Alternatives and similar repositories for CoVirt:

Users that are interested in CoVirt are comparing it to the libraries listed below

• ergot86 / hyperv_stuff
  Hyper-V related resources
  ☆30Updated last year
• b-irb / sauron
  Simple Intel VT-x type-2 hypervisor for 64-bit Linux.
  ☆18Updated 4 years ago
• intel / vmtaint
  Full-VM taint analysis with Xen, Intel(R) Processor Trace and Triton.
  ☆39Updated last year
• POPFD / cascade
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆13Updated last year
• un4ckn0wl3z / PCIE-Detector
  Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
  ☆33Updated 6 months ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆45Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆63Updated last year
• b-irb / PigPEI
  PEIM (UEFI) bootkit targeting OVMF (EDK2)
  ☆34Updated last year
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• ek0 / hxemu
  Triton based symbolic emulator
  ☆16Updated 2 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 3 years ago
• BehroozAbbassi / VmwpMonitor
  ☆40Updated 3 years ago
• 3intermute / hvICE
  hypervisor enforced patch protection for the linux kernel with xen + libvmi, libvmi KASLR offset spoofer
  ☆29Updated 11 months ago
• therealdreg / cgaty
  Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)
  ☆70Updated last year
• intel / unicorn-for-efi
  Unicorn Engine port for UEFI firmware
  ☆47Updated last week
• r3bb1t / bin_lift
  Rust library for lifting raw binary data to LLVM IR
  ☆47Updated this week
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆51Updated 2 years ago
• hugsy / bochscpu-python
  Python bindings for BochsCPU
  ☆35Updated last month
• Signal-Labs / FileHook
  ☆29Updated 4 years ago
• libiht / libiht
  Intel Hardware Trace Library - Kernel Space Componment
  ☆66Updated last week
• 0vercl0k / kdmp-parser-rs
  A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.
  ☆34Updated last month
• ivellioscolin / pykd
  A pykd maintenance fork
  ☆41Updated last month
• alfarom256 / MinifilterResearch
  ☆16Updated 2 years ago
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆34Updated last year
• killvxk / awesome-bootkit
  Bootkits
  ☆19Updated last year
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆46Updated 3 years ago
• backengineering / bintests
  A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations
  ☆50Updated 8 months ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated 2 years ago
• 0vercl0k / lockmem
  This utility allows you to lock every available memory regions of an arbitrary process into its working set.
  ☆67Updated last year
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆58Updated 8 months ago