Alternatives and similar repositories for nitro

Users that are interested in nitro are comparing it to the libraries listed below

• tianweiz07 / Cloud_Integrity
  Using LibVMI to detect malware
  ☆31Updated 3 years ago
• carter-yagemann / vmi-unpack
  VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.
  ☆56Updated 5 years ago
• UNCSecLab / VMXXNR
  Implementation of a thin hypervisor
  ☆42Updated 9 years ago
• bitdefender / libbdvmi
  ☆61Updated 2 years ago
• KVM-VMI / kvm
  Fork of KVM with Virtual Machine Introspection patches
  ☆37Updated last year
• Zentific / vmidbg
  PoC LibVMI-based GDB server for virtual machines
  ☆53Updated 7 years ago
• pfohjo / nitro
  KVM-based virtual machine introspection for malware analysis
  ☆29Updated 8 years ago
• nccgroup / xendbg
  A feature-complete reference implementation of a modern Xen VMI debugger. ARCHIVED: Development continues at https://github.com/spencermi…
  ☆78Updated 4 years ago
• therealdreg / lsrootkit
  Rootkit Detector for UNIX
  ☆61Updated 2 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆74Updated 6 years ago
• kkamagui / shadow-box-for-x86
  Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)
  ☆187Updated 6 years ago
• Wenzel / r2vmi
  Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
  ☆134Updated 6 years ago
• perceptionpoint / suprotect
  Changing memory protection in an arbitrary process
  ☆47Updated 6 years ago
• mandiant / unicorn-libemu-shim
  libemu shim layer and win32 environment for Unicorn Engine
  ☆72Updated 8 years ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆122Updated 8 years ago
• debasishm89 / iofuzz
  A mutation based user mode (ring3) dumb in-memory Windows Kernel (IOCTL) Fuzzer/Logger. This script attach it self to any given process a…
  ☆67Updated 11 years ago
• Frky / scat
  Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
  ☆67Updated 7 years ago
• nccgroup / libptmalloc
  Heap analysis tooling for ptmalloc
  ☆45Updated 3 years ago
• Cr4sh / Code-coverage-analysis-tools
  Code coverage analysis tools for the PIN Toolkit
  ☆60Updated 12 years ago
• v-p-b / ivmi
  Interactive Virtual Machine Introspection
  ☆18Updated 7 years ago
• intel / vbh
  ☆93Updated last year
• Bareflank / extended_apis
  deprecated
  ☆46Updated 6 years ago
• icchy / tracecorn
  Windows API tracer for malware (oldname: unitracer)
  ☆119Updated 7 years ago
• kacheo / KernelRootkit
  Linux kernel rootkit to hide certain files and processes.
  ☆36Updated 11 years ago
• piscou / FuzzWin
  ☆88Updated 10 years ago
• conix-security / machoke
  ☆52Updated 6 years ago
• eurecom-s3 / actaeon
  Memory forensics of virtualization environments
  ☆47Updated 10 years ago
• elfmaster / saruman
  ELF anti-forensics exec, for injecting full dynamic executables into process image (With thread injection)
  ☆135Updated 7 years ago
• rpaleari / qtrace
  QTrace, a "zero knowledge" system call tracer
  ☆53Updated 10 years ago
• felixwilhelm / xenpwn
  Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
  ☆144Updated 9 years ago