#Deobfuscation
Showing 22 of 22 repositories tagged #deobfuscation, ranked by stars
Android virtual machine and deobfuscator
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
Next-generation JavaScript analysis tooling
A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!
IdaClu is a version agnostic IDA Pro plugin for grouping similar functions. Pick an existing grouping algorithm or create your own.
Decompiler and deobfuscator that offers support to track discord webhooks inside: blank stealer, luna grabber, thiefcat, Creal and all unobfuscated grabbers
A curated list of tools useful within the field of cyber security, for both blue and red team operations.
Powershell/Javascript deobfuscator based on tree-sitter
Binary Ninja plugin for loading VTIL routines and lifting VTIL instructions to LLIL for analysis.
Deobfuscate "paranoid" protected apps
Powershell script deobfuscation using AST in Python
SVG Analysis and generation tools for commonly seen SVG attachment phishing
A simple commandline application to automatically decrypt strings from Obfuscator protected binaries
A tool for deobfuscating JavaScript code protected by JSDefender to make it easier to analyse
A simple algorithm for statically decrypting strings from JSConfuser-protected programs.
Java-layer Android Malware Simplifier
A high-performance, cross-platform framework for analyzing and reverse engineering .NET PE executables. Built in pure Rust, `dotscope` provides comprehensive tooling for parsing CIL (Common Intermediate Language) bytecode, metadata structures, and disassembling .NET assemblies without requiring Windows or the .NET runtime.
Static Deobfuscator for AuRAT Malware Family
Deobfuscates PowerShell format strings