waleedassar / vbDetectVirtualBox

Related projects: ⓘ

• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆43Updated 7 years ago
• fdiskyou / RootkitArsenal
  ☆13Updated this week
• sysopfb / VM_Timing_Detect
  ☆12Updated 7 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 8 years ago
• deroko / activationcontexthook
  ☆33Updated 6 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• nccgroup / WindowsPatchDetector
  Experimental Windows .text section Patch Detector
  ☆20Updated 9 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 4 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆29Updated 5 years ago
• hasherezade / tag_converter
  ☆21Updated 3 years ago
• d00rt / easy_way_nymaim
  An IDA Pro script for creating a clearer idb for nymaim malware
  ☆10Updated 6 years ago
• alexander-hanel / ida_yara
  A python script that can be used to scan data within in an IDB using Yara.
  ☆21Updated 6 years ago
• markjandrews / idatraining
  ☆33Updated this week
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆36Updated 7 years ago
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆25Updated 5 years ago
• sogeti-esec-lab / REBoot
  Bootkits Revisited
  ☆41Updated 10 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆36Updated 10 years ago
• swwwolf / obderef
  Decrement Windows Kernel for fun and profit
  ☆38Updated 6 years ago
• psrok1 / emu-strings
  Emu-strings project - JScript/VBScript automated dropper analysis system
  ☆17Updated 3 years ago
• kukfa / bindbg
  Binary Ninja plugin that syncs WinDbg to Binary Ninja
  ☆47Updated 6 years ago
• secrary / findLoop
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆25Updated 5 years ago
• BorjaMerino / tlsInjector
  Python script to inject and run shellcodes through TLS callbacks
  ☆50Updated 9 years ago
• sam-b / HackSysDriverExploits
  ☆46Updated 7 years ago
• ufrisk / shellcode64
  A minimal tool to extract shellcode from 64-bit PE binaries.
  ☆48Updated 3 years ago
• nyx0 / Grum
  The Grum Spam Bot
  ☆20Updated 9 years ago
• Fmk0 / templates
  ☆36Updated 4 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆32Updated 5 years ago
• JeremyFetiveau / Exploits
  Old exploits and code for my self-referencing PML4 technique (2014)
  ☆30Updated 9 years ago