Automated multi-engine framework for unpacking, analyzing, and devirtualizing binaries protected by commercial and custom Virtual Machine based protectors. Combines Dynamic Taint Tracking, Symbolic Execution, Pattern & Semantic Classification, and Machine Learning–driven prioritization to dramatically reduce manual reverse engineering time.
☆446Jun 3, 2026Updated 4 months ago
Alternatives and similar repositories for VMDragonSlayer
Users that are interested in VMDragonSlayer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆320Jul 30, 2026Updated 2 months ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆915Sep 22, 2026Updated last month
- Rewrite and obfuscate code in compiled binaries☆279Dec 13, 2025Updated 10 months ago
- LLVM based static binary analysis framework☆380Aug 15, 2026Updated 2 months ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆832Jun 25, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Themida 3.x research☆116Feb 28, 2025Updated last year
- Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool☆350Nov 20, 2025Updated 11 months ago
- IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformati…☆1,951Sep 17, 2026Updated last month
- Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation☆355Aug 13, 2026Updated 2 months ago
- Native code virtualizer for x64 binaries☆547Dec 20, 2024Updated last year
- An x86-64 Code Virtualizer☆330Sep 26, 2024Updated 2 years ago
- A Windows Kernel Driver Emulator base on Unicorn, Kernel Memory Dump and some of native environment☆205Aug 27, 2026Updated last month
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆78Mar 24, 2026Updated 6 months ago
- Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆406Jul 29, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hijacking Hyper-V at Runtime with DDMA☆159Aug 13, 2025Updated last year
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆348Aug 18, 2026Updated 2 months ago
- Windows 11 24H2-25H2 Runtime PatchGuard Bypass☆273Nov 4, 2025Updated 11 months ago
- An x86-64 code virtualizer for VM based obfuscation☆272Dec 21, 2024Updated last year
- chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.☆299Updated this week
- An analysis and static deobfuscation of codedefender.io protected samples.☆98Apr 18, 2026Updated 6 months ago
- memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V☆814Jul 24, 2026Updated 2 months ago
- VTIL2 is a ground-up reimagination of the VTIL Project, completely rewritten in modern C# with enterprise-grade architecture, performance…☆75Oct 29, 2025Updated 11 months ago
- ☆110Oct 25, 2025Updated 11 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- binary instrumentation, analysis, and patching framework☆105Feb 20, 2026Updated 8 months ago
- protector & obfuscator & code virtualizer☆784Oct 7, 2026Updated 2 weeks ago
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆162Jul 7, 2026Updated 3 months ago
- A cross-platform C++ framework for building Windows shellcode☆179Sep 14, 2026Updated last month
- An x86/x64 import recovery and PE rebuilding tool for binaries protected with VMProtect (all versions)☆590Aug 17, 2026Updated 2 months ago
- Binary lifter and deobfuscator using remill for x86_64 Windows binaries☆105Apr 20, 2026Updated 6 months ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆137Jul 25, 2026Updated 2 months ago
- Windows hypervisor for Intel x64: defensive host hypervisor for Windows designed to mitigate kernel-level attacks including BYOVD, compat…☆281Jul 18, 2026Updated 3 months ago
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆672Jan 23, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆163Mar 6, 2026Updated 7 months ago
- Titan is a VMProtect devirtualizer☆162Mar 6, 2024Updated 2 years ago
- [WIP] claude opus x86_64 disassembler/lifter/recompiler☆42Feb 12, 2026Updated 8 months ago
- Themida Devirt Results☆126May 10, 2026Updated 5 months ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆103Oct 26, 2025Updated 11 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆276Jan 24, 2025Updated last year
- Hells Hollow Windows 11 Rootkit technique to Hook the SSDT via Alt Syscalls☆294Jul 13, 2026Updated 3 months ago