ahora57

analysis.oreans

🔎 Analysis of Oreans: Looking inside Themida, WinLicense, and CodeVirtualizer

anti_suspend

Detect suspend you process

apiwrapper

Some api wrapper for ring0

autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.

baddbgexception

Hide thread from debugger

badhook

Sample find really syscall number use brute-force and return ntstatus

baltica-29

VMP anti-anti-vm improved

bsod

Yea, another bsod from ring3

crc

CRC secthion

crc_help

make a remote duplicate memory

dllthreadinjectiondetector

flare-floss

FireEye Labs Obfuscated String Solver - Automatically extract obfuscated strings from malware.

getkernelbaseex

Get ntoskrnl base without NTAPI

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

hypervisorcheckr0

Just check hypervisor in ring0

kdu

Kernel Driver Utility

kernel-anit-anit-debug-plugins

Kernel Anit Anit Debug Plugins 内核反反调试插件

kernel-bridge

Windows kernel hacking framework, driver template, hypervisor and API written on C++

kerneldebugcheck

khaleesi

Anti-debug library based on al-khaser with ScyllaHide/TitanHide detection.

libmhyprot

A static library, wrapper for mhyprot vulnerable driver, execute exploits and tests

majesty-technologies

Old example driver for application protection

movfuscator

The single instruction C compiler

mygetprocaddress

Wrapper MmGetSystemRoutineAddress

nvidia-overlay-renderer

my own implementation cz yes

obfuscator

ollvm 4.0 using clang 10.0.1

papa_woods

Get syscall number by map ntdll

racecondition

sample bypass anti-anti-debug tool by race condition

reactos

A free Windows-compatible Operating System