Alternatives and similar repositories for DetectVMP3

Users that are interested in DetectVMP3 are comparing it to the libraries listed below

• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆64Updated 4 months ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆78Updated 2 years ago
• OMRI-FRX / check_EPT_hook
  无痕hook探测
  ☆43Updated 5 months ago
• ResetMineMind / tinyKernelHook
  一个仅使用2字节修改实现内核任意函数hook的方法。
  ☆57Updated 7 months ago
• oureveryday / VMPUnpacker
  ☆161Updated 7 months ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆83Updated 11 months ago
• wbaby / xx_tvm
  ☆46Updated 2 years ago
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆31Updated last year
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆68Updated last month
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆186Updated 8 months ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆151Updated 10 months ago
• zzhouhe / VM_Analyze
  ☆90Updated 5 years ago
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆44Updated 3 years ago
• gajiucai-r0-MrCHEN / KanXue-MrChen-melon
  鹅城的百姓不需要有青天大老爷，于是黄四郎就出手干掉了很多好县长。
  ☆27Updated 2 years ago
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆110Updated last year
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆135Updated this week
• DearXiaoGui / InfinityHookPro-main
  ☆54Updated 3 years ago
• Chordp / PatternGen
  ☆102Updated 3 years ago
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆77Updated 3 years ago
• gn277 / ExceptionByInstCallback
  ☆50Updated last year
• OMRI-FRX / LMalz
  硬件虚拟化
  ☆59Updated 5 months ago
• VMProtectResearch / vmp2-devirtualization
  vmp2.x devirtualization
  ☆89Updated last year
• szdyg / pdb_proxy
  ☆47Updated 11 months ago
• za233 / NeacController
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆62Updated 6 months ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆123Updated last year
• YanStar / FixVmpDump
  use python script to fix vmp dump api in ida
  ☆120Updated 4 years ago
• fjqisba / VB-Helper
  用来辅助分析VB程序的IDA插件
  ☆25Updated 5 years ago
• PspExitThread / SKT64
  Anti-Rootkit & System kernel management tool
  ☆49Updated 3 weeks ago
• mrexodia / VMProtectTest
  VMProtectTest
  ☆40Updated 2 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆107Updated 3 years ago