crxf Goto Github PK

aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

assemblyrebuilder

blackbone

Windows memory hacking library

box

TVbox开源版（空壳-自行配置）

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), BPF, Ethereum VM, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

capstone-engine-documentation

Official Capstone Disassembly Engine API documentation

cmake

Mirror of CMake upstream repository

cmulator

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript

cryptopp

free C++ class library of cryptographic schemes

de4dot

.NET deobfuscator and unpacker.

dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

extremedumper

.NET Assembly Dumper

findcrypt-yara

IDA pro plugin to find crypto constants (and more)

github520

:kissing_heart: 让你“爱”上 GitHub，解决访问时图裂、加载慢的问题。（无需安装）

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

kernel-anit-anit-debug-plugins

Kernel Anit Anit Debug Plugins 内核反反调试插件

keystone

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

myfirstwindowsdriver

Windows10 Driver prints the CPUID info and Process Monitor

myopen

我的开源：讲解anything

netreactorslayer

An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

ntdll

ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h

od_plugin

这是一个Ollydbg插件，它提供了非常多友好的功能包括但不限于方便的数据提取，一键trace，跟踪api，iat修复等等

pevisor

A project on the Unicorn emulator to emulate the code of Pe files in windows

qiling

A True Instrumentable Binary Emulation Framework

scyllahide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

simple_debug_plugin

一个辅助调试器的工具，可以让调试器附加、读写被保护的进程如杀软（玩具项目，仅为巩固知识编写）

sunnynet

Sunny网络中间件