基于pte-hook的调试器保护工具
☆66Sep 4, 2026Updated last month
Alternatives and similar repositories for pte-dbg
Users that are interested in pte-dbg are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于npt-hook的amd平台调试体系重建工具☆133Sep 4, 2026Updated last month
- ☆63Oct 20, 2026Updated 2 weeks ago
- Static VMProtect unpacker , supporting VMProtect 3.9.5☆143Jul 29, 2026Updated 3 months ago
- map and lift the VM handlers so you can read them in IDA/Ghidra made for vmp 3.8-3.10☆61Aug 28, 2026Updated 2 months ago
- 基于 Intel VT-x 硬件虚拟化技术的原生 Windows 内核调试器☆45Oct 13, 2026Updated 3 weeks ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Invisible hook code(support win10 17134 ~ win11 26H1 ) InvisibleHook is an experimental Windows kernel/user-mode research project.☆44Sep 7, 2026Updated last month
- VMProtect payload extractor with IAT reconstruction. Monitors section unpacking, dumps PE with fixed headers, reconstructs imports via mo…☆30Apr 14, 2026Updated 6 months ago
- Bypassing anti-vm and anti-debug for VMProtect☆77Sep 11, 2026Updated last month
- Windows 用户态行为拦截引擎（HIPS） —— 把 DLL 注 入所有进程，hook ntdll / user32 / ws2_32 这些用户态出口，在行为真正发生之前拦下来。☆24Oct 25, 2026Updated last week
- clark-utov — automation + ledger tool for native algorithm recovery (public)☆31Jun 2, 2026Updated 5 months ago
- Dumper for VMP with IAT fixing☆14Mar 17, 2026Updated 7 months ago
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆44Jun 5, 2026Updated 4 months ago
- VMX Hypervisor Windows kernel (x64) Toolbox (基于 Intel VT-x (VMX) 和 AMD SVM 的 Windows x64 Hypervisor 工具箱。通过在操作系统下方插入一层轻量级 Type-2 Hyperviso…☆35Jun 28, 2026Updated 4 months ago
- VT-x/EPT-assisted Windows kernel debugger for authorized anti-cheat and reverse-engineering research.☆27Aug 2, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆20Apr 20, 2025Updated last year
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆78Nov 19, 2025Updated 11 months ago
- 一个仅使用2字节修改实现内核任意函数hook的方法。☆58May 17, 2025Updated last year
- An x64dbg plugin designed to append additional trace information into .trace32 and .trace64 files.☆31Jan 5, 2026Updated 9 months ago
- 保护工具☆48Sep 9, 2026Updated last month
- Devirtualization pipeline for VMProtect-style binaries: dispatcher/handler slicing, two-generation P-code IR, LLM-context compression, Z3…☆27Sep 28, 2026Updated last month
- ☆29May 2, 2026Updated 6 months ago
- 共享esig特征文件库☆10Dec 18, 2020Updated 5 years ago
- Debugger utilizing stealth hooks to hide from debugger detection☆27Aug 22, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scripts, notes, and other files about the analysis of VMProtect with Dragon Tales☆25Oct 24, 2026Updated last week
- ☆34Sep 16, 2026Updated last month
- ☆48Sep 25, 2024Updated 2 years ago
- IDA 2016 plugin contest winner! Symbolic Execution just one-click away!☆11Jun 4, 2025Updated last year
- 只是为了好玩 用于RSA 半字节/1字节/ 固定CRC32补丁 辅助☆27Nov 6, 2025Updated 11 months ago
- PoC for AMD Ryzen driver.☆20Jan 12, 2026Updated 9 months ago
- REVLab - Windows PE reverse engineering workflow platform (static analysis, unpacking, disassembly, decompile, dynamic sandbox, network c…☆77Sep 3, 2026Updated 2 months ago
- Experimental Windows kernel driver PoCs for detecting manually mapped drivers via big pool enumeration, PTE walking, CFG data-pointer hoo…☆21Apr 26, 2026Updated 6 months ago
- VMP分析工具☆56Sep 3, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A powerful, lightweight PDB (Program Database) viewer tool.☆49Oct 6, 2026Updated 3 weeks ago
- Windows x64 kernel call stack spoofing research project featuring synthetic stack construction, return address manipulation, and stealth-…☆70Apr 6, 2026Updated 6 months ago
- Windows x64 kernel driver research project focused on driver image remapping(manual mapping), system-call callback hijacking, and user-mo…☆24Sep 4, 2026Updated 2 months ago
- 类似易语言的超级Hook 可以在任意地址进行Hook 并且返回到Hook的地方☆12Sep 14, 2022Updated 4 years ago
- [Windows Anti-Rootkit] KSword 5.1 is an source-available Windows toolkit for ARK, kernel debugging, and system forensics. KSword 5.1 是面向…☆606Updated this week
- ☆17Feb 22, 2026Updated 8 months ago
- ☆80Apr 14, 2023Updated 3 years ago