Alternatives and similar repositories for unicorn-whpx:

Users that are interested in unicorn-whpx are comparing it to the libraries listed below

• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆60Updated last month
• wbaby / xx_tvm
  ☆33Updated last year
• L0x1c / VMP
  ☆31Updated 4 years ago
• ddddhm1234 / TTDEngine
  ☆27Updated last year
• llxiaoyuan / llux
  ollvm de-obfuscator
  ☆59Updated 3 years ago
• DNLINYJ / DetectVMP3
  A POC to detect the exist of VMProtect 3 protection by search feature watermark.
  ☆78Updated last year
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆72Updated last year
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆85Updated last year
• mizukiyyds / asm_obfuscator
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆30Updated 2 years ago
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆40Updated 2 years ago
• zzhouhe / VM_Analyze
  ☆81Updated 4 years ago
• cs1ime / AndroidSuperInject
  Injecting into SELinux-protected system service processes under root on Android.
  ☆39Updated last year
• gajiucai-r0-MrCHEN / KanXue-MrChen-melon
  鹅城的百姓不需要有青天大老爷，于是黄四郎就出手干掉了很多好县长。
  ☆27Updated last year
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆29Updated 3 months ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆120Updated last month
• junknet / kernel-debugger
  内核硬件调试器模块，rootkit操作 dump
  ☆34Updated 3 years ago
• zhuzhu-Top / deobf
  tprt ollvm 反混淆 修改 binja il
  ☆39Updated 7 months ago
• mrexodia / VMProtectTest
  VMProtectTest
  ☆35Updated 2 years ago
• za233 / AilProtect
  a code virtualizer based on angr
  ☆29Updated 2 years ago
• yring-me / ts-ue4dumper
  TypeScript and Frida UE4dumper. Use C++ to get offset. Modular and easy to maintain
  ☆26Updated 7 months ago
• zzzcccyyyggg / Kotoamatsukami
  Kotoamatsukami is an obfuscator based on LLVM-17, utilizing LLVM's new pass to implement plug-in features, for obfuscating multiple langu…
  ☆37Updated 3 weeks ago
• zhkl0228 / d810
  D-810 is an IDA Pro plugin which can be used to deobfuscate code at decompilation time by modifying IDA Pro microcode.
  ☆50Updated 3 years ago
• bluesadi / debogus
  Deobfuscate OLLVM Bogus Control Flow via angr
  ☆63Updated 3 years ago
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆92Updated last week
• PShocker / x86_de_confuse
  x86指令去混淆脚本,基于ida,capstone
  ☆16Updated 3 years ago
• Chordp / PatternGen
  ☆96Updated 3 years ago
• za233 / IDADeflat
  deflat plugins for ida pro
  ☆35Updated last year
• VMProtectResearch / vmp2-devirtualization
  vmp2.x devirtualization
  ☆71Updated 5 months ago
• hypn4 / FuckTP
  ☆21Updated 5 years ago
• kweatherman / ida_missinglink
  IDA Plugin that fills in missing indirect CALL & JMP target information
  ☆123Updated 3 months ago