Alternatives and similar repositories for theodosius

Users that are interested in theodosius are comparing it to the libraries listed below

• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆22Updated 2 years ago
• DenuvoSoftwareSolutions / DVRT
  How Meltdown and Spectre haunt Anti-Cheat: DVRT details
  ☆22Updated last year
• ZehMatt / x86Tester
  x86-64 Automated test data generator
  ☆26Updated 3 months ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆11Updated last year
• kyle-elliott / DVM
  Symbolic Execution based on lifting amd64 to z3
  ☆28Updated last year
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆41Updated 2 years ago
• archercreat / hypereye
  My research WIP bluepill hypervisor
  ☆40Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆26Updated 2 years ago
• HyperSine / siren-hypervisor
  ☆38Updated 2 years ago
• ColeStrickler / 1337Visor
  Type 2 Hypervisor for security research supported by AMD-V hardware assisted virtualization
  ☆41Updated 2 years ago
• POPFD / cascade
  A thin introspection hypervisor framework that allows for low level resource manipulation.
  ☆13Updated last year
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 3 years ago
• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆72Updated 2 months ago
• pinwhell / MSPDBX
  Lightweight PDB symbol parser and resolver
  ☆26Updated last year
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆46Updated 2 years ago
• xtremegamer1 / vmdevirt-vtil
  ☆26Updated 2 years ago
• asamy / NastyAlignment
  Simple anti-instrumentation with EFLAGS.AC
  ☆18Updated 8 months ago
• build-cpp / wdk_template
  Windows kernel driver template for cmkr (with testsigning).
  ☆36Updated 2 years ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆63Updated 2 years ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆32Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• RIscRIpt / wdmcpp
  Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)
  ☆25Updated 4 years ago
• Colerar / labyrinth
  Labyrinth, an LLVM obfuscation plugin for the New Pass Manager
  ☆42Updated 9 months ago
• ergrelet / themida-spotter-bn
  A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
  ☆87Updated last year
• iqrw0 / DieDMAProtection
  ☆29Updated last year
• HyperDbg / RedDbg
  Hypervisor-based debugger for AMD processors
  ☆59Updated last year
• rich-ayr / phnt_nightly
  Native API header files for the Process Hacker project (nightly).
  ☆25Updated 2 months ago
• Oliver-1-1 / DumpDriver
  ☆47Updated last year
• zyantific / zydis-js
  Zydis JavaScript bindings via WASM
  ☆20Updated 2 years ago
• Nitr0-G / Rework-part-of-z3-proving
  This is the PoC of a dynamic lifter and deobfuscator with collecting trace.
  ☆36Updated 2 years ago