Alternatives and similar repositories for vbDetectVirtualBox:

Users that are interested in vbDetectVirtualBox are comparing it to the libraries listed below

• hasherezade / tag_converter
  ☆22Updated 4 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆19Updated 6 years ago
• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆45Updated 7 years ago
• swwwolf / obderef
  Decrement Windows Kernel for fun and profit
  ☆38Updated 7 years ago
• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆31Updated last year
• deroko / SPPLUAObjectUacBypass
  ☆45Updated 6 years ago
• nccgroup / WindowsPatchDetector
  Experimental Windows .text section Patch Detector
  ☆21Updated 10 years ago
• mandiant / win10_rekall
  Rekall Memory Forensic Framework
  ☆32Updated 5 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 9 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆36Updated 5 years ago
• deroko / activationcontexthook
  ☆33Updated 7 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆38Updated 11 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆29Updated 8 years ago
• nyx0 / Grum
  The Grum Spam Bot
  ☆20Updated 10 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆38Updated 8 years ago
• secrary / findLoop
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆26Updated 6 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 7 years ago
• sogeti-esec-lab / REBoot
  Bootkits Revisited
  ☆41Updated 10 years ago
• Cr4sh / DrvHide-PoC
  Hidden kernel mode code execution for bypassing modern anti-rootkits.
  ☆81Updated 14 years ago
• Dump-GUY / Python3---Binary-Data-Manipulation
  Python 3 - Manipulation and conversation with different data type (Bytes operations)
  ☆26Updated 3 years ago
• d00rt / easy_way_nymaim
  An IDA Pro script for creating a clearer idb for nymaim malware
  ☆10Updated 6 years ago
• sysopfb / VM_Timing_Detect
  ☆12Updated 8 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆22Updated 5 years ago
• codingtest / r0ak
  r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
  ☆27Updated 6 years ago
• ufrisk / shellcode64
  A minimal tool to extract shellcode from 64-bit PE binaries.
  ☆50Updated 3 years ago
• JeremyFetiveau / Exploits
  Old exploits and code for my self-referencing PML4 technique (2014)
  ☆31Updated 9 years ago
• danielplohmann / empty_msvc
  A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.
  ☆32Updated 9 months ago
• defuse / gas-obfuscation
  Extremely simple but inefficient x86-64 assembly obfuscation.
  ☆35Updated 9 years ago
• nettitude / DLLInjection
  DLL Injection Library & Tools
  ☆72Updated 8 years ago
• mgeeky / HEVD_Kernel_Exploit
  Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
  ☆65Updated 3 years ago