Skip to content

findLoop - find possible encryption/decryption or compression/decompression code

License

Notifications You must be signed in to change notification settings

secrary/findLoop

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

findLoop

findLoop uses DynamoRIO to find code blocks executed more than ITER_LIMIT times (ITER_LIMIT is defined inside the project)

Based on produced data the project generates IDA Python script, which sets breakpoints at addresses executed more than ITER_LIMIT times.

The project can be used to find possible encryption/decryption and compression/decompression code snippets.

Possible Targets:

Crackmes, malware samples, etc.

BUILD:

The project assumes that C:\\dynamorio points to the DynamoRIO folder.

maxresdefault

About

findLoop - find possible encryption/decryption or compression/decompression code

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages