x86-64 user mode emulation using Zydis
☆73Mar 15, 2026Updated last week
Alternatives and similar repositories for zyemu
Users that are interested in zyemu are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆37May 9, 2023Updated 2 years ago
- An x86-64 Code Virtualizer☆311Sep 26, 2024Updated last year
- Minimal header-only C++11 argument parser library for simple command line tools.☆25Feb 2, 2025Updated last year
- A minimal CR3 protection PoC (KdpTrap hook)☆16Jan 25, 2025Updated last year
- ☆11Jul 12, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 2 years ago
- PoC code for IsValidImageCRC()☆22May 3, 2023Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆420Apr 19, 2025Updated 11 months ago
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆651Jan 23, 2025Updated last year
- x86-64 Assembler based on Zydis☆415Mar 8, 2026Updated 2 weeks ago
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆37Oct 11, 2023Updated 2 years ago
- A C compiler targeting an artistically pleasing nightmare for reverse engineers☆100Dec 7, 2024Updated last year
- Collection of hypervisor detections☆301Sep 25, 2024Updated last year
- A demonstration of hooking into the VMProtect-2 virtual machine☆24Nov 9, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Native code virtualizer for x64 binaries☆520Dec 20, 2024Updated last year
- A pure C++17 implementation of WPP software tracing☆19Nov 20, 2020Updated 5 years ago
- x64dbg typeparsing plugin with Windows types☆74Aug 29, 2025Updated 6 months ago
- Ghetto user mode emulation of Windows kernel drivers.☆163Oct 20, 2024Updated last year
- A bare minimum hypervisor on AMD and Intel processors for learners.☆341Sep 27, 2025Updated 5 months ago
- An x86-64 code virtualizer for VM based obfuscation☆182Dec 21, 2024Updated last year
- CVM is a header-only turing-complete virtual machine engine made in pure C.☆34Mar 18, 2026Updated last week
- Python bindings for the Microsoft Hypervisor Platform APIs.☆80Jun 22, 2019Updated 6 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆68Feb 7, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Hooking Windows' exception dispatcher to protect process's PML4☆236Jan 24, 2025Updated last year
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆93Jul 28, 2024Updated last year
- 🪁 AOT binary translation toolchain☆59Mar 1, 2026Updated 3 weeks ago
- Standalone API for Binary Ninja's LLIL☆21Aug 6, 2024Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆797Mar 19, 2026Updated last week
- an obfuscator based on LLVM which can obfuscate the program execution trajectory☆107Mar 15, 2021Updated 5 years ago
- Obfuscat is a tool and framework for obfuscation with predictable size and runtime overhead.☆38Jan 15, 2024Updated 2 years ago
- Titan is a VMProtect devirtualizer☆121Mar 6, 2024Updated 2 years ago
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆26Apr 24, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆18Feb 1, 2022Updated 4 years ago
- Windows driver mapper via the UEFI☆58Jul 13, 2025Updated 8 months ago
- Simple anti-instrumentation with EFLAGS.AC☆17Mar 31, 2025Updated 11 months ago
- ☆13Sep 25, 2023Updated 2 years ago
- Mixed Boolean-Arithmetic in Rust for WebAssembly☆30Jun 14, 2025Updated 9 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆337Jul 29, 2024Updated last year
- Tool to convert Microsoft Visual C++ projects and solutions to CMake☆15Updated this week