holycall / UnSafengine64
☆14Updated last year
Alternatives and similar repositories for UnSafengine64:
Users that are interested in UnSafengine64 are comparing it to the libraries listed below
- Titan is a VMProtect devirtualizer☆47Updated last year
- VMProtect, VMP, Devirter, 3,5☆106Updated 2 years ago
- ☆102Updated 2 years ago
- A POC to detect the exist of VMProtect 3 protection by search feature watermark.☆77Updated last year
- ☆122Updated last year
- Forked LLVM focused on MSVC Compatibility. This version is designed for windows users☆90Updated last month
- VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker☆70Updated 2 years ago
- An x86-64 code virtualizer for VM based obfuscation☆109Updated 3 months ago
- Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.☆39Updated 2 years ago
- IDA Plugin that fills in missing indirect CALL & JMP target information☆123Updated 2 months ago
- vmp .net devirtualizer☆48Updated last year
- Fix VMProtect3 IAT☆273Updated last year
- ☆23Updated 3 years ago
- IDA Pro plugin AntiXorstr☆120Updated last month
- Yet another CawkVM unpacker...☆76Updated 2 years ago
- ☆36Updated last year
- Dump .net assembly from a native loader which uses ClrCreateinstance☆54Updated 2 years ago
- VMProtectTest☆35Updated 2 years ago
- an ida plugin used to decompile vmp☆319Updated 8 months ago
- WinLicense key extraction via Intel PIN☆100Updated 11 months ago
- Easy-to-use IDA plugin for code emulation☆30Updated 10 months ago
- A devirtualization engine for Themida.☆97Updated last year
- Research on code virtualization in .NET [WIP]☆179Updated last year
- 使用 Intel 虚拟化特性实现应用层HOOK☆60Updated last month
- VMP Mutation API Fix☆41Updated 3 years ago
- Example of reading process memory through kernel special APC☆103Updated last year
- Detects virtual machines and malware analysis environments☆120Updated 2 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆28Updated 2 months ago
- PoC kernel to usermode injection☆79Updated last year