oureveryday

sktrace

Cpp-Hooking

Cpp Hooking - Set up function hooking easily and writing less code (P.S You can also find the python version @ https://github.com/vic4key/py-hooking.git)

Triton

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

PinTools

Pintool example and PoC for dynamic binary analysis

pinvmp

PinVMP：虚拟化代码辅助分析工具

ZZZ-ClientSimulator

SussyPayloads

Some scripts for some RCE framework in some gacha game

Steam_ID

Steam ID Info/Calculator

HexRaysCodeXplorer

Hex-Rays Decompiler plugin for better code navigation

Virtuailor

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

Onekey

Onekey Steam Depot Manifest Downloader

unipacker

Automatic and platform-independent unpacker for Windows binaries based on emulation

GS_Lua

Lua files dumped from some anime game

ByteSize

ByteSize is a utility class that makes byte size representation in code easier by removing ambiguity of the value being represented. ByteSize is to bytes what System.TimeSpan is to time.

shuji

Reverse engineering JavaScript and CSS sources from sourcemaps

minhook

The Minimalistic x86/x64 API Hooking Library for Windows

ExtremeInjector

IPDB

Cloudflare反代优选IP库

EDtunnel

Use Cloudflare pages and worker serverless to implement VLESS protocol

NtCall64

Windows NT x64 syscall fuzzer

SyscallTables

Windows NT Syscall tables

themida-spotter-bn

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

IAT-Tracer

An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (.tag) files.

execution-trace-viewer

Tool for viewing and analyzing execution traces

x64dbg-vmp-trace

unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared up A LOT of misconceptions I had regarding VMP, and helped me not be as spooked as before about trying to use complex libs

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

tiny_tracer

A Pin Tool for tracing API calls etc

HyperHide

Hypervisor based anti anti debug plugin for x64dbg

Frida-VMProtect-Bypass

Dumpcs2Protobuf

tool to extract the obfuscated protobuf messages from dump.cs file (works on GI <3.5.5, SR)