Air14 / HyperHide
Hypervisor based anti anti debug plugin for x64dbg
☆1,274Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for HyperHide
- Hiding kernel-driver for x86/x64.☆2,122Updated 10 months ago
- A dynamic VMP dumper and import fixer, powered by VTIL.☆1,154Updated 4 years ago
- Dumping processes using the power of kernel space !☆983Updated last year
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,115Updated 7 months ago
- Turn off PatchGuard in real time for win7 (7600) ~ later☆984Updated 2 years ago
- x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)☆479Updated 3 years ago
- A static devirtualizer for VMProtect x64 3.x. powered by VTIL.☆1,957Updated 3 years ago
- Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.☆1,064Updated last year
- Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.☆787Updated 6 months ago
- Access without a real handle☆893Updated 3 years ago
- VirtualKD-Redux - A revival and modernization of VirtualKD☆820Updated 4 months ago
- A collection of x64dbg scripts. Feel free to submit a pull request to add your script.☆501Updated 5 months ago
- Kernel Driver Utility☆1,954Updated last week
- A bunch of Windows anti-debugging tricks for x86 and x64.☆766Updated 3 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,137Updated 6 months ago
- kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology☆429Updated 4 years ago
- Disable PatchGuard and Driver Signature Enforcement at boot time☆1,820Updated 10 months ago
- Literally, the perfect injector.☆866Updated last year
- xAnalyzer plugin for x64dbg☆1,019Updated 3 years ago
- Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide☆3,476Updated 5 months ago
- Windows Anti-Rootkit Tool☆465Updated 2 weeks ago
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆845Updated 4 years ago
- Universal PatchGuard and Driver Signature Enforcement Disable☆829Updated 5 years ago
- VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.☆437Updated last year
- The BEST DLL Injector Library.☆1,057Updated 6 months ago
- Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.☆938Updated last year
- Protected Processes Light Killer☆889Updated last year
- Imports Reconstructor☆1,120Updated last year
- Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.☆1,180Updated 2 years ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,117Updated 2 weeks ago