sdxt Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

anti-cheat-emulator

badeye

blackbone

Windows memory hacking library

blanket

Hiding a system thread against conventional means of detection

bx_verification

《冰心网络验证3.1》全代码解密，去除授权。

directinput

Simulate SendInput with ClassService

dllthreadinjectiondetector

etmusicplayer

MusicPlayer

fxcktp

FxckTp

guardmon

Hypervisor based tool for monitoring system register accesses.

hook-kdtrap

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

infinityhook

Hook system calls, context switches, page faults and more.

kasperskyhook

Hook system calls on Windows by using Kaspersky's hypervisor

kernel-special-apc-readprocessmemory

Example of reading process memory through kernel special APC

learning-example

For Example. See Miro's Blog

manual_exception_handling

Handling C++ & __try exceptions without the need of built-in handlers.

memorymon

Detecting execution of kernel memory where is not backed by any image file

mminject

Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL

mouhidinputhook

MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.

noscreen

Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection

ntrays

Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

query-pdb

query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.

shadow-nt-api

native api anti hook

sharedmemory-by-frankoo

Kernel driver that uses Shared memory to communicate with UserMode

stringobfuscator

Simple header-only compile-time library for string obfuscation (C++14)

syscallhook

System call hook for Windows 10 20H1

universal-imgui-d3d11-hook

Universal Directx11 D3D11 Hook Project for all directx11 - 10 applications with ImGui and InputHook included, fullscreen supported.

vehmonitormemory

Use veh to monitor memory