malware-research
eset/malware-researchCode written as part of our various malware investigations
digital-forensicsdynamic-code-analysismalware-analysis+4
415
eset/malware-researchCode written as part of our various malware investigations
lolcaken/javascript-deobfuscatorDeobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)
bifrost-proxy/bifrostHigh-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
zer0condition/reversekitx64 Dynamic Reverse Engineering Toolkit
void-stack/vmunprotect.dumperVMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
nccgroup/cartographerCode Coverage Exploration Plugin for Ghidra
nccgroup/dibfWindows NT ioctl bruteforcer and modular fuzzer
nccgroup/winstrumentWinstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications
jbsouthe/http-breakout-proxyHTTP Proxy Analysis for reverse engineering protocol communication
rogerorr/nttraceAn strace-like program for the Windows 'native' API
frkngksl/exporthiderExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.
