
vmprotect-research
Generalized VMProtect devirtualizer supporting versions 1.x–3.x. Standalone CLI tool and Ghidra plugin for automated bytecode decoding, handler…
binary-analysisbinary-exploitationdebuggers+6
61

Generalized VMProtect devirtualizer supporting versions 1.x–3.x. Standalone CLI tool and Ghidra plugin for automated bytecode decoding, handler…

Gallery Vault dump recovery tool with automated discovery, key derivation and automatic media restoration.

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

PowerShell module for automatic detection of P/Invoke, Dynamic P/Invoke, and D/Invoke in .NET assemblies. Reveals unmanaged API calls, MDTokens, and…