drakonia

NixImports. A .NET malware loader, using API-Hashing to evade static analysis

Origami. Packer compressing .net assemblies, (ab)using the PE format for data storage

XorStringsNET. Easy XOR string encryption for NET based binaries

MurkyStrings. A string obfuscator for .NET apps, built to evade static string analysis.

Unscrambler. Universal unpacker and fixer for a number of modded ConfuserEx protections

Simple-Costura-Decompressor. Simple tool to extract and decompress embedded resources processed by Fody Costura

tooling-playground. A collection of small scripts and tools for deobfuscation and malware analysis.

FlatUI-Midnight. FlatUI Dark Reskin for Winforms .NET 4.0

Greenline. Unpacker and Config Extractor for managed Redline Stealer payloads

yara-rules. A collection of my yara rules

de4dot_gui. Simple GUI app to simplify manual string decryption with de4dot

NoChallenge. A tool to automatically defeat .NET crackmes based on string equality comparisons

DontPoisonMySource. Simple tool to check visual studio project files for Exec, PreBuildEvent and PostBuildEvent

simple-string-encryption. Simple website to automatically generate string encryption/decryption routines for C#

LagSwitch. C#

AHK-Dumper. Dumper for compiled AutoHotKey Scripts

dr4k0nia.github.io. SCSS

de4dot. .NET deobfuscator and unpacker.

AsmResolver. A library for editing PE files with full .NET metadata support

autoit-extractor. AutoIt Extractor transferred to GitHub

Configuration_extractors. Python

pycdc. C++ python bytecode disassembler and decompiler