From 4e5fe97abf0bb22434b896c3e86498db509486f5 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Sun, 23 Sep 2018 17:23:52 +0700 Subject: [PATCH] Add Compiler Explorer --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 8d9526e..cd8e9a1 100644 --- a/README.md +++ b/README.md @@ -1014,6 +1014,10 @@ _return-to-libc techniques_ avast-tl/retdec RetDec is a retargetable machine-code decompiler based on LLVM + + Compiler Explorer + Online compiler explorer + enkomio/shed .NET runtine inspector. Shed - Inspect .NET malware like a Sir @@ -1615,6 +1619,10 @@ _return-to-libc techniques_ glmcdona/Process-Dump Windows tool for dumping malware PE files from memory back to disk for analysis. + + GreatSCT/GreatSCT + The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team + hasherezade/libpeconv/runpe RunPE (aka Process Hollowing) is a well known technique allowing to injecting a new PE into a remote processes, imprersonating this process. The given implementation works for PE 32bit as well as 64bit.