Popular repositories

1. pe-sieve

   Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

   C++ 1.5k 255

2. malware_training_vol1

   Materials for Windows Malware Analysis training (volume 1)

   Assembly 1.5k 116

3. hollows_hunter

   Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

   C 863 139

4. pe_to_shellcode

   Converts PE into a shellcode

   Assembly 858 215

5. demos

   Demos of various injection techniques found in malware

   C 607 167

6. dll_to_exe

   Converts a DLL into EXE

   C++ 577 145