Aidan Khoury

ReClassEx. ReClassEx

SigMaker-x64. IDA Pro 7 and up compatible SigMaker plugin

UEFI-Bootkit. A small bootkit which does not rely on x64 assembly.

ApiSet. API Set resolver for Windows

JetBrains-NASM-Language. Plugin that adds NASM assembly language support for the IntelliJ Platform IDEs

Errata1337. C

pdbfetch. Fetch PDB symbols directly from Microsoft's symbol servers

LLVM-Build-Windows. Batchfile

Windbg2Struct. Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure

Dude-Loader. Class implementation of PowerLoader injection technique

pubg_internal. C

CpuInfo. Small user-mode utility for identifying and determining CPU features

IDA_Signsrch-7.0. C

RemoteCode-Kernel. Simple code generation library developed in C intended for code generation in Kernel mode

windbg_to_c. Translates WinDbg "dt" structure dump to a C structure

CertDump. Small utility to dump certificate information from a Portable Executable file.

IDA_WaitBoxEx-7.0. C++

OpenBSP-MinGW. HTML

qemu-stealth. QEMU patched to hide simple firmware anomalies

OOLua. Biggest pain in the ass to generate project files. EVER.

MakeUSB. Quick program to copy contents directly to a removable device's raw sectors

TestDll. C++

VSNASM. Provides Visual Studio integration for the NASM assembler.

PowerLoaderEx. PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

IDAPython-DumpTable. Dump tables in IDA

unpyclib27. unpyclib updated with opcodes for Python 2.7 (will only work with 2.7 bytecode)

Nanomite. Graphical Debugger for x64 and x86 on Windows

edk2-stealth. EDK II

al-khaser. Public malware techniques used in the wild

vscode-beautiful-light-theme.

vac_public. VAC2 Emulator & VAC3 Response Parser

DebugDetector. C++

DbgShell. A PowerShell front-end for the Windows debugger engine.

Schily-Patches. Patches for building Schily Tools for Windows

ProcMonXv2. Process Monitor X v2

SimpleVisor. SimpleVisor is a simple, Intel x64 Windows-specific hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host).

uncompyle-all. Decompile all python bytecode files in a directory recursively using uncompyle2

TheDiviShun. C++

partcopy. Bringing back the 'partcopy' standalone program to copy contiguous ranges of raw data between files and/or disks.

warbirdvm. An analysis of the Warbird virtual-machine protection for the CI!g_pStore

open-gpu-doc. Documentation of NVIDIA chip/hardware interfaces

dreamboot. UEFI bootkit

openssl. TLS/SSL and crypto library

FwHunt. The Binarly Firmware Hunt (FwHunt) rule format was designed to scan for known vulnerabilities in UEFI firmware.

NoVmp. Static devirtualizer for VMProtect x64 3.x. powered by VTIL.

pciutils-win32. The PCI Utilities

Codecademy-Credit-Card-Checker. JavaScript

vscode-beautiful-dark-theme.

xed. The X86 Encoder Decoder (XED), is a software library for encoding and decoding X86 (IA32 and Intel64) instructions

Tools. Combination of different utilities, have fun!

bochs-clang. Bochs set up to compile using the clang/mingw toolchain

MakeSpriteFont. MakeSpriteFont edit to add support for TTF files.

msbuild-llvm. Fixes a small bug in the LLVM MSBuild targets

preprocessor_def_guard. Adds guards for preprocessor definitions.

MemoryModule. Library to load a DLL from memory.

C-Style-To-IDA. Python

LoL-Uncompress. C#

ARRadar. Java