hatheral Goto Github PK

3d-injector

aethervisor

Memory hacking library powered by AMD SVM

alcatraz

x64 binary obfuscator

amogusplugin

VMProtect improved idea

copy_call

corsairlleak

Corsair LL Access driver abuse

darkmmap

Manual PE image mapper

fenc

A poc that abuses Enclave

ghostmapper

import-hoodini

Simple runtime import protection & hook mitigation

kernelmode-manual-mapping-through-iat

Manual mapping without creating any threads, with rw only access

kli-ex

Expanding Kernel Lazy Importer

lilypublic

meme-rw

memoryvirtualization

ndis_filter_firerwall

nmistackwalk

no_access_protection

noscreen

Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent

not-byfron

A reimplementation of byfrons NO_ACCESS memory protection feature

nullmap

Using CVE-2023-21768 to manual map kernel mode driver

pink-eye

readphys

r/w virtual memory without attach

reversekit

x64 Dynamic Reverse Engineering Toolkit

self-remapping-code

This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.

sinmapper

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

skiphook