diff --git a/reverse_engineering/README.md b/reverse_engineering/README.md index 98a089e..1383478 100644 --- a/reverse_engineering/README.md +++ b/reverse_engineering/README.md @@ -36,6 +36,22 @@ ## Sandbox and Stuff * [Cuckoo](https://cuckoosandbox.org/) +## Deobfuscation + +* [Balbuzard](https://bitbucket.org/decalage/balbuzard/wiki/Home) +* [de4dot](https://github.com/0xd4d/de4dot) +* [ex_pe_xor](ex_pe_xor) +* [iheartxor](http://hooked-on-mnemonics.blogspot.com/p/iheartxor.html) +* [FLOSS](https://github.com/fireeye/flare-floss) +* [NoMoreXOR](https://github.com/hiddenillusion/NoMoreXOR) +* [PackerAttacker](https://github.com/BromiumLabs/PackerAttacker) +* [unpacker](https://github.com/malwaremusings/unpacker/) +* [unxor](https://github.com/tomchop/unxor/) +* [VirtualDeobfuscator](https://github.com/jnraber/VirtualDeobfuscator) +* [XORBruteForcer](http://eternal-todo.com/var/scripts/xorbruteforcer) +* [XORSearch & XORStrings](https://blog.didierstevens.com/programs/xorsearch/) +* [xortool](https://github.com/hellman/xortool) + ## Awesome Reversing * https://github.com/fdivrp/awesome-reversing - a plethora of references of tools, practice sites, and other reverse engineering information