Alternatives and similar repositories for VMwhere

Users that are interested in VMwhere are comparing it to the libraries listed below

• samdspeare / othread
  an obfuscator based on LLVM which can obfuscate the program execution trajectory
  ☆106Updated 4 years ago
• redthing1 / w1tn3ss
  dynamic binary instrumentation, analysis, and patching framework
  ☆98Updated 2 months ago
• L4ys / IDA-WPP-Remover
  Remove WPP calls from hexrays decompiled code
  ☆54Updated 8 months ago
• OALabs / ZVM
  Disassembler for Zeus VM custom instruction set
  ☆28Updated last year
• mmert11 / binaryshield-devirtualizer
  llvm powered deobfuscation of a vm-based protection
  ☆43Updated 7 months ago
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆106Updated last year
• junron / agar
  Assisting Go Analysis and Reversing
  ☆88Updated 3 weeks ago
• djolertrk / kLLDB
  LLDB based debugger for Linux Kernel
  ☆27Updated 8 months ago
• jonpalmisc / limoncello
  Yet another LLVM-based obfuscator
  ☆120Updated last year
• KpwnZ / sllvm-obfuscator
  Implementation of sllvm obfuscator
  ☆65Updated 3 years ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆134Updated last month
• Invoke-RE / binja-lattice-mcp
  Plugin interface for remote communications with Binary Ninja database and MCP server for interfacing with LLMs.
  ☆49Updated 6 months ago
• dmaivel / covirt
  An x86-64 code virtualizer for VM based obfuscation
  ☆143Updated 11 months ago
• eset / wslink-vm-analyzer
  WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware
  ☆46Updated 3 years ago
• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆49Updated 4 months ago
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆49Updated 4 years ago
• dmaivel / ntoseye
  Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
  ☆99Updated 6 months ago
• mrphrazer / obfuscation_analysis
  Binary Ninja plugin to analyze and simplify obfuscated code
  ☆229Updated last month
• DriverHunter / Win-Driver-EXP
  This repo contains EXPs about Vulnerable Windows Driver
  ☆46Updated last year
• psifertex / breaking_decompilers
  breaking decompilers
  ☆55Updated 6 months ago
• milankovo / zydisinfo
  ☆28Updated last month
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆38Updated last year
• connormcgarr / SkBridge
  Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1
  ☆68Updated 2 months ago
• samrussell / obfus
  Playing with LLVM passes
  ☆37Updated 2 years ago
• kkent030315 / detect-anyrun
  ANY.RUN sandbox detection collection
  ☆22Updated last year
• Qfrost911 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆20Updated 11 months ago
• g0mxxm / Anti-Obfuscation
  The tool can be used to eliminate redundant instructions in a basic block.
  ☆81Updated 2 years ago
• 0vercl0k / kdmp-parser-rs
  A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.
  ☆41Updated last month
• Midi12 / whse
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆24Updated 3 years ago
• r3bb1t / bin_lift
  Rust library for lifting raw binary data to LLVM IR
  ☆60Updated 4 months ago