Popular repositories Loading

1. HallWatch HallWatch Public

   Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.

   C++ 85 10

2. Nemesis Nemesis Public

   .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.

   C++ 40 4

3. UnConfuserEx UnConfuserEx Public

   A ConfuserEx2 deobfuscator with support for anti tamper, compressor, constants, control flow, and resource recovery.

   C# 38 3

4. Malware-Analysis Malware-Analysis Public

   Repository containing analysis of malware samples found in the wild.

   Python 6