Discover mrexodia/YaraFlirt Open Source project

Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary process.

471

AppInitHook

127

lolbin-poc

Small PoC of using a Microsoft signed executable as a lolbin.

Ever wanted to execute PHP in your kernel driver? Look no further!

112

NtPhp

akt

Armadillo Key Tool

Simple tool that allows you to have multiple Just-In-Time debuggers at once.

JitMagic

haxxmap

Some simple go tools to perform a Man-in-the-middle (MITM) attack on your IMAP server in case you forgot your password.

EfiCMake

CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).

Ghetto user mode emulation of Windows kernel drivers.

driver_unpacking

ArmaG3ddon

ArmaG3ddon by CondZero/ARTeam

IDA plugin to patch IDA Pro in memory.

idapatch

Simple x64dbg plugin to save a full memory dump

MiniDumpPlugin

Perfect DLL Proxying using forwards with absolute paths.

perfect-dll-proxy

Plugin for x64dbg to generate Yara rules from function basic blocks.

YaraGen

REToolSync

Collaboration platform for reverse engineering tools.

Parallel signature matcher in C#

PatternFinder

CEAutoAttach

Tool to automatically make Cheat Engine attach to a process via the command line.

Example of using as a CMake Toolchain for cross compiling.

zig-cross

Modern reimplementation of Workrave in Qt. Optimized to look out for you where you don't.

Diff

Diff plugin for x64dbg

WorkraveQt

Automatically exported from code.google.com/p/portable-executable-library

portable-executable-library

Small project to generate fake DLLs based on an executable's import table

IATFaker

Just some fun utilities I wrote for productivity reasons.

DotNetPluginCS

DotNetPluginCS based on:

FunUtils

VMHunt_instracelog

Windows build files for the VMHunt Intel PIN Trace tool

CpConverter

Code Page Converter - Convert HTML/Text files to different encoding formats e.g. ANSI to UTF-8 or Unicode. Convert multiple files with 1 click. Works with all encodings.

VMProtectTest

Injectable DLL that helps with debugging Wibu CodeMeter.

WibuDebugHook

go-gitea-webhook

Simple webhook receiver implementation for Gitea/Gogs.

regstep

Simple x64dbg plugin to show registers on every step.

DisableParallelLoader

Plugin for x64dbg to disable parallel loading of dependencies

Simple tool to perform AStyle formatting in a git repository.

AStyleHelper

DarkSouls3.TextViewer

This tool helps you view all in-game text of Dark Souls 3.

cxx-common-cmake

Experiment building lifting-bits dependencies with pure CMake

Use Rosetta to run amd64 binaries on your M1 with Multipass.

rosetta-multipass

Sample x64dbg plugin to scan the stack during tracing.

StackContains

mrexodia.github.io

Personal blog

CSS

SN8F2288_gui

Interactive disassembler and emulator for the SN8F2288.

Disables FlashWindow and FlashWindowEx using AppInit_DLLs hook.

NoFlashWindow

Simple C# GUI for BoomPow (banano miner).

BoomPowGui

Utf8Ini

Small C++ INI Parser.

Plugin for x64dbg to break on unresolved APIs.

BreakpointUnresolved

gogitterirc

Gitter/IRC Sync bot written in Go

imgui_cmkr

Experimental imgui app framework for rapid prototyping.

DrDecode

Simple plugin for x64dbg to decode debug registers

cloudflare-redirect

Simple CloudFlare Worker to implement a service similar to redirect.name, but with HTTPS support.

JavaScript

SimpleAutoItCrypter

Simple AutoIt crypter.

Some super old control flow exploration experiments

Arxan

TracePlugin

Very simple trace plugin example for x64dbg.

pygame_qt

Combinding pygame and PyQt5 in python3

Very simple cross-platform utility to manage your git identities.

GitIdentityManagerCpp

Example Svelte frontend with C++ backend

svelte-cpp-whiskey-list

Bot to synchronize Livecoding and Twitch chats.

LivecodingTwitch

CMakeMASM

Simple brainfuck interpreter written for Quora.

BrainfuckInterpreter

Plugin for x64dbg to paste a file in memory...

PasteFile

AsmParser

Loose parser for x86 assembly, used for translating them into IR.

Example plugin for x64dbg to handle mouse click events.

ClickCatcher

unicorn_template

Project template for unicorn based on CPM.

Simple template for IXWebSocket (websocket and http client/server library for C++) based on CPM.

IXWebSocket_template

Example CMake project for VTIL.

VTIL-Hello

Very simple utility to automatically check for, download and install the latest version of Cutter.

CutterUpdater

XInputScanner

Tool for x360ce to scan which XInput DLL is used.

BatchDecompiler

Script to batch-decompile things with IDA.

SMMNEX

010 editor binary templates for SMM NEX

JNIEnv

Plugin to assist in reverse engineering programs that use JNI.

debuggerpyd

Random Script DLL for x64dbg

TimeStampFormat

Example plugin to print a timestamp in the log.

GleeDbg

Experiments with imgui

Telegram/Slack synchronization bot.

gotgslack

NativeExport

Very simple example of native exports with C# and C++

vergiliusparser

Simple script to scrape https://www.vergiliusproject.com/

Plugin for x64dbg to add a command that extends the dump selection

ExtendDumpSel

StaticEngine

Playground for statically loading files into x64dbg.

ModulePathList

A simple x64dbg plugin to list modules with their paths.

cgit-theme

A theme for cgit

CSS

ExpressionParser

Very simple expression parser for binary operations with operator precedence, unary minus/plus/NOT and parentheses.

fluffy-adventure

Some testing code with binary visualization

Automatically exported from code.google.com/p/miasm

reimagined-umbrella

SwigSample

SwigSample with C#

miasm-old

The pattern matching swiss knife (used by x64dbg).

yara_vs13

QClickableMenu

Project to support the triggered signal of the QMenu::menuAction if you click on the QMenu.

CMakePackageExample

Easily search LLVM headers for all major versions!

llvm-headers

My solutions to the cryptopals crypto challenges.

cryptopals

Objective-C

RestartSpam

Simple plugin to spam restarts in x64dbg

Simple GUI to visualize a results file from VisualMutator.

VisualMutatorGUI

pybind11_example

Knowledge base watching and scraping service.

kraken

knowledge-base

TypeScript

angelscript-cpp-interface-generator

Automatically exported from code.google.com/p/angelscript-cpp-interface-generator

SimpleIATParser

Common utility library for RotMG by creepylava.

DebugLoopRace

mandelbrot

RotMG.Common

python64

Hack to have both python and python64 in your PATH environment variable.

A test CLion/CMake project for OpenCV 3 on OS X.

OpenCVTest