Popular repositories

1. sigcheck sigcheck Public

   Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

   Python 17 4

2. rop3 rop3 Public

   A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

   Python 13

3. windows-memory-extractor windows-memory-extractor Public

   Tool to extract contents from the memory of Windows systems.

   C++ 11 1

4. modex modex Public

   Volatility 3 plugins to extract a module as complete as possible

   Python 10

5. pinVMShield pinVMShield Public

   A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

   C++ 9 2

6. winesap winesap Public

   Volatility plugin to search for all Autostart Extensibility Points (AESPs)

   Python 9