hmyit / VMPROTECTLinks
Obfuscation method using virtual machines.
☆22Updated 5 years ago
Alternatives and similar repositories for VMPROTECT
Users that are interested in VMPROTECT are comparing it to the libraries listed below
Sorting:
- VMProtectTest☆40Updated 2 years ago
- 无痕hook探测☆33Updated 2 months ago
- vmp2.x devirtualization☆83Updated 11 months ago
- 跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…☆70Updated last year
- Code virtualizer☆25Updated 9 years ago
- ☆37Updated 2 years ago
- LLVM based "VM" obfuscator☆146Updated 4 years ago
- ☆36Updated 3 years ago
- ☆43Updated 2 years ago
- Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.☆84Updated 6 months ago
- Implementation of a LLVM Compiler Plugin for C++ Obfuscation☆41Updated 2 years ago
- A POC to detect the exist of VMProtect 3 protection by search feature watermark.☆80Updated last year
- 使用 Intel 虚拟化特性实现应用层HOOK☆62Updated last month
- VM devirtualization PoC based on AsmJit and llvm☆112Updated 4 years ago
- fix vmprotect import function used unicorn-engine.☆97Updated 2 years ago
- a code virtualizer based on angr☆30Updated 2 years ago
- ☆23Updated 3 years ago
- A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators☆70Updated 3 years ago
- llvm powered deobfuscation of a vm-based protection☆43Updated 6 months ago
- ☆54Updated 5 years ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆65Updated 2 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆30Updated 9 months ago
- ☆128Updated 5 months ago
- A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).☆74Updated 3 years ago
- The tool can be used to eliminate redundant instructions in a basic block.☆80Updated 2 years ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆96Updated 3 years ago
- pointer obfuscation☆26Updated 7 years ago
- ida plugin to parse qt meta data☆79Updated 9 months ago
- Another LLVM-obfuscator based on LLVM-17. A fork of Arkari☆103Updated last year
- Kernel mode to user mode so injection☆91Updated 4 years ago