A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering
☆354Sep 21, 2026Updated last month
Alternatives and similar repositories for antidbg
Users that are interested in antidbg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆356Aug 18, 2026Updated 2 months ago
- Process Explorer vulnerable driver PPL Bypass☆28Sep 30, 2026Updated last month
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- Clean Indirect Syscalls with Syscall Tampering.☆52Oct 25, 2026Updated 2 weeks ago
- State-of-the-art virtual machine detection☆1,498Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆173Oct 8, 2026Updated 3 weeks ago
- ☆74Oct 27, 2026Updated last week
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆842Jun 25, 2026Updated 4 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆155Aug 18, 2026Updated 2 months ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Stealth-focused Intel VT-x hypervisor.☆443Mar 20, 2026Updated 7 months ago
- Detection for every software TPM, TPM passthrough, TPM proxying, EDS/EK/PCR spoofing, and VMs☆45Oct 22, 2026Updated 2 weeks ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool☆413Updated this week
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆101Apr 30, 2026Updated 6 months ago
- Rewrite and obfuscate code in compiled binaries☆282Dec 13, 2025Updated 10 months ago
- Themida 3.x research☆118Feb 28, 2025Updated last year
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆112Oct 16, 2026Updated 3 weeks ago
- An x86-64 code virtualizer for VM based obfuscation☆275Dec 21, 2024Updated last year
- Contains materials for my technical presentation exploring Linux malware tradecraft—from userland and fileless techniques to kernel rootk…☆116Oct 30, 2026Updated last week
- Injecting code by recompiling shellcode into a ROP chain.☆148Apr 21, 2026Updated 6 months ago
- memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V☆852Oct 30, 2026Updated last week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆204Jun 25, 2026Updated 4 months ago
- Kernel anti-cheat for protecting software.☆163Jul 2, 2026Updated 4 months ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆69Sep 21, 2026Updated last month
- An x86-64 Code Virtualizer☆330Sep 26, 2024Updated 2 years ago
- Client able to leak the anticheat that a Minecraft server is running☆24Aug 24, 2025Updated last year
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆196Updated this week
- Macro-header for compile-time C polymorphic obfuscation (tcc, win x86/x64)☆1,886Updated this week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- vm_str.hpp is a header only string obfuscator.☆115Aug 24, 2025Updated last year
- ☆36Jul 14, 2026Updated 3 months ago
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- protector & obfuscator & code virtualizer☆791Updated this week
- Bypassing anti-vm and anti-debug for VMProtect☆81Sep 11, 2026Updated last month
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.☆151Mar 16, 2026Updated 7 months ago
- ☆53Oct 4, 2026Updated last month