VMProtectResearch / vmp2-devirtualizationLinks
vmp2.x devirtualization
☆88Updated last year
Alternatives and similar repositories for vmp2-devirtualization
Users that are interested in vmp2-devirtualization are comparing it to the libraries listed below
Sorting:
- fix vmprotect import function used unicorn-engine.☆98Updated 2 years ago
- ☆36Updated 3 years ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆77Updated 3 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆140Updated 11 months ago
- VMProtectTest☆40Updated 2 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆67Updated 2 years ago
- Binary Ninja plugin for automating VMProtect analysis☆63Updated 3 years ago
- A debugger backend for IDA Pro built on top of of Intel’s PIN framework☆35Updated last year
- VM devirtualization PoC based on AsmJit and llvm☆119Updated 4 years ago
- IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…☆65Updated 4 years ago
- Code virtualizer☆26Updated 9 years ago
- a code virtualizer based on angr☆32Updated 2 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆97Updated 3 years ago
- VMProtect analysis script☆55Updated 5 years ago
- IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree☆124Updated 3 weeks ago
- ☆37Updated 2 years ago
- ☆23Updated 3 years ago
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆61Updated 2 years ago
- ☆55Updated 5 years ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆77Updated 2 years ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆70Updated 3 years ago
- Implementation of a LLVM Compiler Plugin for C++ Obfuscation☆43Updated 2 years ago
- ☆98Updated 8 years ago
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆64Updated last year
- a plugin for ida of version 7.2 to help know F5 window codes better☆54Updated 6 years ago
- ☆46Updated 2 years ago
- LLVM based "VM" obfuscator☆149Updated 4 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆42Updated 3 years ago
- Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.☆75Updated 6 years ago
- The tool can be used to eliminate redundant instructions in a basic block.☆81Updated 2 years ago