Skip to content

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

License

Notifications You must be signed in to change notification settings

ergrelet/themida-spotter-bn

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

themida-spotter-bn Static Badge rustc 1.79.0

A Binary Ninja plugin that detects and tags obfuscated code entry patterns from Oreans Technologies's software obfuscators (i.e., WinLicense, Themida and Code Virtualizer), in order to help reverse engineers focus on interesting code.

Screenshot

Supported Targets

The plugin has been tested on x86 and x86_64 executables protected with Oreans's products up to version 3.1.9.

How to Build

git clone https://github.com/ergrelet/themida-spotter-bn && cd themida-spotter-bn
cargo build --release

The plugin will then be available at target/release/themida_spotter_bn.dll if you're on Windows for example.

How to Install

Check out the official Binary Ninja documentation to know where to copy the files: Using Plugins

About

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages