struppigel / PortexAnalyzerGUI
Graphical interface for PortEx, a Portable Executable and Malware Analysis Library
☆133Updated 6 months ago
Alternatives and similar repositories for PortexAnalyzerGUI:
Users that are interested in PortexAnalyzerGUI are comparing it to the libraries listed below
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.☆198Updated last year
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆114Updated 6 months ago
- Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR☆222Updated 10 months ago
- A ProcessMonitor visualization application written in rust.☆176Updated last year
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆74Updated 5 months ago
- Unprotect is a collaborative platform dedicated to uncovering and documenting malware evasion techniques. We invite you to join us in thi…☆147Updated last week
- ☆111Updated last month
- A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …☆129Updated 5 months ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆115Updated last year
- Repository of Yara Rules☆96Updated 2 weeks ago
- Finding secrets in kernel and user memory☆113Updated last year
- Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environm…☆99Updated last year
- A command line Windows API tracing tool for Golang binaries.☆156Updated last year
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- Use YARA rules on Time Travel Debugging traces☆88Updated last year
- A C# based tool for analysing malicious OneNote documents☆109Updated last year
- Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.☆99Updated 2 years ago
- General malware analysis stuff☆36Updated 4 months ago
- Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows.☆200Updated 2 years ago
- Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles☆156Updated 3 months ago
- Small visualizator for PE files☆67Updated last year
- A list of all the DLLs export in C:\windows\system32\☆212Updated 3 years ago
- ETW based POC to identify direct and indirect syscalls☆178Updated last year
- masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)☆116Updated last year
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆51Updated 3 weeks ago
- ☆112Updated 11 months ago
- A dynamic unpacking tool☆130Updated last year
- Powershell Linter☆49Updated last month
- Python tool to check rootkits in Windows kernel☆180Updated 2 months ago