🪅 Windows User Space Emulator
☆2,754Mar 2, 2026Updated this week
Alternatives and similar repositories for sogen
Users that are interested in sogen are comparing it to the libraries listed below
Sorting:
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆642Jan 23, 2025Updated last year
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆772Sep 29, 2025Updated 5 months ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆409Apr 19, 2025Updated 10 months ago
- An x86-64 Code Virtualizer☆309Sep 26, 2024Updated last year
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,748Feb 24, 2026Updated last week
- Titan is a VMProtect devirtualizer☆119Mar 6, 2024Updated last year
- Hooking Windows' exception dispatcher to protect process's PML4☆228Jan 24, 2025Updated last year
- Collection of hypervisor detections☆297Sep 25, 2024Updated last year
- State-of-the-art native debugging tools☆3,654Feb 24, 2026Updated last week
- Native code virtualizer for x64 binaries☆517Dec 20, 2024Updated last year
- A Pin Tool for tracing API calls etc☆1,620Feb 8, 2026Updated 3 weeks ago
- Core emulator components for Icicle☆282Feb 25, 2026Updated last week
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆163Aug 23, 2024Updated last year
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆372Feb 26, 2025Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆657Jan 28, 2025Updated last year
- A DTrace on Windows Reimplementation☆372Feb 3, 2026Updated last month
- LLVM based static binary analysis framework☆303Apr 2, 2025Updated 11 months ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆124Updated this week
- Debugger Anti-Detection Benchmark☆383Updated this week
- Hook system calls on Windows by using Kaspersky's hypervisor☆1,281Feb 14, 2026Updated 2 weeks ago
- Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com☆400Dec 4, 2024Updated last year
- 🧪 Hypervisor with EPT hooking support.☆313Updated this week
- protector & obfuscator & code virtualizer☆686Updated this week
- x64 binary obfuscator☆1,960Jul 14, 2023Updated 2 years ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆330Jul 29, 2024Updated last year
- A bare minimum hypervisor on AMD and Intel processors for learners.☆339Sep 27, 2025Updated 5 months ago
- Hardcore Debugging☆933Jan 6, 2026Updated last month
- PE (and elf now!) bin2bin obfuscator☆820Oct 11, 2025Updated 4 months ago
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆855Feb 2, 2024Updated 2 years ago
- Macro-header for compile-time C obfuscation (tcc, win x86/x64)☆1,579Feb 14, 2026Updated 2 weeks ago
- kernel mode anti cheat☆642Aug 4, 2024Updated last year
- ☆168Jan 1, 2026Updated 2 months ago
- Kernel Driver Utility☆2,422Feb 17, 2026Updated 2 weeks ago
- Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.☆1,391Jun 11, 2022Updated 3 years ago
- Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.☆361Feb 9, 2025Updated last year
- x86-64 user mode emulation using Zydis☆72Sep 12, 2025Updated 5 months ago
- Virtual-machine Translation Intermediate Language☆1,462Nov 5, 2023Updated 2 years ago
- Windows kernel and user mode emulation.☆1,860Updated this week
- A x86_64 software emulator☆162Aug 25, 2025Updated 6 months ago