Popular repositories Loading

1. sigcheck sigcheck Public

   Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

   Python 20 4

2. rop3 rop3 Public

   A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

   Python 18

3. windows-memory-extractor windows-memory-extractor Public

   Tool to extract contents from the memory of Windows systems.

   C++ 14 2

4. winapi-categories winapi-categories Public

   Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

   Python 14 1

5. modex modex Public

   Volatility 3 plugins to extract a module as complete as possible

   Python 12

6. pinVMShield pinVMShield Public

   A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

   C++ 9 2