VMProtectResearch / vmp2-devirtualizationLinks
vmp2.x devirtualization
☆83Updated 11 months ago
Alternatives and similar repositories for vmp2-devirtualization
Users that are interested in vmp2-devirtualization are comparing it to the libraries listed below
Sorting:
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆74Updated 3 years ago
- Binary Ninja plugin for automating VMProtect analysis☆63Updated 2 years ago
- ☆36Updated 3 years ago
- fix vmprotect import function used unicorn-engine.☆97Updated 2 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆138Updated 9 months ago
- VMProtectTest☆40Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆65Updated 2 years ago
- VM devirtualization PoC based on AsmJit and llvm☆112Updated 4 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆96Updated 3 years ago
- Code virtualizer☆25Updated 9 years ago
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆64Updated 4 years ago
- ☆37Updated 2 years ago
- Implementation of a LLVM Compiler Plugin for C++ Obfuscation☆41Updated 2 years ago
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆34Updated last year
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆70Updated 3 years ago
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆119Updated last week
- a code virtualizer based on angr☆30Updated 2 years ago
- VMProtect analysis script☆54Updated 5 years ago
- ☆55Updated 5 years ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆75Updated 5 years ago
- ☆43Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆62Updated 2 years ago
- ☆23Updated 3 years ago
- a plugin for ida of version 7.2 to help know F5 window codes better☆54Updated 6 years ago
- ☆98Updated 8 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆71Updated last year
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆64Updated last year
- llvm powered deobfuscation of a vm-based protection☆43Updated 6 months ago
- Tiny dynamic binary rewriter fox x86.☆51Updated 3 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆42Updated 3 years ago