1 dépôt
Tools that remove protection layers from memory-dumped or protected binary files to enable further analysis.
Distinct from Binary Memory Dumping: Distinct from Binary Memory Dumping: focuses on stripping protections from dumped binaries, not on the dumping process itself.
Explore 1 awesome GitHub repository matching operating systems & systems programming · Protection Strippers. Refine with filters or upvote what's useful.
Il2CppDumper is a reverse engineering tool that recovers original .NET assembly structure from Unity games compiled with il2cpp. It parses il2cpp binaries across multiple executable formats including ELF, Mach-O, PE, NSO, and WASM, and reconstructs the original DLL structure from embedded metadata tables, enabling decompilation and analysis of game code. The tool generates disassembler scripts for IDA, Ghidra, and Binary Ninja that apply recovered type definitions and structure layouts to the binary analysis. It also strips protection layers from memory-dumped libil2cpp.so files and simple PE
Strips protection layers from memory-dumped libil2cpp.so files and simple PE-protected binaries for analysis.