Alternatives and similar repositories for VExDebugger

Users that are interested in VExDebugger are comparing it to the libraries listed below

• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆66Updated 2 years ago
• 1401199262 / NMIStackWalk
  ☆73Updated 3 years ago
• Sinclairq / tp-emulator
  A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe
  ☆75Updated 2 years ago
• Nou4r / Cool-Hypervisor
  A intel hypervisor, implementing many virtualization techniques
  ☆52Updated 2 years ago
• lennyRBLX / manual_exception_handling
  Handling C++ & __try exceptions without the need of built-in handlers.
  ☆76Updated 4 years ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆42Updated 3 years ago
• ThomasonZhao / InfinityHookProMax
  InfinityHookProMax: Make InfinityHook great great again
  ☆51Updated 2 years ago
• gmh5225 / ida-find-.data-ptr
  A simple ida python script to find .data ptr
  ☆56Updated 2 years ago
• samshine / VoyagerWithEPT
  ☆67Updated 3 years ago
• vasie1337 / sharedsection-driver
  driver that communicates using a shared section
  ☆85Updated 10 months ago
• SamuelTulach / SecureHack
  Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory
  ☆100Updated last year
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆53Updated 3 years ago
• pTerrance / alpc-km-um
  POC usermode <=> kernel communication via ALPC.
  ☆70Updated last year
• dnz-c / supermode
  page table manipulation to gain physical r/w
  ☆43Updated last year
• crtdll / bedaisy-reversal
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆130Updated 3 years ago
• MapleSwan / SessionMapper
  将驱动映射到会话空间
  ☆38Updated 3 years ago
• papstuc / portable_executable
  modern c++ wrapper around the microsoft portable executable file format
  ☆34Updated 2 months ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆97Updated 3 years ago
• Darkratos / Spoofed-Call
  A wrapper class to hide the original calling address of a function
  ☆55Updated 5 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆103Updated 8 months ago
• ekknod / Nmi
  Old way for blocking NMI interrupts
  ☆29Updated 3 years ago
• charliewolfe / PointerGuard
  PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…
  ☆53Updated 3 years ago
• cutecatsandvirtualmachines / DDMA
  Disk based DMA for ATA and SCSI
  ☆41Updated 2 years ago
• EBalloon / MapPage
  Mapping your code on a 0x1000 size page
  ☆71Updated 3 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆47Updated 2 years ago
• weak1337 / CEDetector
  ☆47Updated 3 years ago
• KelvinMsft / NoTruth
  ☆99Updated 8 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆32Updated 3 years ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆67Updated 2 years ago
• misslng / boundcallback
  ☆35Updated 2 years ago