x86-64 user mode emulation using Zydis
☆73Sep 12, 2025Updated 5 months ago
Alternatives and similar repositories for zyemu
Users that are interested in zyemu are comparing it to the libraries listed below
Sorting:
- An x86-64 Code Virtualizer☆309Sep 26, 2024Updated last year
- ☆37May 9, 2023Updated 2 years ago
- A minimal CR3 protection PoC (KdpTrap hook)☆15Jan 25, 2025Updated last year
- Minimal header-only C++11 argument parser library for simple command line tools.☆25Feb 2, 2025Updated last year
- x64dbg typeparsing plugin with Windows types☆71Aug 29, 2025Updated 6 months ago
- Standalone API for Binary Ninja's LLIL☆21Aug 6, 2024Updated last year
- A demonstration of hooking into the VMProtect-2 virtual machine☆24Nov 9, 2023Updated 2 years ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆408Apr 19, 2025Updated 10 months ago
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆642Jan 23, 2025Updated last year
- Native code virtualizer for x64 binaries☆517Dec 20, 2024Updated last year
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 2 years ago
- Tool to convert Microsoft Visual C++ projects and solutions to CMake☆15Updated this week
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- Tiny C x86_64 function detouring library.☆28Jan 18, 2026Updated last month
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆37Oct 11, 2023Updated 2 years ago
- A pure C++17 implementation of WPP software tracing☆19Nov 20, 2020Updated 5 years ago
- CVM is a header-only turing-complete virtual machine engine made in pure C.☆34Nov 25, 2024Updated last year
- Collection of hypervisor detections☆297Sep 25, 2024Updated last year
- A bare minimum hypervisor on AMD and Intel processors for learners.☆339Sep 27, 2025Updated 5 months ago
- An x86-64 code virtualizer for VM based obfuscation☆177Dec 21, 2024Updated last year
- Hooking Windows' exception dispatcher to protect process's PML4☆228Jan 24, 2025Updated last year
- WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API☆26Apr 24, 2022Updated 3 years ago
- PoC code for IsValidImageCRC()☆22May 3, 2023Updated 2 years ago
- x86-64 Assembler based on Zydis☆410Feb 22, 2026Updated last week
- NVMe-oF for Windows.☆14Feb 4, 2023Updated 3 years ago
- ☆11Jul 12, 2022Updated 3 years ago
- A C compiler targeting an artistically pleasing nightmare for reverse engineers☆100Dec 7, 2024Updated last year
- ☆25Aug 7, 2023Updated 2 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆772Sep 29, 2025Updated 5 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆330Jul 29, 2024Updated last year
- ☆12Jan 11, 2022Updated 4 years ago
- ☆13Sep 25, 2023Updated 2 years ago
- Python bindings for the Microsoft Hypervisor Platform APIs.☆80Jun 22, 2019Updated 6 years ago
- Titan is a VMProtect devirtualizer☆119Mar 6, 2024Updated 2 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆160Oct 20, 2024Updated last year
- Windows driver mapper via the UEFI☆58Jul 13, 2025Updated 7 months ago
- The DataExplorer plugin integrates the pattern language from ImHex into x64dbg.☆90Jan 19, 2025Updated last year
- Mixed Boolean-Arithmetic in Rust for WebAssembly☆30Jun 14, 2025Updated 8 months ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆32Dec 31, 2024Updated last year