Alternatives and similar repositories for devirt_vmp

Users that are interested in devirt_vmp are comparing it to the libraries listed below

• kyle-elliott / DVM
  Symbolic Execution based on lifting amd64 to z3
  ☆28Updated last year
• DenuvoSoftwareSolutions / DVRT
  How Meltdown and Spectre haunt Anti-Cheat: DVRT details
  ☆21Updated 10 months ago
• samrussell / vmprotect_binja_plugin
  Binary Ninja plugin for automating VMProtect analysis
  ☆61Updated 2 years ago
• expend20 / x64dbg_ext
  Extensions for x64dbg written in Rust: Telescope and Unicorn powered disassembly
  ☆26Updated 2 years ago
• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆47Updated 6 months ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 2 years ago
• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆48Updated 4 months ago
• generic-trash / themdem
  ☆32Updated last year
• archercreat / vdk
  vdk is a set of utilities used to help with exploitation of a vulnerable driver.
  ☆40Updated 3 years ago
• Nitr0-G / Rework-part-of-z3-proving
  This is the PoC of a dynamic lifter and deobfuscator with collecting trace.
  ☆35Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated last year
• mzakocs / VirtualizationObfuscatorAnalysis
  A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators
  ☆70Updated 2 years ago
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆60Updated last year
• milankovo / zydisinfo
  ☆21Updated 5 months ago
• m-odern / focus-theme-for-ida-pro-7.6
  ☆30Updated 3 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆26Updated last year
• irql / nokd
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆25Updated last year
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆60Updated 11 months ago
• ergrelet / themida-spotter-bn
  A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
  ☆82Updated 11 months ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆95Updated 2 years ago
• charlesnathansmith / whatlicense
  WinLicense key extraction via Intel PIN
  ☆101Updated last year
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• NudistBeaaach / Chained-CFG-obfuscation-pass
  LLVM obfuscation pass, flattening at the basic block's level and turning each basic block into a dispacher and each instruction into a ne…
  ☆47Updated 3 years ago
• KiFilterFiberContext / BadlionLogger
  kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT
  ☆33Updated 4 years ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆37Updated last year
• bilka00 / vmprotect_import_fixer
  Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)
  ☆17Updated 3 years ago
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆59Updated 2 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆45Updated 2 years ago
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆29Updated 2 years ago
• Colerar / labyrinth
  Labyrinth, an LLVM obfuscation plugin for the New Pass Manager
  ☆43Updated 4 months ago