noahware / hyper-reVLinks
memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V
☆160Updated this week
Alternatives and similar repositories for hyper-reV
Users that are interested in hyper-reV are comparing it to the libraries listed below
Sorting:
- C++ macro for x64 programs that breaks ida hex-rays decompiler tool.☆123Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆56Updated 9 months ago
- A x86 CPU & Environment emulator for Windows user and kernel binaries.☆124Updated this week
- Binary rewriter for 64-bit PE files.☆83Updated last year
- A large collection of 32bit and 64bit PE files useful for verifying the correctness of bin2bin transformations☆54Updated 11 months ago
- A devirtualization engine for Themida.☆100Updated last year
- x86-64 user mode emulation using Zydis☆48Updated 6 months ago
- Windows PDB parser for kernel-mode environment.☆98Updated last month
- Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.☆46Updated last year
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆60Updated last year
- Me fockin' pe protector☆45Updated 2 years ago
- Kernel ReClassEx☆62Updated last year
- ☆54Updated 2 years ago
- Hooking Windows' exception dispatcher to protect process's PML4☆182Updated 5 months ago
- Symbolic Execution based on lifting amd64 to z3☆28Updated last year
- A portable header only library extending the C++20 STL.☆80Updated last year
- compile-time control flow obfuscation using mba☆189Updated 2 years ago
- A small tool for rapid enumeration of CPUID, and MSR fields.☆27Updated last year
- A Windows executable (PE) packer (x64) with LZMA compression and with full TLS (Thread Local Storage) support☆68Updated last month
- C/C++ antidebugging library for Windows☆26Updated last week
- Simple, fast and lightweight Header-Only C++ Assembler Library☆82Updated last month
- Makes IDA (most versions) to crash upon opening it.☆95Updated 10 months ago
- Simple anti-instrumentation with EFLAGS.AC☆18Updated 3 months ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆72Updated last year
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆42Updated 8 months ago
- Lightweight PDB symbol parser and resolver☆26Updated 8 months ago
- Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).☆146Updated 10 months ago
- devirtualization vmprotect☆62Updated 2 years ago
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆125Updated 2 years ago
- Kernel driver for detecting Intel VT-x hypervisors.☆189Updated 2 years ago