Alternatives and similar repositories for hvICE

Users that are interested in hvICE are comparing it to the libraries listed below

• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆48Updated 2 years ago
• shareef12 / driveranalyzer
  Binary Ninja plugin to perform automated analysis of Windows drivers
  ☆20Updated 6 years ago
• hugsy / bochscpu-python
  Python bindings for BochsCPU
  ☆37Updated 5 months ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆27Updated 3 years ago
• bluefrostsecurity / Meltdown-KVA-Shadow-Leak
  ☆49Updated 5 years ago
• samrussell / obfus
  Playing with LLVM passes
  ☆40Updated 2 years ago
• thalium / WinDbgFastObj
  ☆21Updated 4 years ago
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆113Updated 3 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆86Updated 5 years ago
• ioncodes / kdbg-driver-vagrant
  ☆43Updated 4 years ago
• Nadharm / CoVirt
  A dynamically loadable virtual-machine based rootkit designed for Linux Kernel v5.13.0 using AMD-V (SVM).
  ☆35Updated 3 months ago
• TakahiroHaruyama / SpiMitm
  SPI flash read MitM attack PoC
  ☆40Updated 3 years ago
• alfarom256 / MinifilterResearch
  ☆16Updated 3 years ago
• ergot86 / hyperv_stuff
  Hyper-V related resources
  ☆31Updated last year
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆41Updated 2 years ago
• Toroto006 / windows-kernel-driver-pipeline
  This master thesis project continuously collects and analyses Microsoft Windows kernel drivers using static and dynamic methods to help s…
  ☆21Updated last year
• BehroozAbbassi / VmwpMonitor
  ☆41Updated 4 years ago
• Signal-Labs / FileHook
  ☆30Updated 5 years ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Updated 2 years ago
• BehroozAbbassi / sdkffi
  A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.
  ☆94Updated 3 years ago
• b-irb / sauron
  Simple Intel VT-x type-2 hypervisor for 64-bit Linux.
  ☆19Updated 5 years ago
• fvrmatteo / oracle-synthesis-meets-equality-saturation
  ☆25Updated 8 months ago
• 0vercl0k / symbolizer-rs
  A fast execution trace symbolizer for Windows that runs on all major platforms and doesn't depend on any Microsoft libraries.
  ☆100Updated 3 weeks ago
• 0vercl0k / kdmp-parser-rs
  A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.
  ☆41Updated 3 weeks ago
• leandrofroes / bn_ifl
  IFL - Interactive Functions List (plugin for Binary Ninja)
  ☆25Updated last year
• intel / vmtaint
  Full-VM taint analysis with Xen, Intel(R) Processor Trace and Triton.
  ☆43Updated 2 years ago
• POPFD / cascade
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆12Updated 2 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆48Updated last year
• tum-i4 / dta-vs-osc
  Dynamic Taint Analysis versus Obfuscated Self-Checking
  ☆16Updated 4 years ago
• LLVMParty / RemillWorkshop
  ☆62Updated 11 months ago