A project that aims to automatically devirtualize code that has been virtualized using x86virt
☆128Dec 3, 2022Updated 3 years ago
Alternatives and similar repositories for x86devirt
Users that are interested in x86devirt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- Simple VM based x86 PE (portable exectuable) protector.☆377Mar 15, 2015Updated 11 years ago
- ☆183Nov 25, 2018Updated 7 years ago
- ☆15Jun 24, 2017Updated 9 years ago
- IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger☆21Apr 4, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PoC for a taint based attack on VMProtect☆126Jul 3, 2019Updated 7 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- ☆39Sep 8, 2015Updated 11 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- This is a simple driver with x64 inline assembly☆55Jun 26, 2020Updated 6 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Oct 10, 2018Updated 8 years ago
- PinVMP：虚拟化代码辅助分析工具☆147May 27, 2018Updated 8 years ago
- Automatic function exporting and linking for fuzzing cross-architecture binaries.☆51Sep 9, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deo…☆929Nov 21, 2023Updated 2 years ago
- Windows 10 kernel and ntdll internal types, directly compatible with ida.☆52Oct 14, 2018Updated 8 years ago
- Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.☆64Nov 4, 2012Updated 13 years ago
- idenLib - Library Function Identification [This project is not maintained anymore]☆395Mar 17, 2019Updated 7 years ago
- (Ab)using the XIGNCODE3 driver to open a handle to any process.☆65Aug 18, 2018Updated 8 years ago
- Windows Hypervisor Platform client☆31Jun 13, 2018Updated 8 years ago
- Green shellcode challenge tools☆22Apr 9, 2019Updated 7 years ago
- Hypervisor-based debugger☆192Dec 2, 2020Updated 5 years ago
- Simple VM-based scripting language☆13Feb 25, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.☆82Jan 24, 2011Updated 15 years ago
- Injectable Windows DLL which enforces a W^X memory policy on a process☆15Mar 10, 2017Updated 9 years ago
- Sacara VM☆122Dec 17, 2019Updated 6 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆79Aug 12, 2015Updated 11 years ago
- ☆15Mar 8, 2017Updated 9 years ago
- Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).☆81May 10, 2018Updated 8 years ago
- Port of windbglib to x64dbgpy, in an effort to support mona.py in x64dbg.☆54Jul 29, 2019Updated 7 years ago
- ☆14Feb 14, 2018Updated 8 years ago
- VMProtect OD Plugin☆97Apr 16, 2016Updated 10 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆83Dec 3, 2017Updated 8 years ago
- x86 bootloader emulation with Miasm (case of NotPetya)☆43May 26, 2019Updated 7 years ago
- This project demonstares an illegal read- and write- access to the kernel-mode data for both allocated by 3rd party drivers and EPROCESS …☆13Mar 6, 2018Updated 8 years ago
- ☆30May 23, 2017Updated 9 years ago
- Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.☆24Jan 23, 2018Updated 8 years ago
- Simple 32/64-bit PEs loader.☆141Dec 19, 2018Updated 7 years ago
- hook msr by amd svm☆129Dec 30, 2019Updated 6 years ago