Alternatives and similar repositories for vmpanalysis:

Users that are interested in vmpanalysis are comparing it to the libraries listed below

• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆73Updated 3 years ago
• david-lazar / IDAPatternSearch
  IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidr…
  ☆63Updated 3 years ago
• pgarba / UniTaint
  PoC for a taint based attack on VMProtect
  ☆108Updated 5 years ago
• VMProtectResearch / vmp2-devirtualization
  vmp2.x devirtualization
  ☆73Updated 5 months ago
• Anal-Repair / Vmp3_utils
  ☆36Updated 2 years ago
• nblog / Vm2Import
  fix vmprotect import function used unicorn-engine.
  ☆92Updated 2 years ago
• usualsuspect / ida_stuff
  ☆27Updated 6 years ago
• mrexodia / VMProtectTest
  VMProtectTest
  ☆35Updated 2 years ago
• blaquee / SlothEmu
  unicorn emulator for x64dbg
  ☆33Updated 7 years ago
• vtil-project / VTIL-Utils
  VTIL command line utility
  ☆27Updated 3 years ago
• allthingsida / strikeout
  IDA strike-out: A Hex-Rays decompiler plugin to patch the Ctree
  ☆116Updated 8 months ago
• Rprop / LDasm
  Lightweight x86 and x64 instructions disassembler
  ☆32Updated 7 years ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆57Updated 2 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆63Updated last year
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• pgarba / UniPE
  UNIPE - A small framwork to execute PE files with UniCorn
  ☆45Updated 7 years ago
• RevSpBird / HightLight
  a plugin for ida of version 7.2 to help know F5 window codes better
  ☆54Updated 5 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆58Updated 6 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 5 years ago
• vmware-archive / HexRaysDeob
  Hex-Rays microcode API plugin for breaking an obfuscating compiler
  ☆83Updated 5 years ago
• calware / HV-Playground
  A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x
  ☆31Updated 4 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆45Updated 8 years ago
• KelvinMsft / NoTruth
  ☆96Updated 7 years ago
• bl4ckswan / anti-disassembly
  ☆19Updated 7 years ago
• BlackLuny / WinIPTCollector
  Intel Processor Trace package collector for Windows
  ☆18Updated 4 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• saweol / vwaad
  IDA script for vmprotect Windows Api address decoder
  ☆51Updated 3 years ago
• za233 / AilProtect
  a code virtualizer based on angr
  ☆29Updated 2 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆35Updated 9 months ago
• segnolin / Vobfus
  virtualization obfuscator inspired by juhajong/vm-obfuscator
  ☆57Updated 5 years ago