splishy-splash / RE-scripts
a small curation of created/stolen scripts for reverse engineering
☆12Updated last year
Alternatives and similar repositories for RE-scripts:
Users that are interested in RE-scripts are comparing it to the libraries listed below
- Small tool to convert beteween the PE alignments (raw and virtual).☆87Updated 2 years ago
- Easy-to-use IDA plugin for code emulation☆31Updated 11 months ago
- ☆31Updated 3 years ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆136Updated 8 months ago
- UnpacMe IDA Byte Search☆28Updated last year
- Writeups for CTF challenges☆31Updated last year
- Python bindings for the Icicle emulator.☆34Updated 3 weeks ago
- IDA Python deobfuscation script for ConfuserEx binaries☆35Updated 2 years ago
- devirtualization vmprotect☆62Updated 2 years ago
- Rust symbol recovery tool☆48Updated last month
- ☆47Updated 2 years ago
- Binary rewriter for 64-bit PE files.☆71Updated last year
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆58Updated last year
- A devirtualization engine for Themida.☆100Updated last year
- ☆47Updated 2 months ago
- Convenience routines for working with the Unicorn emulator in Python☆25Updated 3 months ago
- ☆65Updated last month
- How to retro theme your Ghidra☆35Updated 6 months ago
- Abusing exceptions for code execution.☆110Updated 2 years ago
- An automatic tool for fixing dumped PE files☆41Updated 4 years ago
- The Windbg extensions to study Hyper-V on Intel and AMD processors.☆151Updated last month
- Binary Ninja plugin for interacting with the OALabs HashDB service☆18Updated 6 months ago
- ☆25Updated 6 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆64Updated last year
- msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.☆151Updated last year
- IDA plugin for quickly copying disassembly as encoded hex bytes☆61Updated 3 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆88Updated 3 years ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆79Updated 9 months ago
- A journal for $6,000 Riot Vanguard bounty.☆63Updated last year
- All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit☆13Updated 3 weeks ago