Skip to content
@reverseame

RME-DisCo Research Group

Official repository of RME, a part of the DisCo research group from University of Zaragoza focused on software and systems security

Popular repositories Loading

  1. sigcheck sigcheck Public

    Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

    Python 19 4

  2. rop3 rop3 Public

    A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

    Python 15

  3. windows-memory-extractor windows-memory-extractor Public

    Tool to extract contents from the memory of Windows systems.

    C++ 14 2

  4. winapi-categories winapi-categories Public

    Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

    Python 11 1

  5. modex modex Public

    Volatility 3 plugins to extract a module as complete as possible

    Python 10

  6. pinVMShield pinVMShield Public

    A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

    C++ 9 2

Repositories

Showing 10 of 28 repositories
  • LLM-DGA-lab Public
    0 GPL-3.0 0 0 0 Updated Mar 3, 2025
  • heaplist Public Forked from abeDCP/HeapList

    Volatility 3 plugin to extract the heap from Windows memory images

    Python 0 GPL-3.0 1 0 0 Updated Mar 3, 2025
  • APOTHEOSIS Public

    A specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor lookup of approximate matching hashes

    Python 7 GPL-3.0 2 0 0 Updated Feb 28, 2025
  • MALVADA Public

    MALVADA: Malware Execution Traces Dataset generation.

    Python 3 GPL-3.0 1 0 0 Updated Feb 12, 2025
  • MANTILLA Public

    ...

    Jupyter Notebook 1 GPL-3.0 0 0 0 Updated Jan 14, 2025
  • RAMPAGE Public

    RAMPAGE is a framework aimed at training and comparing machine learning models for the detection of Algorithmically Generated Domains.

    Python 0 GPL-3.0 0 0 0 Updated Dec 27, 2024
  • capemon Public Forked from kevoreilly/capemon

    capemon: CAPE's monitor

    C 2 GPL-3.0 53 0 0 Updated Dec 18, 2024
  • cape-hook-generator Public

    CAPEv2 (capemon) hook skeleton generator (hookdefs) for your malware analysis needs.

    Python 2 GPL-3.0 0 0 0 Updated Dec 16, 2024
  • winapi-categories Public

    Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

    Python 11 GPL-3.0 1 0 0 Updated Jul 11, 2024
  • winesap Public

    Volatility plugin to search for all Autostart Extensibility Points (AESPs)

    Python 9 AGPL-3.0 0 0 0 Updated May 16, 2024
View all repositories