therealdreg / anticuckoo
A tool to detect and crash Cuckoo Sandbox
☆286Updated last month
Related projects: ⓘ
- C++ application that uses memory and code hooks to detect packers☆266Updated 6 years ago
- Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques …☆278Updated 7 years ago
- Cminer is a tool for enumerating the code caves in PE files.☆139Updated last year
- Tool written in python3 to determine where the AV signature is located in a binary/payload☆311Updated 6 years ago
- Generating YARA rules based on binary code☆198Updated 2 years ago
- ☆112Updated 8 years ago
- ☆149Updated this week
- Various snippets created during malware analysis☆455Updated last year
- ☆373Updated this week
- Zerokit/GAPZ rootkit (non buildable and only for researching)☆179Updated 5 years ago
- ☆203Updated this week
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆356Updated 7 years ago
- Automated malware unpacker☆118Updated 8 years ago
- A list of ways to execute code on Windows using legitimate Windows tools☆301Updated 5 years ago
- ZeroAccess v3 toolkit☆161Updated 6 years ago
- Demos of various (also non standard) persistence methods used by malware☆216Updated last year
- An attempt at Process Doppelgänging☆183Updated 6 years ago
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆148Updated 6 years ago
- Live hunting of code injection techniques☆368Updated 5 years ago
- TDL4 style rootkit to spoof read/write requests to master boot record☆126Updated 6 years ago
- Automatically rebuild Import Address Table for dumped PE file. With python bindings!☆115Updated 5 years ago
- zer0m0n driver for cuckoo sandbox☆350Updated 9 years ago
- ☆213Updated 6 years ago
- Patching ROP-encoded shellcodes into PEs☆180Updated 6 years ago
- ☆210Updated this week
- This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.☆226Updated 8 years ago
- DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior☆266Updated 4 years ago
- Search for code cave in all binaries☆277Updated 2 months ago
- Tools for instrumenting Windows Defender's mpengine.dll☆271Updated 5 years ago
- DLL Injection tool to unlock guest VMs☆231Updated 11 years ago