Alternatives and similar repositories for api-tracer:

Users that are interested in api-tracer are comparing it to the libraries listed below

• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 2 years ago
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆39Updated 2 years ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆61Updated last year
• ioncodes / rapid-kdbg-hyperv
  ☆16Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆62Updated last year
• ergrelet / themida-unmutate-bn
  A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆25Updated 6 months ago
• Nitr0-G / Rework-part-of-z3-proving
  This is the PoC of a dynamic lifter and deobfuscator with collecting trace.
  ☆35Updated last year
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• samrussell / obfus
  Playing with LLVM passes
  ☆36Updated last year
• can1357 / retro
  Experimental static analysis framework.
  ☆14Updated 9 months ago
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆34Updated last year
• m-odern / focus-theme-for-ida-pro-7.6
  ☆30Updated 3 years ago
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆46Updated 3 years ago
• POPFD / cascade
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆13Updated last year
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆25Updated last year
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 2 years ago
• mrexodia / REToolSync
  Collaboration platform for reverse engineering tools.
  ☆39Updated last month
• generic-trash / themdem
  ☆32Updated last year
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆58Updated 2 years ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆10Updated 11 months ago
• Midi12 / QueryWorkingSetExample
  Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
  ☆16Updated 3 years ago
• hfiref0x / AsIo3Unlock
  ASUSTeK AsIO3 I/O driver unlock
  ☆20Updated 3 years ago
• ElvisBlue / emotet-deobfuscator
  IDA plugin to deobfuscate emotet CFF
  ☆17Updated 2 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• tandasat / recon2024_demo
  Provides commands to read from and write to arbitrary kernel-mode memory for users with the Administrator privilege. HVCI compatible. No …
  ☆14Updated 7 months ago
• Protonr0 / AMD-Hypervisor
  A basic Secure Virtual Machine hypervisor
  ☆20Updated 3 years ago
• mrexodia / IATFaker
  Small project to generate fake DLLs based on an executable's import table
  ☆23Updated 4 years ago
• idiom / stackstack
  ☆31Updated 2 years ago
• Colton1skees / WinTTD
  Reverse engineered API for Microsoft's Time Travel Debugger
  ☆32Updated 9 months ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆44Updated last year