Alternatives and similar repositories for linux_injector

Users that are interested in linux_injector are comparing it to the libraries listed below

• thesecretclub / riscy-business
  RISC-V Virtual Machine
  ☆224Updated 3 months ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆151Updated last year
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆483Updated 5 months ago
• ropfuscator / ropfuscator
  ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
  ☆425Updated last year
• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆210Updated 2 years ago
• thalium / symless
  ☆197Updated last year
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆245Updated 2 years ago
• ThatLing / limba
  compile-time control flow obfuscation using mba
  ☆185Updated last year
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆332Updated last year
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆203Updated 3 weeks ago
• Vector35 / scc
  ☆139Updated 2 weeks ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆227Updated 2 years ago
• connorjaydunn / BinaryShield
  An x86-64 Code Virtualizer
  ☆262Updated 8 months ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆348Updated 3 months ago
• memN0ps / illusion-rs
  Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)
  ☆263Updated 9 months ago
• thalium / vminer
  ☆89Updated 3 months ago
• leandrofroes / gftrace
  A command line Windows API tracing tool for Golang binaries.
  ☆154Updated last year
• D4stiny / ExceptionOrientedProgramming
  Abusing exceptions for code execution.
  ☆111Updated 2 years ago
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆289Updated last year
• zeze-zeze / ioctlance
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆199Updated 2 months ago
• sha0coder / mwemu
  x86 malware emulator
  ☆221Updated this week
• binarly-io / idalib
  Idiomatic Rust bindings for the IDA SDK, enabling the development of standalone analysis tools using IDA v9.x’s idalib
  ☆170Updated this week
• 0vercl0k / snapshot
  WinDbg extension written in Rust to dump the CPU / memory state of a running VM
  ☆117Updated 2 weeks ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆344Updated last month
• Xyrem / Yumekage
  Demo proof of concept for shadow regions, and implementation of HyperDeceit.
  ☆279Updated 2 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆280Updated 7 months ago
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆361Updated 7 months ago
• kiks7 / KRWX
  Kernel Read Write Execute
  ☆84Updated 9 months ago
• nccgroup / ghostrings
  Ghidra scripts for recovering string definitions in Go binaries
  ☆114Updated 6 months ago
• zer0condition / ZeroHVCI
  Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling withou…
  ☆202Updated 7 months ago