mit-ll/LO-PHI external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mit-ll/LO-PHI

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mit-ll/LO-PHI)

Close

mit-ll / LO-PHIView on GitHubMore

• External links
• Readme badge

Low-Observable Physical Host Instrumentation: A suite of tools supporting introspection and semantic gap reconstruction for both physical and virtual machines.

☆30Jul 12, 2016Updated 9 years ago

Alternatives and similar repositories for LO-PHI

Users that are interested in LO-PHI are comparing it to the libraries listed below

• S2E / s2e-linux-kernel

  View on GitHub
  Linux kernels (CGC DECREE and vanilla) with S2E extensions
  ☆24Jul 6, 2024Updated last year
• CrySyS / membrane

  View on GitHub
  Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis
  ☆41Sep 12, 2016Updated 9 years ago
• SneakersInc / sniffmypacketsv2

  View on GitHub
  Next major release of sniffMyPackets - Now with added packet loving
  ☆12Mar 19, 2015Updated 10 years ago
• S2E / libcpu

  View on GitHub
  x86 Dynamic Binary Translator Library
  ☆34Dec 19, 2020Updated 5 years ago
• avatartwo / avatar-panda

  View on GitHub
  DEPRECATED avatar-panda repository; please use https://github.com/panda-re/panda
  ☆13Mar 19, 2021Updated 4 years ago
• adrianherrera / kaitai-s2e

  View on GitHub
  Code for my blog post on combining S2E and Kaitai Struct
  ☆15Jun 1, 2019Updated 6 years ago
• theabraxas / Battalion

  View on GitHub
  Battalion is a tool used to automate reconnaissance and assist both pentesters and internal security/admin teams.
  ☆43Jan 13, 2026Updated last month
• zaddach / idallvm

  View on GitHub
  Plugin for IDA Pro to convert assembler to LLVM IR
  ☆20Nov 15, 2016Updated 9 years ago
• eqv / indika

  View on GitHub
  A blanket execution/min hash semantic hash tool for binary function identification
  ☆18Apr 22, 2016Updated 9 years ago
• aosm / xnu

  View on GitHub
  ☆19May 18, 2015Updated 10 years ago
• tianweiz07 / Cloud_Integrity

  View on GitHub
  Using LibVMI to detect malware
  ☆32Apr 3, 2022Updated 3 years ago
• cutaway-security / cutsec_presentations

  View on GitHub
  Presentation Slides and Resources
  ☆16Jun 12, 2024Updated last year
• eurecom-s3 / actaeon

  View on GitHub
  Memory forensics of virtualization environments
  ☆48Oct 4, 2014Updated 11 years ago
• DynamoRIO / drk

  View on GitHub
  Dynamic instrumentation of the Linux kernel
  ☆41Feb 24, 2015Updated 11 years ago
• S2E / libs2ecore

  View on GitHub
  S2E Core Engine Library
  ☆15Jan 7, 2020Updated 6 years ago
• v-p-b / ivmi

  View on GitHub
  Interactive Virtual Machine Introspection
  ☆18Sep 27, 2017Updated 8 years ago
• r00tkillah / BLINKERCOUGH

  View on GitHub
  NSA Playset implant for bridging airgaps without radio
  ☆17Sep 28, 2015Updated 10 years ago
• hase-project / hase

  View on GitHub
  Timeless debugging with symbolic execution and processor trace
  ☆75Jan 23, 2021Updated 5 years ago
• S2E / qemu

  View on GitHub
  QEMU VM with generic KVM extensions for symbolic execution
  ☆26Updated this week
• avatartwo / avatar-qemu

  View on GitHub
  QEmu backend for avatar²
  ☆22Mar 29, 2025Updated 11 months ago
• S2E / libs2eplugins

  View on GitHub
  S2E plugins library
  ☆17Jan 7, 2020Updated 6 years ago
• mechaphish / setup

  View on GitHub
  ☆20Jul 18, 2019Updated 6 years ago
• jyao1 / STM

  View on GitHub
  ☆73Apr 30, 2020Updated 5 years ago
• RUB-SysSec / EvilCoder

  View on GitHub
  Code for the paper EvilCoder: Automated Bug Insertion at ACSAC 2016
  ☆46Jan 18, 2017Updated 9 years ago
• syreal17 / Cardinal

  View on GitHub
  Similarity Analysis to Defeat Malware Compiler Variations
  ☆25Oct 3, 2017Updated 8 years ago
• Bareflank / extended_apis

  View on GitHub
  deprecated
  ☆46Mar 20, 2019Updated 6 years ago
• libvmtrace / libvmtrace

  View on GitHub
  Virtual machine introspection library based on libvmi - parts of this work have been funded by Deutsche Forschungsgemeinschaft (DFG) – pr…
  ☆31Mar 3, 2022Updated 4 years ago
• BinaryAnalysisPlatform / bap-plugins

  View on GitHub
  BAP Plugins Repository
  ☆58Nov 20, 2020Updated 5 years ago
• carter-yagemann / vmi-unpack

  View on GitHub
  VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.
  ☆57Jan 16, 2020Updated 6 years ago
• Bareflank / hyperkernel

  View on GitHub
  deprecated
  ☆19Jan 15, 2019Updated 7 years ago
• mixmodeai / bro_intel_linter

  View on GitHub
  Bro Intel Feed Linter
  ☆26Aug 30, 2019Updated 6 years ago
• pfohjo / nitro

  View on GitHub
  KVM-based virtual machine introspection for malware analysis
  ☆29May 11, 2017Updated 8 years ago
• utds3lab / pemu

  View on GitHub
  ☆105Apr 20, 2015Updated 10 years ago
• hbowden / nextgen

  View on GitHub
  A Genetic File, Syscall and Network Fuzzer.
  ☆58May 28, 2017Updated 8 years ago
• kengiter / lrsan

  View on GitHub
  LRSan: Detecting Lacking-Recheck Bugs in OS Kernels
  ☆30Feb 23, 2019Updated 7 years ago
• Bareflank / extended_apis_example_hook

  View on GitHub
  deprecated
  ☆27Mar 20, 2019Updated 6 years ago
• holtgrewe / linty

  View on GitHub
  C++ convention/style checker in Python using libclang.
  ☆42Jan 4, 2012Updated 14 years ago
• HexHive / malWASH

  View on GitHub
  ☆117Aug 9, 2016Updated 9 years ago
• djteller / MemoryAnalysis

  View on GitHub
  Automated Memory Analysis (Black Hat Arsenal 2014)
  ☆32Aug 4, 2014Updated 11 years ago