An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
61,275 visible repositories in the index
1–11 of 11 · Most stars
The Minimalistic x86/x64 API Hooking Library for Windows
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
- reverse-engineering
- rop
- rop-exploitation
- rop-gadgets
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua
- disassembler
- assembler
- x86
- x64
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files
- codecave
- cpp
- pe
- winapi
Collection of hashcat lists and things.
- hashcat
- hashcat-rules
- hashcat-masks
- password-cracking
A tool that converts Bitwarden's data into a hashcat-suitable hash