
AntiOreans-CodeDevirtualizer
IDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…

IDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…

WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware

Binary Ninja plugin for reverse engineering PTX -- the virtual instruction set architecture of CUDA-based GPUs.

Windows kernel-mode driver with user-mode client exposing IOCTL-based physical and virtual memory read/write, page table walking, pattern scanning,…

A Virtual environment for Pentesting IoT Devices

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware…

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI

Windows memory hacking library

Scriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…

Native code virtualizer for x64 binaries

Documentation and reverse engineering of reCAPTCHA

An x86-64 code virtualizer for VM based obfuscation

DEFCON 30 Mainframe buffer overlow workshop container

A tool to extract RTTI information from Delphi executables, written in pure Python

rt26cx21x64.sys exploit (Realtek PCIe GbE/2.5GbE/5GbE family)