x86-64 user mode emulation using Zydis
☆73Mar 15, 2026Updated 2 months ago
Alternatives and similar repositories for zyemu
Users that are interested in zyemu are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆37May 9, 2023Updated 3 years ago
- An x86-64 Code Virtualizer☆317Sep 26, 2024Updated last year
- Minimal header-only C++11 argument parser library for simple command line tools.☆25Mar 29, 2026Updated last month
- A minimal CR3 protection PoC (KdpTrap hook)☆16Jan 25, 2025Updated last year
- ☆11Jul 12, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An x86-64 code virtualizer for VM based obfuscation☆231Dec 21, 2024Updated last year
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 3 years ago
- PoC code for IsValidImageCRC()☆23May 3, 2023Updated 3 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆435Apr 19, 2025Updated last year
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆665Jan 23, 2025Updated last year
- x86-64 Assembler based on Zydis☆428Mar 8, 2026Updated 2 months ago
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆38Oct 11, 2023Updated 2 years ago
- A C compiler targeting an artistically pleasing nightmare for reverse engineers☆103Dec 7, 2024Updated last year
- Collection of hypervisor detections☆311Sep 25, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A demonstration of hooking into the VMProtect-2 virtual machine☆24Nov 9, 2023Updated 2 years ago
- A pure C++17 implementation of WPP software tracing☆19Nov 20, 2020Updated 5 years ago
- Native code virtualizer for x64 binaries☆531Dec 20, 2024Updated last year
- Ghetto user mode emulation of Windows kernel drivers.☆163Oct 20, 2024Updated last year
- x64dbg typeparsing plugin with Windows types☆75Aug 29, 2025Updated 8 months ago
- A bare minimum hypervisor on AMD and Intel processors for learners.☆357May 18, 2026Updated last week
- Python bindings for the Microsoft Hypervisor Platform APIs.☆80Jun 22, 2019Updated 6 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆65Feb 7, 2024Updated 2 years ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆95Jul 28, 2024Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Hooking Windows' exception dispatcher to protect process's PML4☆250Jan 24, 2025Updated last year
- 🪁 AOT binary translation toolchain☆63May 1, 2026Updated 3 weeks ago
- Standalone API for Binary Ninja's LLIL☆21Aug 6, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆837May 8, 2026Updated 2 weeks ago
- an obfuscator based on LLVM which can obfuscate the program execution trajectory☆107Mar 15, 2021Updated 5 years ago
- Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.☆40Jan 15, 2024Updated 2 years ago
- Titan is a VMProtect devirtualizer☆131Mar 6, 2024Updated 2 years ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆26Apr 24, 2022Updated 4 years ago
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆18Feb 1, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Windows driver mapper via the UEFI☆63Jul 13, 2025Updated 10 months ago
- CVM is a header-only turing-complete virtual machine engine made in pure C.☆36Mar 18, 2026Updated 2 months ago
- Simple anti-instrumentation with EFLAGS.AC☆17Mar 31, 2025Updated last year
- ☆13Sep 25, 2023Updated 2 years ago
- Mixed Boolean-Arithmetic in Rust for WebAssembly☆31Jun 14, 2025Updated 11 months ago
- Tiny C x86_64 function detouring library.☆28Mar 16, 2026Updated 2 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆351Jul 29, 2024Updated last year