Alternatives and similar repositories for VMwhere

Users that are interested in VMwhere are comparing it to the libraries listed below

• redthing1 / w1tn3ss
  binary instrumentation, analysis, and patching framework
  ☆100Updated last week
• samdspeare / othread
  an obfuscator based on LLVM which can obfuscate the program execution trajectory
  ☆106Updated 4 years ago
• OALabs / ZVM
  Disassembler for Zeus VM custom instruction set
  ☆30Updated last year
• L4ys / IDA-WPP-Remover
  Remove WPP calls from hexrays decompiled code
  ☆56Updated last week
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆110Updated last year
• milankovo / zydisinfo
  ☆31Updated 3 weeks ago
• KpwnZ / sllvm-obfuscator
  Implementation of sllvm obfuscator
  ☆66Updated 3 years ago
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆49Updated 4 years ago
• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆51Updated 6 months ago
• djolertrk / kLLDB
  LLDB based debugger for Linux Kernel
  ☆28Updated 10 months ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆138Updated 3 months ago
• Peribunt / VPGATHER
  Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …
  ☆52Updated last month
• eset / wslink-vm-analyzer
  WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
  ☆48Updated 3 years ago
• kkent030315 / detect-anyrun
  ANY.RUN sandbox detection collection
  ☆23Updated last year
• samrussell / obfus
  Playing with LLVM passes
  ☆40Updated 2 years ago
• mmert11 / binaryshield-devirtualizer
  llvm powered deobfuscation of a vm-based protection
  ☆46Updated 9 months ago
• DriverHunter / Win-Driver-EXP
  This repo contains EXPs about Vulnerable Windows Driver
  ☆47Updated last year
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆38Updated 2 years ago
• 0vercl0k / kdmp-parser-rs
  A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.
  ☆42Updated last month
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆68Updated 2 years ago
• Qfrost911 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆21Updated last year
• dmaivel / covirt
  An x86-64 code virtualizer for VM based obfuscation
  ☆171Updated last year
• junron / agar
  Assisting Go Analysis and Reversing
  ☆96Updated 2 months ago
• jonpalmisc / limoncello
  Yet another LLVM-based obfuscator
  ☆124Updated last year
• r3bb1t / bin_lift
  Rust library for lifting raw binary data to LLVM IR
  ☆63Updated 6 months ago
• novafacing / cargo-shellcode
  Cargo subcommand to build a crate into shellcode
  ☆26Updated last year
• connormcgarr / SkBridge
  Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1
  ☆71Updated 5 months ago
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆41Updated 2 years ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆65Updated 2 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆64Updated 3 years ago