Alternatives and similar repositories for virtdbg

Users that are interested in virtdbg are comparing it to the libraries listed below

• rmusser01 / hyperdbg
  Automatically exported from code.google.com/p/hyperdbg
  ☆109Updated 10 years ago
• tandasat / GuardMon
  Hypervisor based tool for monitoring system register accesses.
  ☆148Updated 7 years ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆123Updated 8 years ago
• zer0mem / MiniHyperVisorProject
  IntelVT-X nice feature -> tool
  ☆95Updated 11 years ago
• tandasat / findpg
  Windbg extension to find PatchGuard pages
  ☆122Updated 11 years ago
• imugee / pegasus
  reverse engineering extension plugin for windbg
  ☆120Updated 6 years ago
• KelvinMsft / DeviceMon
  VT-based PCI device monitor (SPI)
  ☆154Updated 5 years ago
• zer0fl4g / DebugDetector
  ☆117Updated 13 years ago
• marcusbotacin / BranchMonitoringProject
  A branch-monitor-based solution for process monitoring.
  ☆135Updated 5 years ago
• tandasat / DebugLogger
  A software driver that lets you log kernel-mode debug output into a file on Windows.
  ☆107Updated 7 years ago
• bi-zone / rdtsc-checkvirt-poc
  Virtualization detection through speculative execution PoCs and papers
  ☆69Updated 7 years ago
• tandasat / meow
  nyā
  ☆69Updated 10 years ago
• markhc / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆132Updated 9 years ago
• vol4ok / libsplice
  Library for kernel and user mode splicing for Windows (x86 and x64).
  ☆64Updated 13 years ago
• ainfosec / MoRE
  TLB splitting VMM
  ☆169Updated 9 years ago
• ntdiff / ntdiff
  ☆131Updated last year
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆180Updated 4 years ago
• pstolarz / dumpext
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆84Updated last year
• honorarybot / PulseDbg
  Hypervisor-based debugger
  ☆188Updated 4 years ago
• tandasat / MemoryMon
  Detecting execution of kernel memory where is not backed by any image file
  ☆261Updated 7 years ago
• harryanon / r0ak
  ☆108Updated 7 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆78Updated 14 years ago
• eyalz800 / zpp_hypervisor
  A very simple hypervisor for learning experience.
  ☆140Updated 4 years ago
• vtil-project / VTIL-SymEx
  Symbolic expression simplifier used across VTIL toolchain. Moved into -->
  ☆24Updated 5 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆57Updated 7 years ago
• tandasat / WinIoCtlDecoder
  IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.
  ☆118Updated last year
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆77Updated 5 years ago
• asamy / x86-64-pe-emu
  AMD64 PE Emulator in Python.
  ☆85Updated last year
• JeremyWildsmith / x86devirt
  A project that aims to automatically devirtualize code that has been virtualized using x86virt
  ☆126Updated 2 years ago
• nektra / vtbl-ida-pro-plugin
  Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
  ☆98Updated 12 years ago