williballenthin / siglib
function identification signatures
☆11Updated 3 years ago
Alternatives and similar repositories for siglib:
Users that are interested in siglib are comparing it to the libraries listed below
- A wrapper for capstone for bearparser☆13Updated 2 years ago
- Static analysis tools for x86 assembly☆13Updated 7 years ago
- ☆20Updated 3 years ago
- An Integrity-Check Monitoring Pintool☆56Updated 4 years ago
- x64dbg Malware Plugin. Detect malicious materials☆15Updated 4 years ago
- PoC multi-layer protector for ELF32 x86 binaries☆10Updated 2 years ago
- ☆14Updated 3 years ago
- A set of small utilities, helpers for PIN tracers☆31Updated last year
- ☆13Updated 7 years ago
- API logger plugin for Intel Pintool☆14Updated 7 years ago
- IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.☆18Updated 6 years ago
- Implementation trade-offs in using Intel Pin for instruction tracing of complex programs☆15Updated 5 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆26Updated 5 years ago
- A python script that can be used to scan data within in an IDB using Yara.☆22Updated 6 years ago
- PEAnalyser is an open source PE file analysis tool.☆11Updated 4 years ago
- Utilities for working with vivisect☆25Updated last month
- ☆22Updated 4 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆16Updated 8 years ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆27Updated 3 years ago
- ☆28Updated 4 years ago
- An IDA Pro script for creating a clearer idb for nymaim malware☆10Updated 6 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year
- ☆21Updated 6 years ago
- IDA Pro Python plugin to analyze and annotate Linux kernel alternatives☆22Updated 3 years ago
- Extract data of TTD trace file to a minidump☆28Updated last year
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆58Updated 6 months ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Updated 6 years ago
- IDAPython scripts☆15Updated 7 years ago
- ☆17Updated 3 years ago
- LLVM based devirtualization PoC’s.☆20Updated 3 years ago