pfohjo / nitroLinks
KVM-based virtual machine introspection for malware analysis
☆29Updated 8 years ago
Alternatives and similar repositories for nitro
Users that are interested in nitro are comparing it to the libraries listed below
Sorting:
- ☆47Updated 7 years ago
- PoC LibVMI-based GDB server for virtual machines☆53Updated 7 years ago
- ☆61Updated 2 years ago
- Using LibVMI to detect malware☆31Updated 3 years ago
- ☆55Updated 3 years ago
- LibVMI Python bindings☆34Updated last month
- PathArmor context-sensitive CFI implementation☆45Updated 9 years ago
- Fork of KVM with Virtual Machine Introspection patches☆37Updated last year
- Unofficial mirror of☆11Updated 7 years ago
- QTrace, a "zero knowledge" system call tracer☆54Updated 10 years ago
- L1TF (Foreshadow) VM guest to host memory read PoC☆113Updated 7 years ago
- Virtual Machine Introspection (VMI) project☆14Updated 10 years ago
- Public release of the tools used to assist in gadget finding.☆42Updated 7 years ago
- Arancino is a dynamic protection framework that defends Intel Pin against anti-instrumentation attacks.☆72Updated 3 years ago
- VMI-Unpack - A Virtual Machine Introspection (VMI) based generic unpacker.☆56Updated 5 years ago
- Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)☆188Updated 6 years ago
- Efficient Multi-threaded Binary Code Control Flow Profiling Pintool☆22Updated 9 years ago
- Fork of QEMU with Virtual Machine Introspection patches☆14Updated 2 years ago
- Gadget displacement on top of IPR (In-Place Randomization) against Code Reuse Attack☆26Updated 9 years ago
- Open-source release for MemSentry (EuroSys'17)☆47Updated 4 years ago
- Malware diversity☆50Updated 9 years ago
- a bare metal (type 1) VMM (hypervisor) with a python remote control API☆185Updated 7 years ago
- Interactive Virtual Machine Introspection☆18Updated 8 years ago
- Implementation of G-Free: Defeating Return-Oriented Programming through Gadget-less Binaries☆95Updated 7 years ago
- DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.☆95Updated 7 years ago
- ☆61Updated 9 years ago
- Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization☆144Updated 9 years ago
- ☆92Updated last year
- Preventing code-reuse attacks by stopping code pointer leakages☆36Updated 9 years ago
- A system to record malware using PANDA☆44Updated 6 years ago