vi3t1 / vmprotect-3.5.1
☆67Updated 4 months ago
Related projects: ⓘ
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆73Updated 3 months ago
- Forked LLVM focused on MSVC Compatibility. This version is designed for windows users☆72Updated 3 weeks ago
- A POC to detect the exist of VMProtect 3 protection by search feature watermark.☆76Updated 9 months ago
- VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker☆63Updated last year
- VMProtect, VMP, Devirter, 3,5☆103Updated last year
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆100Updated 2 years ago
- SlimDetours is an improved Windows API hooking library base on Microsoft Detours.☆34Updated last month
- an encryption library designed for Windows kernel and driver programming☆113Updated last year
- a monitoring windows driver calls kernel api tools☆87Updated 2 months ago
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆55Updated 3 weeks ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆61Updated 3 weeks ago
- ☆46Updated last year
- 利用CE的DBK驱动加载未签名驱动☆22Updated 11 months ago
- Radical Windows ARK☆199Updated last week
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆106Updated 5 months ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆132Updated 2 years ago
- ☆78Updated 2 years ago
- ☆124Updated last year
- ☆88Updated 2 years ago
- Titan is a VMProtect devirtualizer☆36Updated 10 months ago
- IDA Pro plugin AntiXorstr☆87Updated last year
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆136Updated last week
- Fix VMProtect3 IAT☆252Updated 9 months ago
- ☆68Updated 2 years ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock(利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能)☆98Updated 2 years ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆108Updated last week
- A flexible PE loader, loading module in memory. Most of the functions can be inline, compatible for shellcode.☆153Updated 5 months ago
- ☆155Updated 2 years ago
- Win7内核私有符号结构转储☆64Updated 3 years ago
- 一个界面基于IMGUI的调试器,目前R3实现☆27Updated 8 months ago