A POC to detect the exist of VMProtect 3 protection by search feature watermark.
☆84Dec 16, 2023Updated 2 years ago
Alternatives and similar repositories for DetectVMP3
Users that are interested in DetectVMP3 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆51Aug 29, 2024Updated last year
- ☆48Feb 3, 2025Updated last year
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆98Jan 1, 2026Updated 2 months ago
- VMProtect 2.x-3.x x64 Import Deobfuscator☆437Oct 22, 2025Updated 5 months ago
- 用来辅助分析易语言程序的IDA插件☆521Mar 19, 2024Updated 2 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆77Feb 9, 2022Updated 4 years ago
- VMPilot: A Modern C++ Virtual Machine SDK☆276Updated this week
- 从MmPfnData中枚举进程和页目录基址☆208Aug 18, 2023Updated 2 years ago
- Titan is a VMProtect devirtualizer☆121Mar 6, 2024Updated 2 years ago
- A dark x64dbg color theme based on IDA Consonance☆19Apr 5, 2018Updated 7 years ago
- Kernel ReClassEx☆68Nov 21, 2023Updated 2 years ago
- ☆158May 21, 2024Updated last year
- Windows Anti-Rootkit Tool☆547Dec 31, 2025Updated 2 months ago
- If you are cracking a mfc program, you may find this useful.☆73Sep 3, 2013Updated 12 years ago
- PE (and elf now!) bin2bin obfuscator☆831Oct 11, 2025Updated 5 months ago
- PoC code for IsValidImageCRC()☆22May 3, 2023Updated 2 years ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆64Jul 17, 2024Updated last year
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆37Mar 3, 2026Updated 2 weeks ago
- 一个简单的 稳定 ICMP 传输 示例,在公网中传输可能有点慢,但很稳定,适合初学者☆11Mar 9, 2022Updated 4 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆779Mar 8, 2026Updated 2 weeks ago
- Windows Console Monitor☆34Jun 11, 2019Updated 6 years ago
- an ida plugin used to decompile vmp☆376Jul 2, 2024Updated last year
- ☆19Feb 5, 2025Updated last year
- ☆56Nov 21, 2022Updated 3 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆61Oct 19, 2024Updated last year
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆19Feb 12, 2026Updated last month
- Create and use macros in IDA's CLIs☆66Dec 26, 2025Updated 2 months ago
- SymbolTypeViewer_汉化☆17Sep 4, 2020Updated 5 years ago
- 易语言窗口测试器☆34Jun 27, 2021Updated 4 years ago
- Logging library for kernel drivers written for the Windows NT operating system.☆21Oct 17, 2025Updated 5 months ago
- 一个用来做windows内核hook的框架☆188Apr 29, 2025Updated 10 months ago
- Call NtCreateUserProcess directly as normal.☆77May 17, 2022Updated 3 years ago
- ☆309May 11, 2023Updated 2 years ago
- ida pdb plugin with enhance and bugfix☆124Feb 27, 2026Updated 3 weeks ago
- 对debughelp的二次开发☆11Feb 20, 2023Updated 3 years ago
- ☆20Mar 13, 2018Updated 8 years ago
- Fix VMProtect3 IAT☆309Dec 5, 2023Updated 2 years ago
- windows kernel pagehook☆42Oct 30, 2022Updated 3 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆163Oct 20, 2024Updated last year