Themida 3.x research
☆114Feb 28, 2025Updated last year
Alternatives and similar repositories for Themida-Research
Users that are interested in Themida-Research are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An analysis and static deobfuscation of codedefender.io protected samples.☆98Apr 18, 2026Updated 6 months ago
- Devirtualizer for binaryshield☆22Mar 25, 2026Updated 6 months ago
- VMProtect2 Deobfuscation Tooling☆132Nov 12, 2025Updated 11 months ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆319Jul 30, 2026Updated 2 months ago
- Striga is an experimental lifter from x86_64 to LLVM IR written in Python.☆121Jun 22, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Cracking MBAs☆80Sep 13, 2026Updated last month
- x64 PE bin2bin obfuscator which doesn't add a section to the binary☆348Aug 18, 2026Updated 2 months ago
- Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation☆354Aug 13, 2026Updated 2 months ago
- ☆81Apr 12, 2023Updated 3 years ago
- Yet another IDA Pro/Home plugin for deobfuscating stack strings☆162Mar 6, 2026Updated 7 months ago
- An x86-64 code virtualizer for VM based obfuscation☆270Dec 21, 2024Updated last year
- [WIP] claude opus x86_64 disassembler/lifter/recompiler☆42Feb 12, 2026Updated 8 months ago
- Generate a PDB file given the old PDB file and an address mapping☆54Aug 3, 2025Updated last year
- Collection of hypervisor detections☆316Sep 25, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Injecting code by recompiling shellcode into a ROP chain.☆149Apr 21, 2026Updated 5 months ago
- x86-64 user mode emulation using Zydis☆78Mar 15, 2026Updated 7 months ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆914Sep 22, 2026Updated 3 weeks ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆103Oct 26, 2025Updated 11 months ago
- A lock-free, high-performance logging system designed for Windows kernel drivers☆26Mar 11, 2025Updated last year
- LLVM based static binary analysis framework☆379Aug 15, 2026Updated 2 months ago
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆60Mar 14, 2026Updated 7 months ago
- ☆17Jun 26, 2025Updated last year
- ☆110Oct 25, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Fluently detect security measures in software.☆39Jun 29, 2026Updated 3 months ago
- ☆27Sep 27, 2026Updated 3 weeks ago
- An IDA Hex-Rays microcode filter that lifts AVX/AVX2/AVX-512/AVX10 and VMX/VT-x instructions to intrinsics.☆117Jul 15, 2026Updated 3 months ago
- Morok is a modular C++23 LLVM New-PM IR obfuscator. It loads as a pass plugin inside clang or opt, rewrites LLVM IR, and emits a behavior…☆99Updated this week
- Patching the Secure Kernel to enable debugging of VTL 1 Isolated User Mode☆79May 14, 2026Updated 5 months ago
- memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V☆807Jul 24, 2026Updated 2 months ago
- A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering☆346Sep 21, 2026Updated 3 weeks ago
- C++ Assembler with Built-in Mutation Engine☆31Sep 6, 2025Updated last year
- out-of-tree LLVM 21+ pass plugin for policy-driven IR obfuscation.☆113Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple, fast and lightweight Header-Only C++ Assembler Library☆145Aug 13, 2025Updated last year
- Binary rewriter for 64-bit PE files.☆105Feb 5, 2024Updated 2 years ago
- Anti-Cheat Artifacts detector plugin for IDA Pro☆105Aug 7, 2026Updated 2 months ago
- Abusing DDMA alongside Copy On Write for Cross Process Code Execution for a 3000$ Bug Bounty☆106Feb 1, 2026Updated 8 months ago
- Rewrite and obfuscate code in compiled binaries☆279Dec 13, 2025Updated 10 months ago
- Automated multi-engine framework for unpacking, analyzing, and devirtualizing binaries protected by commercial and custom Virtual Machine…☆446Jun 3, 2026Updated 4 months ago
- llvm powered deobfuscation of a vm-based protection☆64Feb 25, 2026Updated 7 months ago