ZehMatt / zyemuView external linksLinks
x86-64 user mode emulation using Zydis
☆72Sep 12, 2025Updated 5 months ago
Alternatives and similar repositories for zyemu
Users that are interested in zyemu are comparing it to the libraries listed below
Sorting:
- An x86-64 Code Virtualizer☆303Sep 26, 2024Updated last year
- ☆37May 9, 2023Updated 2 years ago
- A minimal CR3 protection PoC (KdpTrap hook)☆15Jan 25, 2025Updated last year
- Minimal header-only C++11 argument parser library for simple command line tools.☆25Feb 2, 2025Updated last year
- x64dbg typeparsing plugin with Windows types☆70Aug 29, 2025Updated 5 months ago
- Standalone API for Binary Ninja's LLIL☆21Aug 6, 2024Updated last year
- A demonstration of hooking into the VMProtect-2 virtual machine☆23Nov 9, 2023Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆408Apr 19, 2025Updated 9 months ago
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆634Jan 23, 2025Updated last year
- CVM is a header-only turing-complete virtual machine engine made in pure C.☆32Nov 25, 2024Updated last year
- Native code virtualizer for x64 binaries☆514Dec 20, 2024Updated last year
- Tool to convert Microsoft Visual C++ projects and solutions to CMake☆14Feb 5, 2026Updated last week
- Example of an ELF parser to learn about the ELF format☆10Oct 6, 2024Updated last year
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 2 years ago
- Tiny C x86_64 function detouring library.☆28Jan 18, 2026Updated 3 weeks ago
- A pure C++17 implementation of WPP software tracing☆19Nov 20, 2020Updated 5 years ago
- Collection of hypervisor detections☆295Sep 25, 2024Updated last year
- A bare minimum hypervisor on AMD and Intel processors for learners.☆337Sep 27, 2025Updated 4 months ago
- An x86-64 code virtualizer for VM based obfuscation☆172Dec 21, 2024Updated last year
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆26Apr 24, 2022Updated 3 years ago
- PoC code for IsValidImageCRC()☆22May 3, 2023Updated 2 years ago
- x86-64 Assembler based on Zydis☆408Jan 31, 2026Updated last week
- NVMe-oF for Windows.☆14Feb 4, 2023Updated 3 years ago
- ☆11Jul 12, 2022Updated 3 years ago
- ☆25Aug 7, 2023Updated 2 years ago
- A C compiler targeting an artistically pleasing nightmare for reverse engineers☆100Dec 7, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆764Sep 29, 2025Updated 4 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆324Jul 29, 2024Updated last year
- ☆13Sep 25, 2023Updated 2 years ago
- ☆12Jan 11, 2022Updated 4 years ago
- Python bindings for the Microsoft Hypervisor Platform APIs.☆80Jun 22, 2019Updated 6 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆225Jan 24, 2025Updated last year
- Titan is a VMProtect devirtualizer☆117Mar 6, 2024Updated last year
- Ghetto user mode emulation of Windows kernel drivers.☆160Oct 20, 2024Updated last year
- Windows driver mapper via the UEFI☆55Jul 13, 2025Updated 7 months ago
- The DataExplorer plugin integrates the pattern language from ImHex into x64dbg.☆90Jan 19, 2025Updated last year
- Emulate Drivers in RING3 with self context mapping or unicorn☆32Dec 31, 2024Updated last year
- Mixed Boolean-Arithmetic in Rust for WebAssembly☆30Jun 14, 2025Updated 8 months ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆90Jul 28, 2024Updated last year