hugmyndakassi Goto Github PK

tacnetsol-ida

thalium-icebox

Virtual Machine Introspection, Tracing & Debugging

thesubzeroproject

A multi-staged malware that contains a kernel mode rootkit and a remote system shell.

tigress_protection

Playing with the Tigress binary protection. Break some of its protections and solve some of its challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.

tlsh

tlsinjector

Python script to inject and run shellcodes through TLS callbacks

tls_examples

Examples of Static and Dynamic Thread Local Storage Callback Creation

triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

ucxxrt

The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.

unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)

unipacker

Automatic and platform-independent unpacker for Windows binaries based on emulation

unprotect

Unprotect is a python tool for parsing PE malware and extract evasion techniques.

uthenticode

A cross-platform library for verifying Authenticode signatures

uthenticode-tohex-bench

v86

x86 virtualization in your browser, recompiling x86 to wasm on the fly

vc-ltl

Shared to msvcrt.dll and optimize the C/C++ application file size.

vc-ltl5

Shared to msvcrt.dll or ucrtbase.dll and optimize the C/C++ application file size.

vcrtl

C++ Exceptions in Windows Drivers

veil

WDKExt 2 !!

veles

Binary data analysis and visualization tool

venom-rootkit

A simple Windows kernel rootkit.

vergilius-project

This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.

virtuailor

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

virtualkd

virtualkd-redux

VirtualKD-Redux - A revival and modernization of VirtualKD

vmattack

VMAttack PlugIn for IDA Pro

volatility-sigcheck

Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

volatility3

Volatility 3.0 development

vrtuletree

VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its functionality is very similar to famous DeviceTree, however, VrtuleTree emhasises on stability and support of latest Windows versions

vs-common

Some eternal WIP stuff :)