A work-in-progress deobfuscator for movfuscated binaries
Principalele funcționalități ale kirschju/demovfuscator sunt: Reverse Engineering.
Alternativele open-source pentru kirschju/demovfuscator includ: androguard/androguard — Reverse engineering and pentesting for Android applications. angr/angr — Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves… aquynh/capstone — Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code… binaryanalysisplatform/bap — Binary Analysis Platform. boomerangdecompiler/boomerang — Boomerang Decompiler - Fighting the code-rot :). 0xd4d/dnspy — dnSpy is a specialized toolset for the reverse engineering, analysis, and modification of compiled .NET binaries. It…
Reverse engineering and pentesting for Android applications
Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the
Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code into human-readable assembly instructions for a wide variety of hardware instruction set architectures and virtual machines. The framework supports a diverse range of targets, including x86, ARM, RISC-V, and MIPS, as well as virtual machine environments like WebAssembly and the Ethereum Virtual Machine. It functions as an instruction analysis tool capable of extracting granular decomposition data and semantic information from disassembled code. The engine is designed for low-
dnSpy is a specialized toolset for the reverse engineering, analysis, and modification of compiled .NET binaries. It functions as a decompiler that converts assemblies back into readable high-level source code, an assembly editor for modifying bytecode and metadata, and a debugger for inspecting compiled binaries. The project integrates a hex editor specifically for inspecting and modifying raw bytes and Common Intermediate Language structures. It allows for the direct modification of binary contents to change application behavior without requiring the original project source files. The tool