RME-DisCo Research Group

Popular repositories Loading

1. winapi-categories winapi-categoriesPublic

   Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

   Python 28 2

2. sigcheck sigcheckPublic

   Volatility3 plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

   Python 20 4

3. rop3 rop3Public

   A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

   Python 19 1

4. windows-memory-extractor windows-memory-extractorPublic

   Tool to extract contents from the memory of Windows systems.

   C++ 13 2

5. APOTHEOSIS APOTHEOSISPublic

   A specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor lookup of approximate matching hashes

   Python 13 4

6. modex modexPublic

   Volatility 3 plugins to extract a module as complete as possible

   Python 12