Alternatives and similar repositories for MutantKiller

Users that are interested in MutantKiller are comparing it to the libraries listed below

• nblog / Vm2Import
  fix vmprotect import function used unicorn-engine.
  ☆91Updated 2 years ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆60Updated last year
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆62Updated last year
• sunwm518 / VMProtect-3-5-DEvirt
  VMProtect, VMP, Devirter, 3,5
  ☆107Updated 2 years ago
• 1401199262 / NMIStackWalk
  ☆70Updated 2 years ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆95Updated 2 years ago
• lennyRBLX / manual_exception_handling
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆71Updated 3 years ago
• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆44Updated 2 years ago
• sodareverse / TDE
  A devirtualization engine for Themida.
  ☆100Updated last year
• weak1337 / CEDetector
  ☆46Updated 3 years ago
• mike1k / ImportCallObfuscator
  Obfuscate calls to imports by patching in stubs
  ☆68Updated 3 years ago
• TygoL / kdmapper-mdl
  ☆50Updated last year
• gmh5225 / ida-find-.data-ptr
  A simple ida python script to find .data ptr
  ☆50Updated 2 years ago
• Anal-Repair / Vmp3_utils
  ☆36Updated 2 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆40Updated 3 years ago
• Ahmadmansoor / x64dbgScript
  This is just a x64dbg script system support.
  ☆46Updated 2 years ago
• xtremegamer1 / vmdevirt-vtil
  ☆27Updated last year
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆73Updated 3 years ago
• mzakocs / VirtualizationObfuscatorAnalysis
  A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators
  ☆70Updated 2 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• KelvinMsft / NoTruth
  ☆97Updated 7 years ago
• samshine / VoyagerWithEPT
  ☆41Updated 2 years ago
• auth12 / sysmap
  x64 manual mapper using inline syscalls
  ☆9Updated 3 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆52Updated 2 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆44Updated last year
• EBalloon / EasyAntiCheat-SRC
  ☆41Updated 2 years ago
• EBalloon / MapPage
  Mapping your code on a 0x1000 size page
  ☆72Updated 3 years ago
• layerfsd / phantasm-x86-virtualizer
  Code virtualizer
  ☆23Updated 9 years ago
• Vicshann / GInjer
  Global DLL injector
  ☆67Updated 4 years ago
• Darkratos / Spoofed-Call
  A wrapper class to hide the original calling address of a function
  ☆57Updated 4 years ago