DRAKVUF Black-box Binary Analysis
☆1,209Feb 28, 2026Updated last week
Alternatives and similar repositories for drakvuf
Users that are interested in drakvuf are comparing it to the libraries listed below
Sorting:
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,269Updated this week
- The official home of the LibVMI project is at https://github.com/libvmi/libvmi.☆737Jan 4, 2026Updated 2 months ago
- DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the D…☆837Nov 19, 2024Updated last year
- Platform for Architecture-Neutral Dynamic Analysis☆2,722Feb 14, 2026Updated 3 weeks ago
- Virtual Machine Introspection, Tracing & Debugging☆596Feb 22, 2022Updated 4 years ago
- A static analyzer for PE executables.☆1,107Updated this week
- Windows kernel and user mode emulation.☆1,868Updated this week
- Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software v…☆4,080Dec 2, 2025Updated 3 months ago
- Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU☆1,682Feb 14, 2024Updated 2 years ago
- Kernel Fuzzer for Xen Project (KF/x) - Hypervisor-based fuzzing using Xen VM forking, VMI & AFL☆473Jul 8, 2024Updated last year
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆6,868Updated this week
- Malware Configuration And Payload Extraction☆761Nov 22, 2024Updated last year
- KVM-based Virtual Machine Introspection☆362Oct 11, 2025Updated 4 months ago
- Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.☆1,728Nov 24, 2023Updated 2 years ago
- Automated static analysis tools for binary programs☆1,675Dec 18, 2025Updated 2 months ago
- Reverse engineering framework in Python☆3,828Jan 26, 2025Updated last year
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,564Oct 31, 2025Updated 4 months ago
- ☆987Jan 16, 2026Updated last month
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆3,909Feb 23, 2026Updated last week
- A True Instrumentable Binary Emulation Framework☆5,827Nov 5, 2025Updated 4 months ago
- Automatic and platform-independent unpacker for Windows binaries based on emulation☆743Aug 18, 2025Updated 6 months ago
- IDA 2016 plugin contest winner! Symbolic Execution just one-click away!☆1,615Jun 11, 2025Updated 8 months ago
- VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.☆821Sep 7, 2020Updated 5 years ago
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,233Aug 7, 2025Updated 7 months ago
- A Coverage Explorer for Reverse Engineers☆2,505Feb 14, 2026Updated 3 weeks ago
- Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that…☆3,867Jun 21, 2024Updated last year
- State-of-the-art native debugging tools☆3,667Feb 24, 2026Updated last week
- Monitoring and controlling kernel API calls with stealth hook using EPT☆1,356Jan 22, 2022Updated 4 years ago
- A Tool for Automatic Analysis of Malware Behavior☆373May 8, 2019Updated 6 years ago
- This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows☆466Apr 17, 2018Updated 7 years ago
- libipt - an Intel(R) Processor Trace decoder library☆706Jan 8, 2026Updated last month
- Diaphora, the most advanced Free and Open Source program diffing tool.☆4,191Nov 24, 2024Updated last year
- A Dynamic Binary Instrumentation framework based on LLVM.☆1,734Feb 20, 2026Updated 2 weeks ago
- Malware Configuration And Payload Extraction☆3,031Feb 27, 2026Updated last week
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,314Oct 31, 2025Updated 4 months ago
- A Bochs-based instrumentation performing kernel memory taint tracking to detect disclosure of uninitialized memory to ring 3☆310Feb 24, 2019Updated 7 years ago
- VMAttack PlugIn for IDA Pro☆866Nov 30, 2017Updated 8 years ago
- WinDBG Anti-RootKit Extension☆645Jul 29, 2020Updated 5 years ago
- A Pin Tool for tracing API calls etc☆1,625Feb 8, 2026Updated 3 weeks ago