Alternatives and similar repositories for xFindOut

Users that are interested in xFindOut are comparing it to the libraries listed below

• nblog / Vm2Import
  fix vmprotect import function used unicorn-engine.
  ☆96Updated 2 years ago
• mrexodia / driver_unpacking
  Ghetto user mode emulation of Windows kernel drivers.
  ☆145Updated 9 months ago
• archercreat / vm_jit
  VM devirtualization PoC based on AsmJit and llvm
  ☆117Updated 3 years ago
• KelvinMsft / NoTruth
  ☆99Updated 7 years ago
• mzakocs / VirtualizationObfuscatorAnalysis
  A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators
  ☆70Updated 2 years ago
• Shhoya / MutantKiller
  VMP Mutation API Fix
  ☆41Updated 3 years ago
• momo5502 / ept-hook-detection
  🪝 Different approaches for EPT hook detection
  ☆115Updated this week
• mike1k / pepp
  C++ library for parsing and manipulating PE files statically and dynamically.
  ☆88Updated last year
• sunwm518 / VMProtect-3-5-DEvirt
  VMProtect, VMP, Devirter, 3,5
  ☆108Updated 2 years ago
• jonatan1024 / CpuidSpoofer
  x64dbg plugin for simple spoofing of CPUID instruction behavior
  ☆91Updated 2 years ago
• sodareverse / TDE
  A devirtualization engine for Themida.
  ☆100Updated last year
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆61Updated last year
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆63Updated last year
• skadro-official / PE-Dump-Fixer
  PE-Dump-Fixer
  ☆109Updated 5 years ago
• Speedi13 / ManualMapped_SEH_32bit
  Enable SEH support for manual mapped x86-32bit PEs
  ☆67Updated 6 years ago
• Vicshann / GhostDbg
  Noninvasive debugging plugin for X64Dbg
  ☆106Updated 8 months ago
• MiroKaku / DetoursX
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆173Updated 2 months ago
• alal4465 / KernelMon
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆58Updated 4 years ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆96Updated 2 years ago
• changeofpace / Force-Page-Protection
  This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
  ☆117Updated 8 years ago
• fIappy / infhook19041
  ☆125Updated 5 years ago
• hoangprod / LeoSpecial-VEH-Hook
  Vectored Exception Handling Hooking Class
  ☆163Updated 6 years ago
• arielkoren / DisablePatchGuard
  disable most common windowsx64 systems patchguard
  ☆87Updated 6 years ago
• MiroKaku / Nt-Modules
  Collect different versions of Crucial modules.
  ☆143Updated last year
• 67-6f-64 / AntiOreans-CodeDevirtualizer
  ☆57Updated 2 years ago
• binsnake / KUBERA
  A x86_64 software emulator
  ☆135Updated this week
• crtdll / bedaisy-reversal
  Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.
  ☆125Updated 3 years ago
• huoji120 / huoji_debuger
  ayy debuger
  ☆89Updated last year
• omgkaka / vmp_runner
  A general solution to simulate execution of virtualized instructions (vmprotect/themida, etc.).
  ☆74Updated 3 years ago
• MiroKaku / WDKExt
  Windows Driver Kit Extesion Header (Undoc)
  ☆135Updated 3 years ago