diff --git a/README.md b/README.md index 8d9526e..cd8e9a1 100644 --- a/README.md +++ b/README.md @@ -1014,6 +1014,10 @@ _return-to-libc techniques_ avast-tl/retdec RetDec is a retargetable machine-code decompiler based on LLVM + + Compiler Explorer + Online compiler explorer + enkomio/shed .NET runtine inspector. Shed - Inspect .NET malware like a Sir @@ -1615,6 +1619,10 @@ _return-to-libc techniques_ glmcdona/Process-Dump Windows tool for dumping malware PE files from memory back to disk for analysis. + + GreatSCT/GreatSCT + The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team + hasherezade/libpeconv/runpe RunPE (aka Process Hollowing) is a well known technique allowing to injecting a new PE into a remote processes, imprersonating this process. The given implementation works for PE 32bit as well as 64bit.