DNLINYJ / DetectVMP3

Related projects: ⓘ

• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆87Updated last year
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆63Updated 9 months ago
• IcEy-999 / xx_tvm
  ☆86Updated this week
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆37Updated 2 years ago
• mizukiyyds / od_plugin
  这是一个Ollydbg插件，它提供了非常多友好的功能包括但不限于方便的数据提取，一键trace，跟踪api调用，iat修复等等
  ☆15Updated last year
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆72Updated 3 weeks ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆78Updated 5 months ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆87Updated 2 months ago
• Chordp / PatternGen
  ☆88Updated 2 years ago
• zzhouhe / VM_Analyze
  ☆77Updated 3 years ago
• AyinSama / Anti-AntiDebuggerDriver
  VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
  ☆63Updated last year
• PlaneJun / NoBanMe
  一个界面基于IMGUI的调试器，目前R3实现
  ☆27Updated 8 months ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆58Updated last year
• r3bb1t / vmp_analyzer
  ☆33Updated last year
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆64Updated 3 years ago
• JayRE114514 / UserComment
  An IDA pro plugin to display user-added comments in disassembly and pseudocode views.
  ☆69Updated last year
• mrexodia / VMProtectTest
  VMProtectTest
  ☆36Updated last year
• ddddhm1234 / TTDEngine
  ☆25Updated 9 months ago
• WINGS2709 / VMProtect1.21
  Vmp1.21加壳机分析笔记
  ☆39Updated 3 years ago
• gajiucai-r0-MrCHEN / KanXue-MrChen-melon
  鹅城的百姓不需要有青天大老爷，于是黄四郎就出手干掉了很多好县长。
  ☆27Updated last year
• fjqisba / CodeMake
  esig文件生成工具
  ☆26Updated 5 years ago
• PShocker / x86_de_confuse
  x86指令去混淆脚本,基于ida,capstone
  ☆16Updated 3 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆100Updated 2 years ago
• sonyps5201314 / wow64ext
  Another wow64ext to try to be compatible with WOW64 for all architectures.
  ☆73Updated 3 months ago
• H4ckF0rFun / HoldingHands
  ☆78Updated this week
• fjqisba / EwndUltimate
  易语言窗口测试器
  ☆25Updated 3 years ago
• TKazer / IDA-Pro-9.0-SigMaker
  Signature maker plugin for IDA 9.0
  ☆81Updated last month
• Tai7sy / NoVmp
  A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
  ☆21Updated 2 years ago
• janisslsm / goomba77
  ☆45Updated this week
• tomrus88 / OpenLumina
  IDA plugin that allows connecting to third party Lumina servers
  ☆44Updated 2 weeks ago