milankovo / zydisinfoLinks
☆31Updated 2 weeks ago
Alternatives and similar repositories for zydisinfo
Users that are interested in zydisinfo are comparing it to the libraries listed below
Sorting:
- Generate a PDB file given the old PDB file and an address mapping☆51Updated 5 months ago
- devirtualization vmprotect☆65Updated 2 years ago
- An x64dbg plugin which helps make sense of long C++ symbols☆59Updated 2 years ago
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆50Updated last month
- binary instrumentation, analysis, and patching framework☆100Updated this week
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆22Updated last year
- x86-64 user mode emulation using Zydis☆72Updated 4 months ago
- WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware☆47Updated 3 years ago
- Windows kernel driver template for cmkr and llvm-msvc.☆35Updated 2 years ago
- Windows Minidump loader for Ghidra☆29Updated 3 years ago
- Remove WPP calls from hexrays decompiled code☆54Updated 10 months ago
- Custom instruction length for hex-rays☆28Updated 2 weeks ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆67Updated 2 years ago
- Elevate arbitrary MSR writes to kernel execution.☆43Updated 2 years ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆117Updated last week
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆79Updated 3 years ago
- Disassembler for Zeus VM custom instruction set☆30Updated last year
- A driver to implement IOCTL hooking☆27Updated 3 years ago
- A set of LLVM and GCC based plugins that perform code obfuscation.☆138Updated 3 months ago
- LLVM based obfuscation engine☆109Updated 7 months ago
- Me fockin' pe protector☆45Updated 3 years ago
- A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.☆90Updated last year
- Report and exploit of CVE-2024-21305.☆38Updated 2 years ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆70Updated 4 months ago
- ☆22Updated 2 years ago
- Load dll with undocumented functions and debug symbols☆47Updated last year
- This is the PoC of a dynamic lifter and deobfuscator with collecting trace.☆36Updated 2 years ago
- Symbolic Execution based on lifting amd64 to z3☆30Updated last year
- PDB Rewriting Rust Library☆26Updated last year
- VMProtect2 Deobfuscation Tooling☆84Updated 2 months ago