Alternatives and similar repositories for HexSuite

Users that are interested in HexSuite are comparing it to the libraries listed below

• can1357 / NtRays

  View on GitHub
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆643Jan 28, 2025Updated last year
• JustasMasiulis / ida_bitfields

  View on GitHub
  IDA Pro plugin to make bitfield accesses easier to grep
  ☆251Aug 3, 2025Updated 6 months ago
• 0xnobody / vmpattack

  View on GitHub
  A VMP to VTIL lifter.
  ☆446May 20, 2021Updated 4 years ago
• wallds / NoVmpy

  View on GitHub
  ☆421Jan 1, 2025Updated last year
• fplu / Detector

  View on GitHub
  A way to detect DBI frameworks, Debuggers and VMs.
  ☆23Nov 17, 2020Updated 5 years ago
• DenuvoSoftwareSolutions / SiMBA

  View on GitHub
  Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions
  ☆181Oct 12, 2023Updated 2 years ago
• cellebrite-labs / FunctionInliner

  View on GitHub
  An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining
  ☆224Dec 31, 2024Updated last year
• can1357 / linux-pe

  View on GitHub
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆338Apr 24, 2025Updated 9 months ago
• HexRaysSA / goomba

  View on GitHub
  gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions
  ☆668Nov 10, 2025Updated 3 months ago
• KiFilterFiberContext / VMP3-Disasm

  View on GitHub
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆97Aug 27, 2022Updated 3 years ago
• vtil-project / VTIL-Core

  View on GitHub
  Virtual-machine Translation Intermediate Language
  ☆1,460Nov 5, 2023Updated 2 years ago
• Ostoic / distant

  View on GitHub
  A C++14/17 header-only Windows memory editing library with a focus on type safety and modern C++ style.
  ☆13Jun 3, 2019Updated 6 years ago
• BehroozAbbassi / sdkffi

  View on GitHub
  A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.
  ☆94Apr 17, 2022Updated 3 years ago
• wizardengineer / krakensvm-mg

  View on GitHub
  A simple x86_64 AMD-v hypervisor type-2 Programmed with C++, with soon to be added syscall hooks. [W.I.P]
  ☆103Aug 3, 2023Updated 2 years ago
• kweatherman / ida_missinglink

  View on GitHub
  IDA Plugin that fills in missing indirect CALL & JMP target information
  ☆141Jan 12, 2025Updated last year
• ytk2128 / pe32-password

  View on GitHub
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆51Jan 9, 2025Updated last year
• mike1k / HookHunter

  View on GitHub
  Analyze patches in a process
  ☆258Jul 28, 2021Updated 4 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• vtil-project / VTIL-NativeLifters

  View on GitHub
  Lifting from native architecture to VTIL. (WIP)
  ☆77Feb 2, 2022Updated 4 years ago
• jxy-s / stlkrn

  View on GitHub
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆434Aug 16, 2023Updated 2 years ago
• UQ-PAC / llvm-translator

  View on GitHub
  ☆13Sep 25, 2023Updated 2 years ago
• ioncodes / pooldump

  View on GitHub
  ☆31Jan 12, 2022Updated 4 years ago
• trailofbits / maat

  View on GitHub
  Open-source symbolic execution framework: https://maat.re
  ☆648Sep 4, 2025Updated 5 months ago
• gaasedelen / lucid

  View on GitHub
  An Interactive Hex-Rays Microcode Explorer
  ☆646Feb 8, 2024Updated 2 years ago
• can1357 / NtLua

  View on GitHub
  Lua in kernel-mode because why not.
  ☆366Dec 3, 2021Updated 4 years ago
• LLVMParty / REVIDE

  View on GitHub
  The next generation reverse engineering IDE (work-in-progress).
  ☆105Jun 27, 2024Updated last year
• ioncodes / idacode

  View on GitHub
  An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.
  ☆955Sep 16, 2025Updated 4 months ago
• MlsDmitry / better-rtti-parser

  View on GitHub
  IDA script to parse RTTI information in executable.
  ☆164Mar 10, 2023Updated 2 years ago
• can1357 / xstd

  View on GitHub
  A portable header only library extending the C++20 STL.
  ☆95Apr 18, 2024Updated last year
• 0vercl0k / udmp-parser

  View on GitHub
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆226Oct 3, 2025Updated 4 months ago
• samrussell / vmprotect_binja_plugin

  View on GitHub
  Binary Ninja plugin for automating VMProtect analysis
  ☆64Dec 2, 2022Updated 3 years ago
• archercreat / vmpfix

  View on GitHub
  Universal x86/x64 VMProtect 2.0-3.X Import fixer
  ☆20Dec 29, 2021Updated 4 years ago
• Mixaill / FakePDB

  View on GitHub
  Tool for PDB generation from IDA Pro database
  ☆629Dec 10, 2025Updated 2 months ago
• mazeworks-security / Simplifier

  View on GitHub
  Efficient general mixed boolean-arithmetic (MBA) simplifier
  ☆121Updated this week
• can1357 / vmware-rpc

  View on GitHub
  Header-only VMWare Backdoor API Implementation & Effortless VMX Patcher for Custom Guest-to-Host RPCs
  ☆106Dec 26, 2020Updated 5 years ago
• can1357 / NoVmp

  View on GitHub
  A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
  ☆2,080Aug 8, 2021Updated 4 years ago
• adutilleul / tigress-deobfuscation

  View on GitHub
  A documentation of several Tigress obfuscation passes and an attempt to simplify Mixed Boolean-Arithmetic (MBA) expressions.
  ☆23Dec 3, 2021Updated 4 years ago
• can1357 / retro

  View on GitHub
  Experimental static analysis framework.
  ☆15Apr 17, 2024Updated last year
• airbus-cert / ttddbg

  View on GitHub
  Time Travel Debugging IDA plugin
  ☆593Jun 27, 2024Updated last year