updated last year
- ☆31Updated 2 years ago
- UnpacMe IDA Byte Search☆28Updated last year
- devirtualization vmprotect☆62Updated last year
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- Kernel ReClassEx☆65Updated last year
- Binary Ninja plugin for interacting with the OALabs HashDB service☆18Updated 4 months ago
- Hyper-V related resources☆30Updated 11 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆63Updated last year
- How to retro theme your Ghidra☆35Updated 4 months ago
- Writeups for CTF challenges☆30Updated last year
- PE-Dump-Fixer☆105Updated 4 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆36Updated 4 months ago
- VinCSS Reverse Engineering, Malware Analysing Tools & Ultilities☆27Updated 3 years ago
- Binary rewriter for 64-bit PE files.☆69Updated last year
- A devirtualization engine for Themida.☆96Updated last year
- ☆27Updated last month
- Helpful WinDBG command for kernel debugging☆20Updated 4 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆39Updated 2 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆122Updated last month
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆88Updated 3 years ago
- Windows PDB parser for kernel-mode environment.☆94Updated 2 years ago
- ☆25Updated 4 months ago
- Ghetto user mode emulation of Windows kernel drivers.☆131Updated 4 months ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆68Updated 2 years ago