dump-guy Goto Github PK

idascope

An IDA Pro extension for easier (malware) reverse engineering

invoke-detectiteasy

Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.

jitdumper

jlaive

.NET Antivirus Evasion Tool (Exe2Bat)

libobjectfile

LibObjectFile is a .NET library to read, manipulate and write linker and executable object files (e.g ELF, DWARF, ar...)

lyscript

A powerful automatic disassembly control module developed for x64dbg improves the efficiency of reverse analysis.

malware-analysis-and-reverse-engineering

Some of my publicly available Malware analysis and Reverse engineering.

malware_temp

Temp files related to MA and RE

minhook

The Minimalistic x86/x64 API Hooking Library for Windows

oldrod

An automated KoiVM disassembler and devirtualisation utility

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

poc

Proofs-of-concept

powershell-tools

Collection of some easy of use tools - in powershell.

practical-python

Practical Python Programming (course by @dabeaz)

process_overwriting

Yet another variant of Process Hollowing

proxycall-remover

Deobfuscator for remove proxy calls methods

python3---binary-data-manipulation

Python 3 - Manipulation and conversation with different data type (Bytes operations)

rewolf-wow64ext

Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.

rizzo-ida

Rizzo plugin ported to IDA 7.4+

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

sc2elf

Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF

sc2pe

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

sharpdllloader

A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL

simple-assembly-explorer

Automatically exported from code.google.com/p/simple-assembly-exploror

symboliclink-testing-tools

sysmontools

Utilities for Sysmon

tag_converter

tiny_tracer

A Pin Tool for tracing API calls etc

tiny_tracer_tag_to_cutter

vmpimportfixer

Fix VMProtect Import Protection