Alternatives and similar repositories for Nemesis

Users that are interested in Nemesis are comparing it to the libraries listed below

• illuZion9999 / Phoenix-Protector-Strings-Decryptor

  View on GitHub
  A strings decryptor for Phoenix Protector using the stack thanks to https://github.com/MindSystemm/StackYenoDeobfuscator.
  ☆10Jun 8, 2020Updated 5 years ago
• EquiFox / KsDumper

  View on GitHub
  Dumping processes using the power of kernel space !
  ☆1,047Nov 6, 2023Updated 2 years ago
• GabTeix / TheBear

  View on GitHub
  .NET Devirtualizer for NashaVM
  ☆21Oct 25, 2020Updated 5 years ago
• NicolasBZN / StackYenoDeobfuscator

  View on GitHub
  String decryptor relying on the stack. Made for teach
  ☆10Jun 7, 2020Updated 5 years ago
• NicolasBZN / MemeDevirtualizer

  View on GitHub
  Devirtualizer for MemeVM
  ☆15May 26, 2020Updated 5 years ago
• Rat431 / ColdHide_V2

  View on GitHub
  A mini anti-anti debug hooking library for Windows.
  ☆106Jan 3, 2021Updated 5 years ago
• Mageland29 / SimpleMathCleaner

  View on GitHub
  Simple Math Cleaner with invoke method for generic use
  ☆14May 13, 2020Updated 5 years ago
• RivaTesu / SizeOf-Fixer

  View on GitHub
  Fix the sizeof of assembly
  ☆17Dec 31, 2019Updated 6 years ago
• NicolasBZN / Skater.NetDeobfuscator

  View on GitHub
  Deobfuscator for RustemSoft Skater.Net Obfuscator
  ☆16Apr 26, 2020Updated 5 years ago
• r1cky33 / winforms-gui-loader

  View on GitHub
  driver interface with dll-injection capabilities
  ☆28Nov 5, 2020Updated 5 years ago
• vmcall / MapDetection

  View on GitHub
  Detect manualmapped images remotely, without hassle
  ☆152Nov 3, 2017Updated 8 years ago
• NicolasBZN / SuperCalculator

  View on GitHub
  Helpful tool which handle most operations used in obfuscation
  ☆19May 8, 2020Updated 5 years ago
• justvmexit / dumpr

  View on GitHub
  Dumping processes using a kernel-mode driver.
  ☆20Nov 10, 2021Updated 4 years ago
• Ynob2000 / pvC

  View on GitHub
  ☆15Oct 7, 2020Updated 5 years ago
• vmcall / nt

  View on GitHub
  NT reversal
  ☆25Jul 12, 2018Updated 7 years ago
• rbapat / KernelInjector

  View on GitHub
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆38Dec 10, 2018Updated 7 years ago
• ApexLegendsUC / anti-cheat-emulator

  View on GitHub
  ☆185May 5, 2019Updated 6 years ago
• Midi12 / drv-loader

  View on GitHub
  Simple driver loader for windows
  ☆17May 22, 2020Updated 5 years ago
• btbd / smap

  View on GitHub
  DLL scatter manual mapper
  ☆810Apr 10, 2021Updated 4 years ago
• mastercodeon314 / KsDumper-11

  View on GitHub
  A revival of the classic and legendary KsDumper
  ☆558Jan 24, 2025Updated last year
• CursedLand / Cursed.Reactor

  View on GitHub
  Full .Net Reactor UnPacker 🙂 Except VM & NecroBit
  ☆55Jun 28, 2022Updated 3 years ago
• not-wlan / driver-hijack

  View on GitHub
  ☆156Oct 29, 2019Updated 6 years ago
• zeroaceee / EDMapper

  View on GitHub
  A documented Windows x64 bit Usermode Injector that works via hooking IAT and hijacking its threads to execute shellcode.
  ☆65Aug 31, 2023Updated 2 years ago
• mactec0 / Kernelmode-manual-mapping-through-IAT

  View on GitHub
  Manual mapping without creating any threads, with rw only access
  ☆804Oct 29, 2019Updated 6 years ago
• lauralex / kdprocdumper

  View on GitHub
  My Personal Kernel-Mode Process dumper
  ☆13Feb 18, 2024Updated last year
• SamuelTulach / negativespoofer

  View on GitHub
  PoC HWID spoofer that runs in EFI
  ☆341Dec 26, 2024Updated last year
• namazso / hdd_serial_spoofer

  View on GitHub
  Windows driver for spoofing serial number of HDDs
  ☆220Sep 8, 2022Updated 3 years ago
• ElektroKill / ILPUnpack

  View on GitHub
  Unpacker for ILProtector
  ☆30Feb 24, 2023Updated 2 years ago
• wwh1004 / AssemblyFixer

  View on GitHub
  Fix assembly pe header and metadata errors
  ☆32Aug 26, 2019Updated 6 years ago
• DevT02 / Junk-Remover

  View on GitHub
  .NET attributes cleaner/Junk remover (nops). Credits to Prab + Illuzion.
  ☆21May 12, 2022Updated 3 years ago
• NETFuscator / NJITHook

  View on GitHub
  A managed .NET Jit hooking library.
  ☆15Dec 3, 2019Updated 6 years ago
• DownWithUp / CallMon

  View on GitHub
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆145Sep 5, 2020Updated 5 years ago
• niemand-sec / ReClass.NET-DriverReader

  View on GitHub
  Plugin for ReClass.Net (using vulnerable driver to read process memory)
  ☆94Jan 2, 2020Updated 6 years ago
• ribthegreat99OrN0P / DynamicStringDecrypter

  View on GitHub
  Decrypts strings dynamically, using https://github.com/Washi1337/AsmResolver
  ☆29Sep 9, 2020Updated 5 years ago
• Mageland29 / NETPacker

  View on GitHub
  Simple Packer .NET
  ☆20Jun 21, 2020Updated 5 years ago
• rhotav / Class-Injector

  View on GitHub
  Class Injector for .NET applications
  ☆17Nov 20, 2019Updated 6 years ago
• Kaidoz / ProxyCall-Remover

  View on GitHub
  Deobfuscator for remove proxy calls methods
  ☆28Jan 30, 2023Updated 3 years ago
• tanduRE / AvastHV

  View on GitHub
  Hooking SSDT with Avast Internet Security Hypervisor
  ☆115Apr 6, 2019Updated 6 years ago
• Gbps / CapcomLib

  View on GitHub
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆43Sep 1, 2018Updated 7 years ago