LLVM 20 code obfuscation framework. 12 IR passes and a bytecode VM with three execution modes.
☆26Feb 13, 2026Updated 5 months ago
Alternatives and similar repositories for kilij
Users that are interested in kilij are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ollvm (obfuscator llvm) plugin ported to llvm 22. add bogus control flow, flattening, splitting, substitution to obfuscate your C/C++ cod…☆16May 17, 2026Updated last month
- LLVM pass plugin for native code obfuscation and anti-tamper. CFG flattening, string encryption, VM virtualization, anti-cheat, and more.…☆15Jul 9, 2026Updated last week
- some enhanced llvm pass☆15May 20, 2026Updated last month
- This is similar to GdrvLoader but it works on EAC (& BE but same for GdrvLoader) with included gdrv.sys (cert)☆35Apr 23, 2026Updated 2 months ago
- ☆18Dec 3, 2025Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆91Updated this week
- .data ptr swapper for newer win32k versions. (Supports Windows 11)☆37Jan 19, 2026Updated 5 months ago
- C++ Alt syscall hook in 25h2 can be load by KDU☆26Feb 18, 2026Updated 4 months ago
- Reversing EasyAntiCheat 😎☆14Jun 6, 2026Updated last month
- Machine-learning-based function similarity analysis that helps you quickly locate matching functions across different versions of x64 bin…☆23Jun 5, 2026Updated last month
- An LLVM Pass from Hikari-LLVM15☆163Updated this week
- LLM & IDA 主导的逆向分析平台☆58Mar 17, 2026Updated 3 months ago
- C++ Discord RPC☆16May 22, 2019Updated 7 years ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆84Jun 15, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 🔬 IDA plugin to find patched memory☆88Jul 1, 2026Updated 2 weeks ago
- VMLifter 是一个基于指令执行轨迹的语义提升工具，专注于值依赖驱动的程序语义重建。☆56Mar 9, 2026Updated 4 months ago
- Skills: Binary deobfuscation of O-LLVM-like protected binaries☆129May 21, 2026Updated last month
- VMX Hypervisor Windows kernel (x64) Toolbox (基于 Intel VT-x (VMX) 和 AMD SVM 的 Windows x64 Hypervisor 工具箱。通过在操作系统下方插入一层轻量级 Type-2 Hyperviso…☆22Jun 28, 2026Updated 2 weeks ago
- arm64 inline hook☆27Mar 22, 2026Updated 3 months ago
- Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behavior…☆59Updated this week
- Rust conversion (in-progress) of https://github.com/dweinstein/node-google-play.☆26Sep 13, 2021Updated 4 years ago
- usermode thread hijacking detection via working set page fault monitoring☆31Apr 20, 2026Updated 2 months ago
- Structor is a Hex-Rays plugin that synthesizes C structures from raw pointer arithmetic.☆97Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆20Mar 4, 2026Updated 4 months ago
- This is a random process injector, and more injection techniques will be added in the future.☆13Jul 17, 2020Updated 5 years ago
- A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering☆152Apr 25, 2026Updated 2 months ago
- SVC CALL Module☆83May 11, 2026Updated 2 months ago
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 2 years ago
- ☆18Feb 5, 2025Updated last year
- IDA Claude Code Plugins☆109Jun 2, 2026Updated last month
- 专为 ARM64 Trace 算法还原设计的 Harness 工程。☆99Jun 23, 2026Updated 3 weeks ago
- The new era of Hikari, O-MVLL, and whatever else comes to mind. Obfuscation for C(++), and ObjC(++)/Swift. Makes your code intractable fo…☆42Apr 6, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Injects frida gadget using zygisk to bypass anti-tamper checks.☆35Updated this week
- Have you ever wondered: what if IDA had great Ctrl+F search support for Pseudocode windows? No longer!☆82Mar 7, 2026Updated 4 months ago
- ☆35Apr 17, 2026Updated 2 months ago
- Compile-time AES string obfuscation for C++☆109May 26, 2026Updated last month
- ☆26Oct 12, 2024Updated last year
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆55Jun 10, 2026Updated last month
- Using SVM to classify human/AI-generated creative writing text☆21Mar 6, 2026Updated 4 months ago