VMProtectResearch / vmp2-devirtualization

Related projects ⓘ

Alternatives and complementary repositories for vmp2-devirtualization

• mrexodia / VMProtectTest
  VMProtectTest
  ☆36Updated last year
• Anal-Repair / Vmp3_utils
  ☆36Updated 2 years ago
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆70Updated 2 years ago
• r3bb1t / vmp_analyzer
  ☆36Updated last year
• za233 / AilProtect
  a code virtualizer based on angr
  ☆27Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆60Updated last year
• nblog / Vm2Import
  fix vmprotect import function used unicorn-engine.
  ☆91Updated last year
• L0x1c / VMP
  ☆30Updated 3 years ago
• RevSpBird / HightLight
  a plugin for ida of version 7.2 to help know F5 window codes better
  ☆54Updated 5 years ago
• KelvinMsft / UsbMon
  ☆33Updated 4 years ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆91Updated 2 years ago
• fIappy / FpVTProject
  intel vt-x hypervisor ept
  ☆25Updated 4 years ago
• kweatherman / ida_missinglink
  IDA Plugin that fills in missing indirect CALL & JMP target information
  ☆115Updated last year
• CKCat / VMProtect-2-Reverse-Engineering
  ☆22Updated 2 years ago
• hypn4 / FuckTP
  ☆19Updated 5 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆38Updated 2 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆56Updated last year
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated last year
• zzhouhe / x96_POC
  A poc of embedding x64 code into x86 PE file
  ☆15Updated 5 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 3 years ago
• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆62Updated 10 months ago
• sh4m2hwz / devirt_vmprotect3
  ☆14Updated last year
• Nitr0-G / Rework-part-of-z3-proving
  This is the PoC of a dynamic lifter and deobfuscator with collecting trace.
  ☆32Updated last year
• 3526779568 / withdebugerce
  VT调试器插件搭配的CE
  ☆14Updated 2 years ago
• cbwang505 / windbg-uefi
  这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得
  ☆39Updated 4 months ago
• ranni0225 / WRK
  Windows Research Kernel VS2022 Solution
  ☆23Updated 2 months ago
• CZashi / win-reverse
  ntos shit
  ☆21Updated 8 months ago