Alternatives and similar repositories for xspy:

Users that are interested in xspy are comparing it to the libraries listed below

• zzhouhe / VM_Analyze
  ☆82Updated 4 years ago
• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆71Updated last year
• wanttobeno / IDASignMaker
  IDA高级技巧 API符号自动识别库 IDASignMaker
  ☆128Updated 4 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆88Updated 3 years ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆68Updated 3 years ago
• hackflame / ida_python_extractCode
  ida提取特征码脚本
  ☆55Updated 5 years ago
• FaEryICE / MemScanner
  Analyze Windows x64 Kernel Memory Layout
  ☆122Updated 4 years ago
• Oxygen1a1 / kcrypt
  an encryption library designed for Windows kernel and driver programming
  ☆118Updated last year
• ilovecsad / Ark
  ☆80Updated 3 years ago
• bluesadi / Heavens-Gate
  Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
  ☆69Updated 3 years ago
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆65Updated 8 years ago
• wanttobeno / Win64DriverStudy_Src
  WIN64驱动编程基础教程-源码 作者：胡文亮
  ☆88Updated 6 years ago
• stonedreamforest / Navy_public
  轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台
  ☆99Updated 4 years ago
• zzhouhe / PG1903
  ☆110Updated 5 years ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆83Updated 10 months ago
• YanStar / FixVmpDump
  use python script to fix vmp dump api in ida
  ☆118Updated 4 years ago
• HARM4Y / Karlann
  It's a kernel-based keylogger for Windows x86/x64.
  ☆138Updated 2 years ago
• Chordp / PatternGen
  ☆96Updated 2 years ago
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆39Updated 2 years ago
• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆60Updated 2 weeks ago
• DragonQuestHero / WindowsSyscallsEx
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆93Updated last year
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆107Updated 2 years ago
• notify-bibi / ScyllaHide-IDA7.5
  ScyllaHide for IDA7.5; ScyllaHide IDA7.5; It is a really niccccccce anti-anti-debug tool
  ☆201Updated 4 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆110Updated 2 years ago
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆102Updated 8 months ago
• dybb8999 / Windows-kernel-security-and-driver-development-CD
  Windows内核安全与驱动开发书附赠的光盘源码
  ☆90Updated 6 years ago
• lainswork / shellcode-factory
  shellcode 生成框架
  ☆259Updated 2 years ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆72Updated last month
• lracker / MyArk
  模仿PCHUNTER的ARK工具
  ☆37Updated 5 years ago