dump-guy Goto Github PK

.net-deobfuscator

Lists of .NET Deobfuscator and Unpacker (Open Source)

apiscout

This project aims at simplifying Windows API import recovery on arbitrary memory dumps

asmresolver

A library for editing PE files with full .NET metadata support

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

backstab

A tool to kill antimalware protected processes

capa

The FLARE team's open-source tool to identify capabilities in executable files.

capa_jsonconver

Converts exported results of CAPA tool from .json format to another formats supporting by different tools.

clrmd

Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.

confuserex2_string_decryptor

ConfuserEx2 String Decryptor & Full Deobfuscation Guide

crackme-examples

Some of CrackMes made by me :)

crossinject

32 bit process inject shellcode to 32 bit process and 64 bit process

de4dot

.NET deobfuscator and unpacker.

de4dot-cex

📦 de4dot deobfuscator with full support for vanilla ConfuserEx

debugging-tools-andrey-bazhan

dircreate2system

Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting

dnspy

.NET debugger and assembly editor

dotnetuniversalpatcher

A .NET Patcher written in C# that implements the dnlib and dnpatch libraries.

dp701

Dark theme for IDA Pro

drivermon

Monitor activity of any driver

dumbassembly

version 0.5.8

exploit-development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

flare-on9-chal11_unpacking-pyarmor

My write-up for challenge 11 flareon 9: unpacking pyarmor

funcscanner

Collects extended function properties from IDA Pro databases

garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

get-pdinvokeimports

Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke usage in assembly. Showing all locations from where they are referenced and Exports all to DnSpy_Bookmarks.xml

get-unjlaive

Get-UnJlaive is tool which is able to reconstruct Jlaive (.NET Antivirus Evasion Tool (Exe2Bat)) to original Assembly and stub Assembly.

ghidra_scripts

ghidra_scripts-1

Scripts for the Ghidra software reverse engineering suite.

go_crackme

Little Reversing CrackMe written in GO

heavens-gate-2.0

Executes 64bit code from a 32bit process