
Alcatraz
x64 binary obfuscator for PE files with control flow flattening, anti-disassembly, import obfuscation, and instruction mutation to hinder reverse…

x64 binary obfuscator for PE files with control flow flattening, anti-disassembly, import obfuscation, and instruction mutation to hinder reverse…

Obfuscates x86-64 assembly with instruction injection, junk code, constant obfuscation, and runtime decryption to hinder reverse engineering and…

An x86-64 code virtualizer for VM based obfuscation

Python AV Evasion Tools

Detections for CVE-2021-44228 inside of nested binaries

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

List of mixed boolean-arithmetic resources

Binary Ninja plugin to identify obfuscated code and other interesting code constructs

Static analysis walkthrough of a Metasploit Windows shellcode: PowerShell payload decoding, XOR obfuscation, PEB walking, and Export Address Table…

IDA python script for deobfuscating Astaroth/Guildma injector DLL

ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).

A bin2bin code virtualizer for x86-64 PE's

A .NET malware loader, using API-Hashing to evade static analysis

A PoC project for embedding shellcode to Hint/Name Table

An application to test windows and linux shellcodes

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

Lightweight library which allows the ability to map both native and managed assemblies into memory by either using process injection of a process…

Collection of different ways to execute code outside of the expected entry points