Alternatives and similar repositories for VTIL-SymEx

Users that are interested in VTIL-SymEx are comparing it to the libraries listed below

• pgarba / UniTaint
  PoC for a taint based attack on VMProtect
  ☆123Updated 6 years ago
• vtil-project / VTIL-BinaryNinja
  ☆93Updated 5 years ago
• synacktiv / vmx_intrinsics
  VMX intrinsics plugin for Hex-Rays decompiler
  ☆73Updated 6 years ago
• vtil-project / VTIL-Common
  A common set of helpers used across VTIL toolchain. Moved into -->
  ☆20Updated 5 years ago
• usualsuspect / ida_stuff
  ☆27Updated 7 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆75Updated last year
• saweol / vwaad
  IDA script for vmprotect Windows Api address decoder
  ☆54Updated 4 years ago
• 0vercl0k / pywinhv
  Python bindings for the Microsoft Hypervisor Platform APIs.
  ☆80Updated 6 years ago
• imugee / pegasus
  reverse engineering extension plugin for windbg
  ☆120Updated 6 years ago
• nlykkei / llvm-ir-obfuscation
  Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.
  ☆76Updated 6 years ago
• Vector35 / OpaquePredicatePatcher
  ☆69Updated last year
• thalium / idatag
  IDA plugin to explore and browse tags
  ☆55Updated 6 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆48Updated last year
• mrphrazer / hitb2021ams_deobfuscation
  ☆72Updated 4 years ago
• fvrmatteo / oracle-synthesis-meets-equality-saturation
  ☆25Updated 8 months ago
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆77Updated 5 years ago
• vmware-archive / HexRaysDeob
  Hex-Rays microcode API plugin for breaking an obfuscating compiler
  ☆84Updated 6 years ago
• patois / FuncScanner
  Collects extended function properties from IDA Pro databases
  ☆94Updated 5 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆66Updated 5 years ago
• ajkhoury / Windbg2Struct
  Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure
  ☆37Updated last year
• ergrelet / triton-bn
  Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.
  ☆64Updated last year
• calware / HV-Playground
  A simple and heavily documented series of test hypervisors built for 64-bit Windows 10 systems running under Intel's VT-x
  ☆34Updated 5 years ago
• RolfRolles / FinSpyVM
  Static unpacker for FinSpy VM
  ☆103Updated 4 years ago
• RolfRolles / Miscellaneous
  Small programs and scripts that do not require their own repositories
  ☆139Updated 3 years ago
• mrphrazer / r2con2020_deobfuscation
  ☆76Updated 4 years ago
• hsheep / vmpanalysis
  VMProtect analysis script
  ☆56Updated 5 years ago
• zzrcxb / fusor
  Obfuscator based on logic-bombs
  ☆68Updated 5 years ago
• kukrimate / grr
  AMD SVM hypervisor rootkit proof of concept
  ☆48Updated 2 years ago
• vtil-project / VTIL-Python
  Python bindings for the VTIL API. (WIP)
  ☆29Updated 5 years ago
• pgarba / Saturn_Results
  This repo contains the tests and results that were done during the research of SATURN
  ☆43Updated 5 years ago