diff --git a/README.md b/README.md index 84dee12..378e7d6 100644 --- a/README.md +++ b/README.md @@ -732,6 +732,10 @@ This repository is created as an online bookmark for useful links, resources and nccgroup/WindowsMemPageDelta A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection + + OALabs/hashdb-ida + HashDB API hash lookup plugin for IDA Pro + pierrezurek/Signsrch tool for searching signatures inside files, extremely useful in reversing engineering for figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. it can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at runtime and easy to modify.