Alternatives and similar repositories for DetectVMP3

Users that are interested in DetectVMP3 are comparing it to the libraries listed below

• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆62Updated 2 months ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆76Updated last year
• ResetMineMind / tinyKernelHook
  一个仅使用2字节修改实现内核任意函数hook的方法。
  ☆56Updated 5 months ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆80Updated 9 months ago
• OMRI-FRX / check_EPT_hook
  无痕hook探测
  ☆37Updated 3 months ago
• wbaby / xx_tvm
  ☆43Updated 2 years ago
• oureveryday / VMPUnpacker
  ☆131Updated 5 months ago
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆30Updated 10 months ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆146Updated 8 months ago
• zzhouhe / VM_Analyze
  ☆89Updated 4 years ago
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆43Updated 3 years ago
• Chordp / PatternGen
  ☆100Updated 3 years ago
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆104Updated last year
• YanStar / FixVmpDump
  use python script to fix vmp dump api in ida
  ☆120Updated 4 years ago
• szdyg / pdb_proxy
  ☆47Updated 9 months ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆181Updated 6 months ago
• VMProtectResearch / vmp2-devirtualization
  vmp2.x devirtualization
  ☆84Updated last year
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆65Updated 3 months ago
• OMRI-FRX / LMalz
  硬件虚拟化
  ☆52Updated 2 months ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆68Updated 4 years ago
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆124Updated this week
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆75Updated 3 years ago
• gajiucai-r0-MrCHEN / KanXue-MrChen-melon
  鹅城的百姓不需要有青天大老爷，于是黄四郎就出手干掉了很多好县长。
  ☆27Updated 2 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• fjqisba / VB-Helper
  用来辅助分析VB程序的IDA插件
  ☆25Updated 4 years ago
• r3bb1t / vmp_analyzer
  ☆37Updated 2 years ago
• maskelihileci / IDA_Ollvm-unflattener
  Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.
  ☆88Updated 6 months ago
• sonyps5201314 / pdb
  ida pdb plugin with enhance and bugfix
  ☆119Updated 2 months ago
• AyinSama / Anti-AntiDebuggerDriver
  VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
  ☆76Updated 3 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆110Updated 3 years ago