Type-2 Intel x86-64 hypervisor for Windows focused on tracing control-flow transitions out of obfuscated or virtualized kernel drivers at runtime with EPT
☆38Apr 18, 2026Updated 6 months ago
Alternatives and similar repositories for revhv
Users that are interested in revhv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆196Updated this week
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated 2 months ago
- VMP分析工具☆58Sep 3, 2026Updated 2 months ago
- Static devirtualizer for Tencent VM☆149Oct 24, 2026Updated 2 weeks ago
- Intercepting cpuid without a hypervisor☆21Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Bit-vector expression simplifier for binary analysis and deobfuscation☆62Updated this week
- ☆61Oct 3, 2026Updated last month
- ☆36Jul 14, 2026Updated 3 months ago
- ☆28Jun 4, 2026Updated 5 months ago
- Hijacking Hyper-V at Runtime with DDMA☆161Aug 13, 2025Updated last year
- map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10☆63Aug 28, 2026Updated 2 months ago
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆21Feb 1, 2022Updated 4 years ago
- KPP bypass with alternative syscall pipeline☆32Feb 6, 2026Updated 9 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Authenticated Hypervisor Toolkit for commercial enterprising.☆16Jun 1, 2025Updated last year
- PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, …☆25Aug 7, 2026Updated 3 months ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆206Aug 27, 2026Updated 2 months ago
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆101Jun 10, 2026Updated 4 months ago
- VMProtect, VMP, Devirter, 3,5☆121Jan 30, 2023Updated 3 years ago
- 🪝 Various EPT hook detection approaches☆163Feb 22, 2026Updated 8 months ago
- Various techniques used to bypass SMEP in the Windows Kernel.☆21Apr 20, 2025Updated last year
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆125Oct 28, 2026Updated last week
- Il2CppDumper fork with a native Rust PDB generator for x64 PE (GameAssembly.dll): function names, full struct types and typed prototypes,…☆54Oct 30, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆240May 11, 2026Updated 5 months ago
- C++ library for sending processor interrupts via x2apic & xapic☆16Oct 3, 2026Updated last month
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- DWM Overlay Demonstration for 25H2☆27Jan 5, 2026Updated 10 months ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆52Mar 11, 2021Updated 5 years ago
- Native code virtualizer for x64 binaries☆547Dec 20, 2024Updated last year
- Vulnerable Drivers☆13Jul 30, 2026Updated 3 months ago
- ☆19Jul 31, 2026Updated 3 months ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Kernel driver that .text hooks a syscall in dxgkrnl.sys which can be called from our user-mode client to send instructions like rpm/wpm a…☆239Dec 16, 2022Updated 3 years ago
- nmi stackwalking + module verification☆187Dec 28, 2023Updated 2 years ago
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆92Sep 22, 2026Updated last month
- A Kernel Driver that can be used for a cheat or malware base to circumvent common cache & structure table checks. PsLoadedModuleList howe…☆229Apr 23, 2026Updated 6 months ago
- Stealth-focused Intel VT-x hypervisor.☆443Mar 20, 2026Updated 7 months ago
- Just another story about dragons...☆57Oct 30, 2026Updated last week
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago