Fast and Simple Face Swap Extension Node for ComfyUI

lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI

Minifilter Callback Patching Proof-of-Concept

Convenient high-level C++ wrapper around the Windows Registry API

VirtualKD-Redux - A revival and modernization of VirtualKD

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

DRAKVUF Black-box Binary Analysis

Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)

Detours with just single dependency - NTDLL

A Dynamic Binary Instrumentation framework based on LLVM.

A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

Automated static analysis tools for binary programs

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

Malware Configuration And Payload Extraction

capemon: CAPE's monitor

动态二进制插桩框架DynamoRIO通过将程序代码进行反复插桩(Instrumentation)执行构建了源程序代码与操纵代码之间的桥梁,使DynamoRIO的客户端编写者能够在更高的层面上驾驭原有的程序代码.虽然程序的载体还是被编译成原生的汇编指令集执行,但是不管是原生代码还是程序行为逻辑DynamoRIO为我们提供丰富的API已经把这些封装成了足够友好操作方式暴露给客户端编写者使用,用户…

Basic Block Trace: DynamoRIO client

Directed Greybox Fuzzing with AFL

一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..

C++20, x86/x64 Hooking Libary v2.0

An automatic unpacker and logger for DotNet Framework targeting files

A library for patching, replacing and decorating .NET and Mono methods during runtime

Sample use cases of the .NET native code hooking technique

The example code to be presented to DDD Melbourne 2011 - I have since turned this into a spike into IL rewriting

A GPT-4 AI Tutor Prompt for customizable personalized learning experiences.

The first real AI developer

DyninstAPI: Tools for binary instrumentation, analysis, and modification.

Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

All-in-One malware analysis tool.

The FLARE team's open-source tool to identify capabilities in executable files.