The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]
☆102Nov 7, 2026Updated this week
Alternatives and similar repositories for NeverD
Users that are interested in NeverD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The AI-friendly C23 compiler for security research, built on LLVM [WIP]☆98Updated this week
- WinDbg-Samples ExdiGdbSrv fork 修复了一部分Vmware调试的问题☆34Jul 10, 2023Updated 3 years ago
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆101Jun 10, 2026Updated 4 months ago
- Type-2 AMD-V Hypervisor☆11Jun 11, 2025Updated last year
- Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe☆28Mar 23, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Hijacking Hyper-V at Runtime with DDMA☆161Aug 13, 2025Updated last year
- 无痕hook探测☆50Aug 6, 2025Updated last year
- ☆15Jun 24, 2017Updated 9 years ago
- Striga is an experimental lifter from x86_64 to LLVM IR written in Python.☆120Jun 22, 2026Updated 4 months ago
- Binary lifter and deobfuscator using remill for x86_64 Windows binaries☆106Apr 20, 2026Updated 6 months ago
- a lightweight tool find AES key from Unreal Engine games☆18Jun 25, 2025Updated last year
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆74Aug 16, 2023Updated 3 years ago
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆196Updated this week
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated 2 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆22Apr 5, 2026Updated 7 months ago
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆101Mar 8, 2026Updated 7 months ago
- Static devirtualizer for Tencent VM☆149Oct 24, 2026Updated 2 weeks ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 3 months ago
- AMD-V nested hypervisor research driver for Windows: NPT virtualization, NPT hooks, CR3 protection suite, X-deny syscall sensing + behavi…☆18Oct 29, 2026Updated last week
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆62Mar 14, 2026Updated 7 months ago
- Bit-vector expression simplifier for binary analysis and deobfuscation☆62Updated this week
- Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behavior…☆107Updated this week
- Nocturnal-HV is a Simple Type 2 SVM Hypervisor☆22May 11, 2026Updated 5 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- An analysis and static deobfuscation of codedefender.io protected samples.☆98Apr 18, 2026Updated 6 months ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆469Apr 19, 2025Updated last year
- ETW Explorer☆45Aug 21, 2026Updated 2 months ago
- DWM Overlay Demonstration for 25H2☆27Jan 5, 2026Updated 10 months ago
- ☆24Jul 24, 2023Updated 3 years ago
- DLL Injector leveraging EAC for injection☆20Apr 15, 2025Updated last year
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆44Jun 5, 2026Updated 5 months ago
- This repository contains an implementation of the attack using a DMA-capable SD Host Controller used to access a SD card. This repository…☆10Sep 24, 2025Updated last year
- A high-performance C++ framework for emulating executable binaries☆131Nov 23, 2025Updated 11 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆35Oct 10, 2026Updated 3 weeks ago
- Type-2 Intel x86-64 hypervisor for Windows focused on tracing control-flow transitions out of obfuscated or virtualized kernel drivers at…☆38Apr 18, 2026Updated 6 months ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆240May 11, 2026Updated 5 months ago
- chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.☆308Oct 24, 2026Updated 2 weeks ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 8 months ago
- Overwatch like IAT protection method☆13Sep 22, 2024Updated 2 years ago
- LLVM based devirtualizer for the binaryshield software protector.☆95May 7, 2026Updated 6 months ago