A demonstration of hooking into the VMProtect-2 virtual machine
☆24Nov 9, 2023Updated 2 years ago
Alternatives and similar repositories for vmhook
Users that are interested in vmhook are comparing it to the libraries listed below
Sorting:
- x86-64 Automated test data generator☆26Aug 18, 2025Updated 7 months ago
- Control Flow Linearization☆25May 4, 2025Updated 10 months ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- ☆12Jan 11, 2022Updated 4 years ago
- Rust bindings for VMProtect.☆28Mar 8, 2024Updated 2 years ago
- Elevate arbitrary MSR writes to kernel execution.☆47Sep 3, 2023Updated 2 years ago
- Small OBJ/Archive Obfuscation framework☆14Nov 9, 2023Updated 2 years ago
- VMProtect2 Deobfuscation Tooling☆97Nov 12, 2025Updated 4 months ago
- This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM☆29Nov 6, 2023Updated 2 years ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆126Updated this week
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated 11 months ago
- x64 PE-COFF virtualization driven obfuscation engine☆58Oct 14, 2022Updated 3 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆84Dec 21, 2022Updated 3 years ago
- devirtualization vmprotect☆65Mar 11, 2023Updated 3 years ago
- An example code of CiGetCertPublisherName☆16Mar 24, 2022Updated 3 years ago
- Unofficial Rust SDK for VMProtect☆102Sep 9, 2025Updated 6 months ago
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆73Aug 2, 2024Updated last year
- The next generation reverse engineering IDE (work-in-progress).☆105Jun 27, 2024Updated last year
- A C++ tool to inspect and extract contents from PyInstaller archives☆20Oct 19, 2025Updated 5 months ago
- Windows ABI Structured Exception Handling Tests☆50May 8, 2025Updated 10 months ago
- Tool to dump EFI runtime drivers.☆39Feb 23, 2024Updated 2 years ago
- Fluently detect security measures in software.☆32Oct 26, 2025Updated 4 months ago
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 2 years ago
- Plugin for x64dbg to disable parallel loading of dependencies☆19Sep 3, 2022Updated 3 years ago
- CVM is a header-only turing-complete virtual machine engine made in pure C.☆34Nov 25, 2024Updated last year
- Kernel Lazy Importer☆139Apr 13, 2024Updated last year
- A simple emulator for Windows designed for reverse engineering, testing binary files, and execution logging.☆54Jul 6, 2025Updated 8 months ago
- x86-64 code/pe virtualizer☆206Dec 2, 2024Updated last year
- a method for undetectable breakpoints in 32-bit Windows programs☆13May 15, 2014Updated 11 years ago
- Symbolic Execution Engine in Rust☆22Oct 8, 2023Updated 2 years ago
- Browser assembler based on Keystone using WASM☆18Feb 17, 2025Updated last year
- IDA plugin that allows connecting to third party Lumina servers☆148Dec 23, 2025Updated 2 months ago
- Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.☆73Updated this week
- Dorian is an intuitive high-level abstraction for declaring imperative programs that can be compiled or interpreted using LLVM and Cranel…☆21Jun 11, 2025Updated 9 months ago
- ☆15May 2, 2024Updated last year
- Hypervisor-based debugger for AMD processors☆63May 13, 2024Updated last year
- Zydis JavaScript bindings via WASM☆21Mar 28, 2023Updated 2 years ago
- Leveraging Platform Trust Technology (PTT) to defeat Driver Signing Enforcement (DSE) to run Kernel Drivers (KMDF) with Secure Boot Enabl…☆14Aug 22, 2022Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago