Stars
Binary Ninja plugin to identify obfuscated code and other interesting code constructs
Technical webinars on reverse engineering, malware analysis, and software protection.
Fast and lightweight x86/x86-64 disassembler and code generation library
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, T…
Configuration extractors/decryptors for various Windows malware families.
peta909 / vxlang-page
Forked from vxlang/vxlang-pageprotector & obfuscator & code virtualizer
Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
peta909 / DrvMon
Forked from Fyyre/DrvMonAdvanced driver monitoring utility.
Python Decoders for Common Remote Access Trojans
A fork version of lldbinit https://github.com/gdbinit/lldbinit
An Interactive Binary Patching Plugin for IDA Pro
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, fi…
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …
Programming productivity plugin for IDAPython and C++ development
Some of my publicly available Malware analysis and Reverse engineering.
Implementation of the stream cipher - RC4 (Rivest Cipher 4) using both Python 2.x and 3.x