Lists (1)
Stars
A modern 32/64-bit position independent implant template
Transforms a .NET binary into a chain of meaningless-looking await expressions.
A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Packer compressing .net assemblies, (ab)using the PE format for data storage
A library for creating, reading and editing PE files and .NET modules.
A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Detects virtual machines and malware analysis environments
💻 C++ Functional Terminal User Interface. ❤️
A simple IL interpreter to hopefully bring .NET to the switch one day
☄️ AirPods desktop user experience enhancement program, for Windows and Linux (WIP)
VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
Micro-framework for .NET console application. Cocona makes it easy and fast to build console applications on .NET.
An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
Free and Open Source Reverse Engineering Platform powered by rizin
A fast graphing library that allows for constructing, importing, exporting, and analysing graph structures in .NET.
An automated KoiVM disassembler and devirtualisation utility
VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.
Develop Desktop, Embedded, Mobile and WebAssembly apps with C# and XAML. The most popular .NET UI client technology
Simple Controlflow Deobfuscator for .NET Reactor 6.7.0.0