Recover and statically analyze manually-mapped DLLs whose PE headers are wiped at runtime. Pure-stdlib Python, no driver, no debugger required. Includes a Claude Code skill.
Appears on
Quick read
Latest capture 2026-07-11 03:06
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
2 observed captures since 2026-06-24. Observed captures are shown by default.
Stars from first capture +1
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
No description.
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods BYOVD
Portable Executable reversing tool with a friendly GUI
Il2CppDumper fork with a native Rust PDB generator for x64 PE (GameAssembly.dll): function names, full struct types and typed prototypes, auto-loaded by IDA.
The flight recorder for Claude Code. Persistent memory across sessions, hook-level capture of every edit, error and decision, and a bracket around /goal so an unattended run cannot poll all night, lose its record, or die silently. Nothing self-reported: the run report is what the hooks saw.
