A POC to detect the exist of VMProtect 3 protection by search feature watermark.
☆84Dec 16, 2023Updated 2 years ago
Alternatives and similar repositories for DetectVMP3
Users that are interested in DetectVMP3 are comparing it to the libraries listed below
Sorting:
- ☆47Feb 3, 2025Updated last year
- VMProtect 2.x-3.x x64 Import Deobfuscator☆429Oct 22, 2025Updated 4 months ago
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆19Feb 12, 2026Updated 2 weeks ago
- ☆51Aug 29, 2024Updated last year
- 用来辅助分析易语言程序的IDA插件☆520Mar 19, 2024Updated last year
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆98Jan 1, 2026Updated 2 months ago
- A dark x64dbg color theme based on IDA Consonance☆19Apr 5, 2018Updated 7 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆77Feb 9, 2022Updated 4 years ago
- Titan is a VMProtect devirtualizer☆118Mar 6, 2024Updated last year
- VMPilot: A Modern C++ Virtual Machine SDK☆274Apr 2, 2025Updated 11 months ago
- 一个简单的 稳定 ICMP 传输 示例，在公网中传输可能有点慢，但很稳定，适合初学者☆11Mar 9, 2022Updated 3 years ago
- A IDA plugin to enable linking to locations in an IDB with a disas:// URI☆33Oct 18, 2023Updated 2 years ago
- Create and use macros in IDA's CLIs☆66Dec 26, 2025Updated 2 months ago
- PoC code for IsValidImageCRC()☆22May 3, 2023Updated 2 years ago
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆36Jan 12, 2022Updated 4 years ago
- 对debughelp的二次开发☆11Feb 20, 2023Updated 3 years ago
- IDA Pro plugin AntiXorstr☆154Feb 24, 2025Updated last year
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆79Dec 17, 2023Updated 2 years ago
- 从MmPfnData中枚举进程和页目录基址☆207Aug 18, 2023Updated 2 years ago
- ☆56Nov 21, 2022Updated 3 years ago
- If you are cracking a mfc program, you may find this useful.☆73Sep 3, 2013Updated 12 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆766Sep 29, 2025Updated 5 months ago
- Kernel ReClassEx☆68Nov 21, 2023Updated 2 years ago
- PE (and elf now!) bin2bin obfuscator☆820Oct 11, 2025Updated 4 months ago
- ☆18Feb 5, 2025Updated last year
- Fix VMProtect3 IAT☆307Dec 5, 2023Updated 2 years ago
- 尽量汇聚反调试资源和利用对抗技术☆182May 21, 2024Updated last year
- Windows Console Monitor☆34Jun 11, 2019Updated 6 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆61Oct 19, 2024Updated last year
- Windows Anti-Rootkit Tool☆546Dec 31, 2025Updated 2 months ago
- ☆158May 21, 2024Updated last year
- IDA Plugin that fills in missing indirect CALL & JMP target information☆144Feb 15, 2026Updated 2 weeks ago
- Ghetto user mode emulation of Windows kernel drivers.☆160Oct 20, 2024Updated last year
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆62Aug 11, 2023Updated 2 years ago
- windows kernel pagehook☆41Oct 30, 2022Updated 3 years ago
- ☆44Aug 8, 2022Updated 3 years ago
- Programming productivity plugin for IDAPython and C++ development☆391Jan 27, 2026Updated last month
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆64Jul 17, 2024Updated last year
- Emulate Drivers in RING3 with self context mapping or unicorn☆32Dec 31, 2024Updated last year