Stars
Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator
Creates a trace and gathers the trace together into a basic block
Convenience routines for working with the Unicorn emulator in Python
WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API
Cryptographic library for Embarcadero Delphi and potentially for FPC as well
Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping and interactive Python scripting capabilities.
PowerShell tools to help defenders hunt smarter, hunt harder.
DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.
This repository contains an IDA processor for loading and disassembling compiled yara rules.
Deobfuscation via optimization with usage of LLVM IR and parsing assembly.
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
View8 - Decompiles serialized V8 objects back into high-level readable code.
Python tool to check rootkits in Windows kernel
IDA/Binary Ninja Plugin to automatically identify and set enums for standard functions
Various units for resolving issues or expanding/correcting Delphi functionality
Windows kernel hacking framework, driver template, hypervisor and API written on C++
msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
Memory-Hacking Software (MHS) X, the new from-scratch MHS, the next most-popular RAM-searching/debugging/game-hacking tool after Cheat Engine.
Quickly find differences and similarities in disassembled code
A C++ tool to unstrip Rust/Go binaries (ELF and PE)