Archived
matrix-rs
memn0ps/matrix-rsRusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)
dynamic-code-analysiseducationids-ips-evasion+3
zer0condition/reversekitInjected x64 runtime analysis toolkit that hooks syscalls/APIs, monitors threads, heaps, imports and URLs, and bypasses common debugger checks.
frkngksl/exporthiderC++ DLL template generator that hides exported functions from the filesystem export directory while reconstructing it at runtime to enable dynamic…
elyelysiox/recaptchaTechnical documentation and reverse engineering analysis of Google's reCAPTCHA anti-bot system, covering payload structure, obfuscation techniques,…
void-stack/vmunprotect.dumperDynamically unpacks VMProtect-protected .NET assemblies, removes tamper protection, and restores executable code for reverse engineering.
nccgroup/cartographerCode Coverage Exploration Plugin for Ghidra
nccgroup/dibfWindows NT ioctl bruteforcer and modular fuzzer
r00tkitsmm/pishiStatic binary rewriter that instruments XNU kernel and kexts, enabling targeted function/file-level coverage and feedback-aware fuzzing for macOS…
worksbutnottested/lightkeeperMaps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.
nccgroup/winstrumentModular instrumentation framework using Frida for Windows software reverse engineering and attack surface analysis.
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
binsec/xyntiaBlack-box deobfuscator synthesizing semantics of obfuscated binary code via program synthesis, execution sampling, grammar search, and inference…
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
aftermathlabs/vmp2Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…
