anti-analysis 开源项目推荐（54 个）

ayoubfaouzi /al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

CheckPointSW /Evasions

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

NotRequiem /antidbg

A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering

0xor0ne /debugoff

Linux anti-debugging and anti-analysis rust library

NavyTitanium /Fake-Sandbox-Artifacts

This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

iamsopotatoe-coder /TinyLoad

Windows 版的 PE 打包器/加密器。通过自定义虚拟机将可执行文件压缩并加密为自解压存根。

nodiuus /nocturne

A bin2bin code virtualizer for x86-64 PE's

MahmoudZohdy /APICallProxy

Windows API Call Obfuscation

nevergiveupcpp /obfuscxx

Header-only compile-time variables obfuscation library for C++20 and later. Compiler Support: MSVC (+WDM), Clang, GCC. Architecture Support: x86, x86-64, ARM64. OS Support: Windows, Linux, macOS.

Malwation /sentello

Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.

Maldev-Academy /DRMBinViaOrdinalImports

Create Anti-Copy DRM Malware

vibheksoni /ferrox

Windows infostealer in Rust with polymorphic builds, Hell's Gate syscalls, and compile-time encryption. Educational use only.

BinaryResearch /lepton

Lepton is a Lightweight ELF Parsing Tool that was designed specifically for analyzing and editing binaries with damaged or corrupted ELF headers.

OMirzaei /AndrODet

AndrODet: An Adaptive Android Obfuscation Detector

lapla-cogito /cattleya

ELF obfuscator written in Rust

Arty3 /Stack-Obfuscator

High performance anti-analysis header for Windows (Kernel & User) and Linux systems

ktn1703 /PyCool-Obfuscator

shit python obf

ericyoc /obfuscation_techniques_poc

Demonstrates of eight common code obfuscation techniques

zero2504 /Shadow-Rebirth

Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique

zero2504 /Memory-Mirage-Anti-Debugging-

Use of in-memory string scans to outsmart reverse engineers