Alternatives and similar repositories for DetectVMP3

Users that are interested in DetectVMP3 are comparing it to the libraries listed below

• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆63Updated 3 weeks ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆79Updated 8 months ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆70Updated last year
• wbaby / xx_tvm
  ☆44Updated 2 years ago
• ResetMineMind / tinyKernelHook
  一个仅使用2字节修改实现内核任意函数hook的方法。
  ☆57Updated 4 months ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆148Updated 7 months ago
• zzhouhe / VM_Analyze
  ☆89Updated 4 years ago
• oureveryday / VMPUnpacker
  ☆124Updated 4 months ago
• Chordp / PatternGen
  ☆101Updated 3 years ago
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆75Updated 3 years ago
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆42Updated 3 years ago
• gajiucai-r0-MrCHEN / KanXue-MrChen-melon
  鹅城的百姓不需要有青天大老爷，于是黄四郎就出手干掉了很多好县长。
  ☆27Updated 2 years ago
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆30Updated 9 months ago
• OMRI-FRX / check_EPT_hook
  无痕hook探测
  ☆33Updated last month
• VMProtectResearch / vmp2-devirtualization
  vmp2.x devirtualization
  ☆81Updated 10 months ago
• fjqisba / VB-Helper
  用来辅助分析VB程序的IDA插件
  ☆24Updated 4 years ago
• YanStar / FixVmpDump
  use python script to fix vmp dump api in ida
  ☆120Updated 4 years ago
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆61Updated last month
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆119Updated last week
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆103Updated last year
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆70Updated 4 years ago
• DejavuSecure / DetectNtoskrnlIntegrity
  Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe
  ☆13Updated 6 months ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆178Updated 5 months ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• r3bb1t / vmp_analyzer
  ☆37Updated 2 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆110Updated 3 years ago
• g0mxxm / Anti-Obfuscation
  The tool can be used to eliminate redundant instructions in a basic block.
  ☆81Updated 2 years ago
• OMRI-FRX / LMalz
  硬件虚拟化
  ☆50Updated last month
• AyinSama / Anti-AntiDebuggerDriver
  VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
  ☆76Updated 2 years ago
• chramiq / de4vmp
  vmp .net devirtualizer
  ☆52Updated last year