Type-2 Intel x86-64 hypervisor for Windows focused on tracing control-flow transitions out of obfuscated or virtualized kernel drivers at runtime with EPT
☆38Apr 18, 2026Updated 6 months ago
Alternatives and similar repositories for revhv
Users that are interested in revhv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆171Updated this week
- KPP bypass with alternative syscall pipeline☆31Feb 6, 2026Updated 8 months ago
- Static devirtualizer for Tencent VM☆121Oct 11, 2026Updated last week
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated last month
- Public talks, workshops and research presentations from BlackArrow☆28Jul 30, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- The Native Reverse Engineering IDE. Zero-overhead binary analysis, full CPU emulation (PE/ELF), and headless automation. Powered by Capst…☆26Sep 23, 2026Updated 3 weeks ago
- Automated Function Identification in .NET binaries☆49Aug 5, 2026Updated 2 months ago
- Verified IDA is a harness for model-led reverse engineering.☆44Sep 14, 2026Updated last month
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆118Sep 25, 2026Updated 3 weeks ago
- Invisible hook code(support win10 17134 ~ win11 26H1 ) InvisibleHook is an experimental Windows kernel/user-mode research project.☆43Sep 7, 2026Updated last month
- ☆36Jul 14, 2026Updated 3 months ago
- 基于 Intel VT-x 硬件虚拟化技术的原生 Windows 内核调试器☆36Updated this week
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆21Feb 1, 2022Updated 4 years ago
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆146Aug 20, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- VMP分析工具☆53Sep 3, 2026Updated last month
- Windows Kernel API wrapper with simplified functions and enterprise driver extensions.☆34Jul 8, 2025Updated last year
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE☆14Jun 14, 2022Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆52Mar 11, 2021Updated 5 years ago
- Example for PagedOut!☆26Oct 22, 2019Updated 6 years ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Mar 13, 2024Updated 2 years ago
- IoCreateDriver Implementation, it can be useful if you're trying to bypass anticheats☆160Sep 25, 2026Updated 3 weeks ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10☆52Aug 28, 2026Updated last month
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆205Aug 27, 2026Updated last month
- ☆112Oct 6, 2023Updated 3 years ago
- Virtualization Simply Code☆24May 13, 2022Updated 4 years ago
- Kernel driver that .text hooks a syscall in dxgkrnl.sys which can be called from our user-mode client to send instructions like rpm/wpm a…☆239Dec 16, 2022Updated 3 years ago
- WinDbg plugin to trace module transitions from a debugged driver.☆53Dec 22, 2025Updated 9 months ago
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- Intel.AES-NI: Leveraging Intel AES-NI for AES-128 & AES-256 Encryption Modes☆27Jun 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Analyze PatchGuard☆56Aug 19, 2018Updated 8 years ago
- Bit-vector expression simplifier for binary analysis and deobfuscation☆52Updated this week
- This is the first software system, which can detect a stealthy hypervisor and calculate several nested ones even under countermeasures.☆92Sep 22, 2026Updated 3 weeks ago
- This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness☆62Sep 12, 2019Updated 7 years ago
- Monitor ETW events for Windows process mitigation policies, with stack traces☆30Oct 7, 2022Updated 4 years ago
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆37Updated this week
- Fluently detect security measures in software.☆39Jun 29, 2026Updated 3 months ago