can1357 / selene

Related projects ⓘ

Alternatives and complementary repositories for selene

• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆267Updated last year
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆291Updated 11 months ago
• can1357 / hvdetecc
  Collection of hypervisor detections
  ☆189Updated last month
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆403Updated this week
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆170Updated last year
• MellowNight / AetherVisor
  Memory hacking library powered by AMD SVM
  ☆297Updated last year
• zer0condition / ZeroHVCI
  Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…
  ☆178Updated 3 weeks ago
• backengineering / llvm-msvc
  [WIP] A forked version of LLVM-18 that prioritizes MSVC compatibility. This version is tailored for Windows users.
  ☆221Updated last month
• mike1k / pepp
  C++ library for parsing and manipulating PE files statically and dynamically.
  ☆87Updated last year
• vmctx / guardian-rs
  x86-64 code/pe virtualizer
  ☆160Updated 3 months ago
• VollRagm / PTView
  Browse Page Tables on Windows (Page Table Viewer)
  ☆185Updated 2 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆261Updated last month
• nelfo / Milfuscator
  x86 PE Mutator
  ☆212Updated last year
• Dump-GUY / IDA_PHNT_TYPES
  Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
  ☆115Updated 2 months ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆186Updated this week
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆326Updated 3 weeks ago
• ergrelet / themida-unmutate
  Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.
  ☆226Updated 3 months ago
• JustasMasiulis / ida_bitfields
  IDA Pro plugin to make bitfield accesses easier to grep
  ☆229Updated 7 months ago
• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆182Updated 5 months ago
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆549Updated last month
• Deputation / instrumentation_callbacks
  A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
  ☆117Updated 3 years ago
• waryas / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆302Updated 2 years ago
• memN0ps / illusion-rs
  Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
  ☆239Updated 2 months ago
• gmh5225 / CallMeWin32kDriver
  Load your driver like win32k.sys
  ☆246Updated 2 years ago
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆175Updated last year
• mike1k / HookHunter
  Analyze patches in a process
  ☆247Updated 3 years ago
• kkent030315 / NoPatchGuardCallback
  x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code
  ☆196Updated 3 years ago
• momo5502 / hypervisor
  Hypervisor with EPT hooking support.
  ☆187Updated 2 months ago
• hoangprod / LeoSpecial-VEH-Hook
  Vectored Exception Handling Hooking Class
  ☆145Updated 5 years ago
• charliewolfe / Stealthy-Kernelmode-Injector
  Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…
  ☆289Updated 2 years ago