Alternatives and similar repositories for vbDetectVirtualBox

Users that are interested in vbDetectVirtualBox are comparing it to the libraries listed below

• marcusbotacin / Anti.Analysis
  Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis
  ☆45Updated 8 years ago
• nccgroup / WindowsPatchDetector
  Experimental Windows .text section Patch Detector
  ☆22Updated 10 years ago
• deroko / activationcontexthook
  ☆34Updated 8 years ago
• Microwave89 / syscalltest
  PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls
  ☆39Updated 10 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆41Updated 6 years ago
• sogeti-esec-lab / REBoot
  Bootkits Revisited
  ☆40Updated 11 years ago
• hasherezade / tag_converter
  ☆23Updated 4 years ago
• ufrisk / shellcode64
  A minimal tool to extract shellcode from 64-bit PE binaries.
  ☆51Updated 4 years ago
• sysopfb / Unpackers
  My collection of unpackers for malware packers/crypters
  ☆28Updated 8 years ago
• hasherezade / decryptors_archive
  Archive of ransomware decryptors
  ☆34Updated 8 years ago
• maldevel / driver-loader
  Load a Windows Kernel Driver
  ☆94Updated 8 years ago
• muffins / rookit_playground
  Educational repository for learning about rootkits and Windows Kernel Hooks.
  ☆49Updated 10 years ago
• hasherezade / flareon2019
  Flare-On solutions
  ☆37Updated 6 years ago
• olliencc / WindowsPatchDetector
  Experimental: Windows .text section compare - disk versus memory
  ☆15Updated 10 years ago
• hasherezade / loaderine
  A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
  ☆22Updated 7 years ago
• TheEnergyStory / malware_analysis
  Malware analyses and helpful scripts
  ☆29Updated 3 years ago
• rwfpl / rewolf-pcausa-exploit
  PCAUSA Rawether for Windows Local Privilege Escalation
  ☆39Updated 8 years ago
• rcanzanese / SystemCallService
  Process / thread-level system call tracer for Windows 7 / 8 / 2008 / 2012
  ☆21Updated 10 years ago
• mrexodia / YaraGen
  Plugin for x64dbg to generate Yara rules from function basic blocks.
  ☆37Updated 8 years ago
• OsandaMalith / ApiMon
  A simple API monitor for Windbg
  ☆65Updated 8 years ago
• sam-b / HackSysDriverExploits
  ☆50Updated 8 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆57Updated 9 years ago
• majdi / deadlands
  🐧 A simple kernel-level rootkit
  ☆21Updated 9 years ago
• SekoiaLab / BinaryInjectionMitigation
  Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.
  ☆53Updated 8 years ago
• vallejocc / PoC-Inject-Data-WM_COPYDATA
  A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
  ☆53Updated 7 years ago
• deroko / SPPLUAObjectUacBypass
  ☆46Updated 7 years ago
• benoitsevens / applying-ttd-to-malware-analysis
  Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
  ☆42Updated 6 years ago
• thezdi / scripts
  Generic scripts for public consumption
  ☆85Updated 6 years ago
• atlantis2013 / Evasion-Tools
  Anti-technique Codes, Detection of Anti-technique codes
  ☆37Updated 12 years ago
• JuanJMarques / pymetamorph
  metamorphic engine in python
  ☆34Updated 9 years ago