Alternatives and similar repositories for MoRE

Users that are interested in MoRE are comparing it to the libraries listed below

• rmusser01 / hyperdbg
  Automatically exported from code.google.com/p/hyperdbg
  ☆106Updated 10 years ago
• zer0mem / MiniHyperVisorProject
  IntelVT-X nice feature -> tool
  ☆94Updated 10 years ago
• tandasat / MemoryMon
  Detecting execution of kernel memory where is not backed by any image file
  ☆260Updated 6 years ago
• honorarybot / PulseDbg
  Hypervisor-based debugger
  ☆189Updated 4 years ago
• upring / virtdbg
  Automatically exported from code.google.com/p/virtdbg
  ☆98Updated 9 years ago
• intelpt / WindowsIntelPT
  This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows
  ☆452Updated 7 years ago
• tandasat / GuardMon
  Hypervisor based tool for monitoring system register accesses.
  ☆146Updated 6 years ago
• tandasat / PgResarch
  PatchGuard Research
  ☆302Updated 6 years ago
• eyalz800 / zpp_hypervisor
  A very simple hypervisor for learning experience.
  ☆138Updated 3 years ago
• airbus-seclab / ramooflax
  a bare metal (type 1) VMM (hypervisor) with a python remote control API
  ☆183Updated 7 years ago
• marcusbotacin / BranchMonitoringProject
  A branch-monitor-based solution for process monitoring.
  ☆133Updated 5 years ago
• ionescu007 / winipt
  The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by W…
  ☆384Updated 2 years ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆122Updated 8 years ago
• FSecureLABS / win_driver_plugin
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆435Updated 6 years ago
• ionescu007 / Simpleator
  Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that w…
  ☆369Updated 6 years ago
• tandasat / WinIoCtlDecoder
  IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
  ☆111Updated last year
• GiveMeZeny / fde64
  Extended Length Disassembler Engine for x86-64 (1337 bytes in size)
  ☆52Updated 6 years ago
• zyantific / REtypedef
  Name substitution plugin for IDA Pro
  ☆146Updated 7 years ago
• quarkslab / qb-sync
  qb-sync is an open source tool to add some helpful glue between IDA Pro and Windbg. Its core feature is to dynamically synchronize IDA's …
  ☆120Updated 9 years ago
• tandasat / meow
  nyā
  ☆72Updated 9 years ago
• ivildeed / vmw_vmx_overloader
  Loading unsigned code into kernel in Windows 10 (64) with help of VMware Workstation Pro/Player design flaw
  ☆138Updated 8 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆178Updated 3 years ago
• gamozolabs / falkervisor_beta
  ☆74Updated 4 years ago
• airbus-seclab / warbirdvm
  An analysis of the Warbird virtual-machine protection for the CI!g_pStore
  ☆250Updated 7 years ago
• KelvinMsft / kHypervisor
  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
  ☆427Updated 3 years ago
• tandasat / SimpleSvm
  A minimalistic educational hypervisor for Windows on AMD processors.
  ☆431Updated 3 months ago
• Wenzel / r2vmi
  Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
  ☆134Updated 6 years ago
• csl-ugent / diablo
  Diablo is a retargetable link-time binary rewriting framework
  ☆77Updated 4 years ago
• tandasat / findpg
  Windbg extension to find PatchGuard pages
  ☆121Updated 10 years ago
• s3team / VMHunt
  ☆180Updated 6 years ago