
TinyLoad
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Windows memory hacking library

Run Radmin VPN on Linux via Wine — custom driver, TAP bridge, zero packet loss

Binary Ninja plugin for reverse engineering PTX -- the virtual instruction set architecture of CUDA-based GPUs.

A practical attack framework for precise enclave execution control

ARM64 ELF Virtual Machine Protection System

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

Android virtual machine and deobfuscator

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware

Native code virtualizer for x64 binaries

Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI

A tool to extract RTTI information from Delphi executables, written in pure Python

An x86-64 code virtualizer for VM based obfuscation

IDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…

Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extract a flag…