Ghetto user mode emulation of Windows kernel drivers.
☆168Oct 20, 2024Updated 2 years ago
Alternatives and similar repositories for driver_unpacking
Users that are interested in driver_unpacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM☆31Nov 6, 2023Updated 2 years ago
- Native code virtualizer for x64 binaries☆547Dec 20, 2024Updated last year
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 3 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆52Mar 11, 2021Updated 5 years ago
- Emulate Drivers in RING3 with self context mapping or unicorn☆394Aug 18, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆21Feb 1, 2022Updated 4 years ago
- A mapper that maps shellcode into loaded large page drivers☆374Apr 26, 2022Updated 4 years ago
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆893Feb 2, 2024Updated 2 years ago
- ☆101Oct 6, 2017Updated 9 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆920Sep 22, 2026Updated last month
- Easy Anti PatchGuard☆220Apr 9, 2021Updated 5 years ago
- Collection of Cheat dumps for Research and Detection.☆16Jan 4, 2026Updated 9 months ago
- Hooking SSDT with Avast Internet Security Hypervisor☆114Apr 6, 2019Updated 7 years ago
- ☆10Jul 12, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆682Jan 28, 2025Updated last year
- Hooking Windows' exception dispatcher to protect process's PML4☆276Jan 24, 2025Updated last year
- Collection of hypervisor detections☆320Sep 25, 2024Updated 2 years ago
- Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities☆441Feb 26, 2025Updated last year
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆427Jul 6, 2022Updated 4 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆242Apr 2, 2022Updated 4 years ago
- The Grimoire Hypervisor solution written in Rust for x86 Processors.☆660Oct 25, 2026Updated last week
- x86-64 code/pe virtualizer☆215Dec 2, 2024Updated last year
- The research UEFI hypervisor that supports booting an operating system.☆765Aug 15, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PE (and elf now!) bin2bin obfuscator☆860Oct 11, 2025Updated last year
- ☆15Dec 25, 2022Updated 3 years ago
- This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…☆640Mar 19, 2019Updated 7 years ago
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆66Feb 7, 2024Updated 2 years ago
- Noninvasive debugging plugin for X64Dbg☆113Nov 21, 2024Updated last year
- Standard Kernel Library for Windows manipulation in C++☆223Jun 18, 2025Updated last year
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆361Apr 27, 2020Updated 6 years ago
- Universal x86/x64 VMProtect 2.0-3.X Import fixer☆36Dec 29, 2021Updated 4 years ago
- Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.☆926Dec 29, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Experiment building lifting-bits dependencies with pure CMake. Migrated to:☆21Oct 8, 2024Updated 2 years ago
- Single-header, minimalistic, cross-platform hook library written in pure C☆400Jan 3, 2026Updated 9 months ago
- Kernel ReClassEx☆67Nov 21, 2023Updated 2 years ago
- ☆80Sep 16, 2022Updated 4 years ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- 🧪 Intel VT-x type 2 hypervisor with EPT hooking support☆369Oct 18, 2026Updated 2 weeks ago
- A x86_64 software emulator☆167Aug 25, 2025Updated last year