Alternatives and similar repositories for ScyllaHide

Users that are interested in ScyllaHide are comparing it to the libraries listed below

• mrexodia / TitanHide

  View on GitHub
  Hiding kernel-driver for x86/x64.
  ☆2,609Sep 2, 2025Updated 5 months ago
• Air14 / HyperHide

  View on GitHub
  Hypervisor based anti anti debug plugin for x64dbg
  ☆1,550Jul 8, 2024Updated last year
• ThunderCls / xAnalyzer

  View on GitHub
  xAnalyzer plugin for x64dbg
  ☆1,185Aug 13, 2025Updated 6 months ago
• can1357 / NoVmp

  View on GitHub
  A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
  ☆2,080Aug 8, 2021Updated 4 years ago
• ayoubfaouzi / al-khaser

  View on GitHub
  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
  ☆6,849Feb 1, 2026Updated 2 weeks ago
• DarthTon / Blackbone

  View on GitHub
  Windows memory hacking library
  ☆5,343Jan 26, 2024Updated 2 years ago
• 0xnobody / vmpdump

  View on GitHub
  A dynamic VMP dumper and import fixer, powered by VTIL.
  ☆1,320Nov 4, 2020Updated 5 years ago
• NtQuery / Scylla

  View on GitHub
  Imports Reconstructor
  ☆1,324Apr 5, 2023Updated 2 years ago
• Mattiwatti / EfiGuard

  View on GitHub
  Disable PatchGuard and Driver Signature Enforcement at boot time
  ☆2,242Aug 3, 2025Updated 6 months ago
• HyperDbg / HyperDbg

  View on GitHub
  State-of-the-art native debugging tools
  ☆3,627Updated this week
• everdox / InfinityHook

  View on GitHub
  Hook system calls, context switches, page faults and more.
  ☆2,631May 9, 2023Updated 2 years ago
• 9176324 / Shark

  View on GitHub
  Turn off PatchGuard in real time for win7 (7600) ~ later
  ☆1,038Apr 21, 2022Updated 3 years ago
• x64dbg / x64dbg

  View on GitHub
  An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
  ☆47,738Feb 7, 2026Updated last week
• horsicq / Detect-It-Easy

  View on GitHub
  Program for determining types of files for Windows, Linux and MacOS.
  ☆10,229Updated this week
• VenTaz / Themidie

  View on GitHub
  x64dbg plugin to bypass Themida 3.x Anti-Debugger / VM / Monitoring programs checks (x64)
  ☆552May 7, 2021Updated 4 years ago
• hfiref0x / KDU

  View on GitHub
  Kernel Driver Utility
  ☆2,402Jan 11, 2026Updated last month
• microsoft / Detours

  View on GitHub
  Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
  ☆6,141Dec 15, 2025Updated 2 months ago
• TsudaKageyu / minhook

  View on GitHub
  The Minimalistic x86/x64 API Hooking Library for Windows
  ☆5,535Nov 3, 2025Updated 3 months ago
• hasherezade / pe-sieve

  View on GitHub
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,553Oct 31, 2025Updated 3 months ago
• iPower / KasperskyHook

  View on GitHub
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,272Apr 1, 2024Updated last year
• bootleg / ret-sync

  View on GitHub
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,296Jan 29, 2026Updated 2 weeks ago
• hfiref0x / UPGDSED

  View on GitHub
  Universal PatchGuard and Driver Signature Enforcement Disable
  ☆864Mar 29, 2019Updated 6 years ago
• tandasat / DdiMon

  View on GitHub
  Monitoring and controlling kernel API calls with stealth hook using EPT
  ☆1,352Jan 22, 2022Updated 4 years ago
• stevemk14ebr / PolyHook_2_0

  View on GitHub
  C++20, x86/x64 Hooking Libary v2.0
  ☆1,819Nov 16, 2025Updated 2 months ago
• horsicq / x64dbg-Plugin-Manager

  View on GitHub
  Plugin manager for x64dbg
  ☆921Updated this week
• x64dbg / Scripts

  View on GitHub
  A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
  ☆537Jun 20, 2024Updated last year
• AxtMueller / Windows-Kernel-Explorer

  View on GitHub
  A free but powerful Windows kernel research tool.
  ☆2,648Dec 14, 2025Updated 2 months ago
• tandasat / HyperPlatform

  View on GitHub
  Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
  ☆1,726Nov 24, 2023Updated 2 years ago
• zyantific / zydis

  View on GitHub
  Fast and lightweight x86/x86-64 disassembler and code generation library
  ☆4,071Dec 8, 2025Updated 2 months ago
• TheCruZ / kdmapper

  View on GitHub
  KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory
  ☆2,738Dec 23, 2025Updated last month
• wbenny / injdrv

  View on GitHub
  proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
  ☆1,269May 1, 2024Updated last year
• JonathanSalwan / VMProtect-devirtualization

  View on GitHub
  Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.
  ☆1,384Jun 11, 2022Updated 3 years ago
• can1357 / ByePg

  View on GitHub
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆901Nov 21, 2019Updated 6 years ago
• JustasMasiulis / lazy_importer

  View on GitHub
  library for importing functions from dlls in a hidden, reverse engineer unfriendly way
  ☆1,892Aug 3, 2023Updated 2 years ago
• hasherezade / tiny_tracer

  View on GitHub
  A Pin Tool for tracing API calls etc
  ☆1,616Updated this week
• mandiant / flare-ida

  View on GitHub
  IDA Pro utilities from FLARE team
  ☆2,435Oct 29, 2024Updated last year
• DarthTon / Xenos

  View on GitHub
  Windows dll injector
  ☆2,479May 17, 2021Updated 4 years ago
• onethawt / idaplugins-list

  View on GitHub
  A list of IDA Plugins
  ☆3,805May 31, 2024Updated last year
• vtil-project / VTIL-Core

  View on GitHub
  Virtual-machine Translation Intermediate Language
  ☆1,460Nov 5, 2023Updated 2 years ago