w00tzenheimer / d810-ngLinks
D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time by modifying IDA Pro microcode.
☆81Updated this week
Alternatives and similar repositories for d810-ng
Users that are interested in d810-ng are comparing it to the libraries listed below
Sorting:
- Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.☆88Updated 8 months ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆77Updated 2 years ago
- 一个仅使用2字节修改实现内核任意函数hook的方法。☆57Updated 7 months ago
- ☆34Updated 2 years ago
- deflat plugins for ida pro☆43Updated 2 years ago
- Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA☆163Updated 2 years ago
- Another LLVM-obfuscator based on LLVM-17. A fork of Arkari☆109Updated last year
- ollvm de-obfuscator☆62Updated 4 years ago
- Assembly-Export for IDA 9.0 Pro. Assemport exports all functions separately in an assembly file. This enables further processing by exter…☆29Updated 6 months ago
- Deobfuscate OLLVM Bogus Control Flow via angr☆68Updated 4 years ago
- A POC to detect the exist of VMProtect 3 protection by search feature watermark.☆82Updated 2 years ago
- Kotoamatsukami is an obfuscator based on LLVM-17, utilizing LLVM's new pass to implement plug-in features, for obfuscating multiple langu…☆57Updated 8 months ago
- Supporting for IDA9.0. Forked from https://bitbucket.org/NtQuery/scyllahide☆35Updated 11 months ago
- tprt ollvm 反混淆 修改 binja il☆49Updated last year
- hutrace☆25Updated 3 years ago
- 使用 Intel 虚拟化特性实现应用层HOOK☆64Updated 3 months ago
- Taint Analysis Engine and Trace Exploration : Overcome Obfuscation☆50Updated 2 months ago
- a code virtualizer based on angr☆32Updated 2 years ago
- IdaClu is a version agnostic IDA Pro plugin for grouping similar functions. Pick an existing grouping algorithm or create your own.☆176Updated 6 months ago
- ☆48Updated last year
- Find crypto constants IDA 7.x plugin☆121Updated 2 years ago
- ☆13Updated 10 months ago
- 内核硬件调试器模块,rootkit操作 dump☆35Updated 3 years ago
- D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.☆63Updated 4 years ago
- ☆33Updated 4 years ago
- llvm powered deobfuscation of a vm-based protection☆44Updated 8 months ago
- vmp2.x devirtualization☆88Updated last year
- an obfuscator based on LLVM which can obfuscate the program execution trajectory☆106Updated 4 years ago
- Legacy IDAPython project for Hex-Ray's IDA Pro, now maintained as part of the IDA SDK.☆34Updated 3 months ago
- ida plugin to parse qt meta data☆82Updated 11 months ago