Alternatives and similar repositories for CoVirt

Users that are interested in CoVirt are comparing it to the libraries listed below

• b-irb / sauron
  Simple Intel VT-x type-2 hypervisor for 64-bit Linux.
  ☆19Updated 4 years ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆48Updated last year
• HyperDbg / awesome
  A list of awesome resources about HyperDbg
  ☆75Updated 2 weeks ago
• un4ckn0wl3z / PCIE-Detector
  Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
  ☆35Updated 10 months ago
• ergot86 / hyperv_stuff
  Hyper-V related resources
  ☆31Updated last year
• tandasat / Hello-VT-rp
  A simple hypervisor demonstrating the use of the Intel VT-rp (redirect protection) technology.
  ☆112Updated last year
• DenuvoSoftwareSolutions / DVRT
  How Meltdown and Spectre haunt Anti-Cheat: DVRT details
  ☆21Updated 11 months ago
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆29Updated 2 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated last year
• tandasat / HelloIommuPkg
  The sample DXE runtime driver demonstrating how to program DMA remapping.
  ☆60Updated last year
• libiht / libiht
  Intel Hardware Trace Library - Kernel Space Componment
  ☆71Updated 3 months ago
• cassanof / safe-llvm
  LLVM Without The ROP Gadgets!
  ☆26Updated last year
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆36Updated last year
• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆48Updated 6 months ago
• dmaivel / ntoseye
  Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
  ☆91Updated 2 months ago
• r3bb1t / bin_lift
  Rust library for lifting raw binary data to LLVM IR
  ☆58Updated 3 weeks ago
• intel / unicorn-for-efi
  Unicorn Engine port for UEFI firmware
  ☆46Updated 4 months ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 3 years ago
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆65Updated last year
• killvxk / awesome-bootkit
  Bootkits
  ☆18Updated last year
• 3intermute / hvICE
  hypervisor enforced patch protection for the linux kernel with xen + libvmi, libvmi KASLR offset spoofer
  ☆33Updated last year
• Toroto006 / windows-kernel-driver-pipeline
  This master thesis project continuously collects and analyses Microsoft Windows kernel drivers using static and dynamic methods to help s…
  ☆21Updated 9 months ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆62Updated 2 years ago
• alfarom256 / MinifilterResearch
  ☆16Updated 2 years ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆73Updated last year
• redthing1 / w1tn3ss
  dynamic binary instrumentation, analysis, and patching framework
  ☆73Updated 2 weeks ago
• CZashi / win-reverse
  ntos shit
  ☆26Updated last year
• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆49Updated this week
• therealdreg / ida_bochs_windows
  Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)
  ☆62Updated last year
• intel / vmtaint
  Full-VM taint analysis with Xen, Intel(R) Processor Trace and Triton.
  ☆41Updated 2 years ago