Alternatives and similar repositories for ExpoMon

Users that are interested in ExpoMon are comparing it to the libraries listed below

• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆18Updated 5 months ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated 2 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆27Updated 3 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆18Updated 3 years ago
• ioncodes / pooldump
  ☆31Updated 3 years ago
• mrexodia / DisableParallelLoader
  Plugin for x64dbg to disable parallel loading of dependencies
  ☆19Updated 3 years ago
• Colton1skees / WinTTD
  Reverse engineered API for Microsoft's Time Travel Debugger
  ☆36Updated last year
• alfarom256 / MinifilterResearch
  ☆16Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• jxy-s / vfdynf
  Application Verifier Dynamic Fault Injection
  ☆39Updated 3 months ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆26Updated 2 years ago
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆34Updated 2 years ago
• Air14 / KDBGDecryptor
  A simple example how to decrypt kernel debugger data block
  ☆31Updated 4 years ago
• alal4465 / Practical-Reverse-Engineering-Solutions
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Updated 3 years ago
• fplu / Detector
  A way to detect DBI frameworks, Debuggers and VMs.
  ☆23Updated 5 years ago
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆29Updated 3 years ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆23Updated 2 years ago
• DenuvoSoftwareSolutions / DVRT
  How Meltdown and Spectre haunt Anti-Cheat: DVRT details
  ☆22Updated last year
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 3 years ago
• un4ckn0wl3z / PCIE-Detector
  Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
  ☆37Updated last year
• Midi12 / whse
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆25Updated 3 years ago
• expend20 / DrSymLogger
  ☆22Updated 2 years ago
• DaedalusFrame / Nemesis
  Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…
  ☆26Updated this week
• therealdreg / ida_bochs_windows
  Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)
  ☆61Updated 2 years ago
• iqrw0 / DieDMAProtection
  ☆29Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated 2 years ago
• Peribunt / VPGATHER
  Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …
  ☆46Updated last week
• archercreat / llvm_stuff
  LLVM based devirtualization PoC’s.
  ☆22Updated 4 years ago
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆64Updated 2 years ago