uitra Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

anti-hook-

blackbone

Windows memory hacking library

callobfuscator

Obfuscate specific windows apis with different apis

cpp-httplib

C++11 header-only HTTP/HTTPS sever library

driverbuddy

DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.

driverless_driver-hacking

A driverless driver that is supposed to be manually mapped, usually by using TDL exploit. The driver shows how to read/write to any process memory and some other useful functions.

fasttrigo

Fast yet accurate trigonometric functions

finalesfunkeln

frostbitegen

Generates an complete SDK for any game running the Frostbite 3 engine. Tested with Battlefield 4 and Star Wars Battlefront

handlemaster

Changes handle's access rights using DKOM with a vulnerable driver

hidden

Windows driver and usermode interface which can hide objects of file-system and registry, protect processes and etc

ida-string-reference-locator

Finds all first occurring string references near another reference

injectora

x86/x64 manual mapping injector using the JUCE library

mir-engine

MIR-Engine

overwatch-iat-deobfuscation

this plugin adds the 'oiu' command to x64dbg. the command locates the memory region containing Overwatch's import address table, deobfuscates all import entries, and labels each import's thunk address.

polyhook

x86/x64 C++ Hooking Library

qt

Our build of qt, which is based on Valve's build of qt

reclass.net

A ReClass port to the .NET platform.

reclass.net-handleabuser

A ReClass.NET plugin which uses the process handles of an other process to access the data of the target.

reclass.net-memorypipeplugin

A ReClass.NET plugin which allows direct memory access via dll injection.

rem

Protected process memory access.

rift-explorer

🛠 Explore the API of the League of Legends client

self-remapping-code

This program remaps its image to prevent its .text and .rdata PE sections from being made writable via NtProtectVirtualMemory.

shark

Turn off PatchGuard in real time for win7 (7600) ~ win10 (17763).

source2gen

Source 2 SDK Generator

speedfan-exploit

Abusing SpeedFan driver ability of physical memory manipulation

tf2base-2012

threadject

Manual DLL Injector using Thread Hijacking.

universalinject

Windows IME-based DLL injection. Able to inject a DLL without OpenProcess or a process handle being necessary..