letenz Goto Github PK

ac

kernel mode anti cheat

aethervisor

Memory hacking library powered by AMD SVM

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

android-readthefuckingsourcecode

😜 记录日常的开发技巧，开发中遇到的技术重点、难点，各个知识点的总结，优质面试题等等。持续更新...

animegame-cheat-3.3

TECH OTAKUS SAVE THE WORLD

argparse

Argument Parser for Modern C++

articles

awesome-vmp

虚拟化保护（VMP壳）分析相关资料

bacwindows

An anti-cheat project that includes kernel mode.

bestten

111

binlex

A Binary Genetic Traits Lexer Framework

blacklotus

BlackLotus UEFI Windows Bootkit

blacksun-framework

blacksun framework for QEMU/KVM game cheat development

bypass_vmp_vm_detect

bypass vmp virtual machine detect

cidlldemo

Use ci.dll API for validating Authenticode signature of files

clamav

ClamAV - Documentation is here: https://docs.clamav.net

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

concurrentqueue

A fast multi-producer, multi-consumer lock-free concurrent queue for C++11

cscd70

CSCD70 Compiler Optimization

daat

a simple intel vt code both support x86 & x64. PatchGuard monitor.

dbh-file-parser

A tool to extract textual content from Detroit: Become Human game files.

divert

WinDivert: Windows Packet Divert

dllhijackingscanner

This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.

dmaprotect

Shows an example of how to implement VT-d/AMD-Vi on Windows

dokany

User mode file system library for windows with FUSE Wrapper

driverbuddyreloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

dxgkrnl_hook

C++ graphics kernel subsystem hook

easy-hwid-spoofer

基于内核模式的硬件信息欺骗工具

edrsandblast

efi-monitor

just proof of concept. hooking MmCopyMemory PG safe.