sparkyparrot Goto Github PK

msrc-security-research

Security Research from the Microsoft Security Response Center (MSRC)

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

ntdiff

ntoskrnl

The Windows Research Kernel (WRK)

ollydbg-archive

All the latest releases and files for OllyDbg...

papers

Papers written (and released) by the Team

pgresarch

PatchGuard Research

pinjectra

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

presentations

Presentations

r0ak

rce_lab

Crackmes Keygenmes Serialmes y más

reblog

SkySafe Miscellaneous Reverse Engineering Blog

revloader

RevEmu Loader Source Code.

rewolf-x86-virtualizer

Simple VM based x86 PE (portable exectuable) protector.

rtti-helper-scripts

A few IDAPython scripts to generate class hierarchy diagrams from IDBs

safedisc_v3

IDA script and toolz for working on safedisc v3

sffs-unpacker

Starforce SFFS Unpacker

simpleator

Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

titanhide

Hiding kernel-driver for x86/x64.

tpmtool

The TpmTool utility is a simple cross-platform tool for accessing TPM2.0 Non-Volatile (NV) Spaces (Index Values) on compliant systems, with zero dependencies on any TPM2.0 stack. It provides the ability to enumerate, create, delete, query, and lock NV indices, as well as to read and write data stored in them.

tritonastllvmirtranslator

A simple pluggable tool to convert an unrolled TritonAST to LLVM-IR, optimize it and get back to TritonAST.

virtualkd-redux

VirtualKD-Redux - A revival and modernization of VirtualKD

vmp_dbg

This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the vmp bytecode level. It was made using TitanEngine for the debug engine and Qt for the gui. Do not expect much of it and feel free to report any bugs.

vmpattack

A VMP to VTIL lifter.

vmprotecttest

VMProtectTest

vtil-core

Virtual-machine Translation Intermediate Language

windows-2000

Microsoft Windows 2000 Professional — (Source Codes)

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)

wingdbg

Friends don't let friends debug alone

winobjex64

Windows Object Explorer 64-bit