Alternatives and similar repositories for etrace

Users that are interested in etrace are comparing it to the libraries listed below

• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆35Updated last year
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆29Updated 2 years ago
• djolertrk / kLLDB
  LLDB based debugger for Linux Kernel
  ☆25Updated 2 months ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆72Updated last year
• waleedassar / SyscallNumberFinder
  ☆33Updated 3 years ago
• Nadharm / CoVirt
  A dynamically loadable virtual-machine based rootkit designed for Linux Kernel v5.13.0 using AMD-V (SVM).
  ☆29Updated 3 years ago
• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆33Updated last year
• linuxthor / rkbreaker
  Rootkit breaker - experimental Linux anti-rootkit tool based on kprobes
  ☆12Updated 4 years ago
• tandasat / CVE-2022-25949
  A years-old exploit of a local EoP vulnerability in Kingsoft Antivirus KWatch Driver version 2009.3.17.77.
  ☆38Updated 3 years ago
• BehroozAbbassi / VmwpMonitor
  ☆40Updated 4 years ago
• eset / wslink-vm-analyzer
  WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
  ☆46Updated 3 years ago
• long123king / dk
  dk is a WinDbg extenion for dumping memory data in meaningful and organized ways, it is an enhancement of my previous tokenext project.
  ☆24Updated last year
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• jxy-s / vfdynf
  Application Verifier Dynamic Fault Injection
  ☆39Updated 2 months ago
• melotic / rekk
  rekk is set of tools written in Rust to obfuscate ELF & PE executables with nanomites.
  ☆31Updated 6 months ago
• ek0 / hxemu
  Triton based symbolic emulator
  ☆16Updated 2 years ago
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆22Updated 3 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆31Updated 6 months ago
• killvxk / awesome-bootkit
  Bootkits
  ☆18Updated last year
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆46Updated last year
• RobinFassinaMoschiniForks / bootdoor
  Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE
  ☆10Updated 3 years ago
• samrussell / obfus
  Playing with LLVM passes
  ☆36Updated last year
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆39Updated 3 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆48Updated 4 months ago
• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆32Updated last year
• ionescu007 / hazmat5
  Local OXID Resolver (LCLOR) : Research and Tooling
  ☆35Updated 4 years ago
• SoftwareSecurityLab / UbSym
  A Unit-Based Symbolic Execution Method for Detecting Memory Corruption Vulnerabilities in Executable Codes
  ☆43Updated 2 years ago
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• OxNinja / C-VM
  My try to implement a virtual CPU in C
  ☆19Updated last year