ZehMatt / zyemuLinks
x86-64 user mode emulation using Zydis
☆71Updated 4 months ago
Alternatives and similar repositories for zyemu
Users that are interested in zyemu are comparing it to the libraries listed below
Sorting:
- Symbolic Execution based on lifting amd64 to z3☆29Updated last year
- Binary rewriter for 64-bit PE files.☆98Updated last year
- A x86_64 software emulator☆161Updated 4 months ago
- A portable header only library extending the C++20 STL.☆94Updated last year
- Improved VMP Idea(detect anti-anti-debug tools by bug)☆47Updated 2 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆67Updated last year
- ☆65Updated 2 years ago
- Kernel ReClassEx☆66Updated 2 years ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆117Updated last week
- ☆92Updated 2 months ago
- devirtualization vmprotect☆64Updated 2 years ago
- Lightweight PDB symbol parser and resolver☆27Updated last year
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆22Updated last year
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆63Updated last year
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆71Updated 3 years ago
- A C++ wrapper for icedx86 decoder☆45Updated 5 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆75Updated 2 years ago
- A debugger library using VEH.☆67Updated last year
- Windows PDB parser for kernel-mode environment.☆103Updated 7 months ago
- Header-only C++ library for producing PE files.☆34Updated 2 years ago
- CMake template for a basic EFI application/bootkit. This library is header-only, there is no EDK2 runtime!).☆80Updated 3 years ago
- Me fockin' pe protector☆45Updated 3 years ago
- vdk is a set of utilities used to help with exploitation of a vulnerable driver.☆43Updated 3 years ago
- VM devirtualization PoC based on AsmJit and llvm☆122Updated 4 years ago
- VMProtect2 Deobfuscation Tooling☆81Updated 2 months ago
- A small tool for rapid enumeration of CPUID, and MSR fields.☆27Updated last year
- A devirtualization engine for Themida.☆105Updated last year
- Generate a PDB file given the old PDB file and an address mapping☆51Updated 5 months ago
- Hypervisor-based debugger for AMD processors☆63Updated last year
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆36Updated 2 years ago