Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behaviorally equivalent program with fewer stable static landmarks, more hostile control and data flow, and optional runtime self-protection.
☆59Jul 14, 2026Updated this week
Alternatives and similar repositories for morok
Users that are interested in morok are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An IDA Pro plugin that lifts functions and their dependencies out of IDA Pro into self-contained artifacts.☆44Updated this week
- ☆16May 8, 2026Updated 2 months ago
- rax is a CPU emulator that checks its own work.☆195Updated this week
- ☆101Oct 25, 2025Updated 8 months ago
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆157Jul 7, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆55Jun 10, 2026Updated last month
- Stealth-focused Intel VT-x hypervisor (EAC/BE/ACs/AVs).☆373Mar 20, 2026Updated 3 months ago
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆285Updated this week
- An IDA Hex-Rays microcode filter that lifts AVX/AVX2/AVX-512/AVX10 and VMX/VT-x instructions to intrinsics.☆100Jun 17, 2026Updated 3 weeks ago
- chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.☆200May 6, 2026Updated 2 months ago
- Injecting code by recompiling shellcode into a ROP chain.☆146Apr 21, 2026Updated 2 months ago
- Cracking MBAs☆52Apr 16, 2026Updated 2 months ago
- Interprocess communication via a covert timing channel☆25Oct 24, 2025Updated 8 months ago
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆55Mar 14, 2026Updated 4 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- IDA plugin that allows connecting to third party Lumina servers☆158Mar 14, 2026Updated 4 months ago
- ☆16May 2, 2024Updated 2 years ago
- detect hypervisor with Nmi Callback☆41Sep 25, 2022Updated 3 years ago
- An x86-64 code virtualizer for VM based obfuscation☆242Dec 21, 2024Updated last year
- Advanced DSE bypass tool for Windows 11 Build 26200+. Features symbol-less kernel resolution via dynamic pattern scanning, KDP bypass via…☆22Jun 29, 2026Updated 2 weeks ago
- An advanced library for protecting/obfuscating kernel drivers using the C++ 17 standard.☆44May 7, 2026Updated 2 months ago
- Apple Silicon device emulator. Basic Android support☆21Jul 1, 2026Updated last week
- A Glimpse Into DexProtector☆88Dec 30, 2025Updated 6 months ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆182Jan 15, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A bin2bin code virtualizer for x86-64 PE's☆159Jun 6, 2026Updated last month
- Striga is an experimental lifter from x86_64 to LLVM IR written in Python.☆99Jun 22, 2026Updated 3 weeks ago
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆91Updated this week
- Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulati…☆100Oct 17, 2025Updated 8 months ago
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- ast pattern matching with automated structure recovery for hex-rays decompiler☆38Apr 18, 2026Updated 2 months ago
- A high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation.☆111Jan 18, 2026Updated 5 months ago
- Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation☆304Jul 2, 2026Updated last week
- Themida Devirt Results☆96May 10, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 3 years ago
- MicroVM is a self-guided path for learning how computers work by building a tiny virtual machine.☆25May 3, 2026Updated 2 months ago
- Disassembler for Zeus VM custom instruction set for IDA Pro, based on OALabs one.☆18May 13, 2026Updated 2 months ago
- ☆26Apr 17, 2026Updated 2 months ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆290Jun 2, 2026Updated last month
- protector & obfuscator & code virtualizer☆750Updated this week
- D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time …☆240Updated this week