hymeca,github

awesome-windows-kernel-security-development

awesome-windows-security-development

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

azure-http-proxy

A fast, secure, lightweight and cross-platform HTTP proxy written in C++.

baiduyun

油猴脚本直接下载百度网盘和百度网盘分享的文件,直链下载超级加速

beaengine

BeaEngine disasm project

beholder-win32

A sample on how to inject a DLL from a kernel driver

blackbone

Windows memory hacking library

book-code

book code

bootlogger

A Windows driver to log boot the drivers and services launched during the start phase to a text file on disk

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

callbackdisabler

Disable Driver Callbacks

callbackex

Demo List cm/ps/ob/minifilter callback And Patch/Bypass it

capcomlib

A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)

cat-driver

CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.