aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

aksp

Another kernel self protection

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alpc

Advance LPC

alpc-tasksched-lpe

androidvirtualmachine

基于virtualBox，python，windows platform sdk等编写的安卓模拟器

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

anyrtc-rtmp-opensource

添加h5ui界面，主要用作拉流。流服务器用srs,推流软件用obs

apc-research

APC Internals Research Code

arkprotect

An Ark tool project，run on Win7 x86/x64

asm-dude

Visual Studio extension for assembly syntax highlighting and code completion in assembly files and the disassembly window

awesome-virtualization

Collection of resources about Virtualization

awesome-windows-kernel-security-development

windows kernel security development

bedaisy

reverse engineering of bedaisy.sys (battleyes kernel driver) - Aki2k/BEDaisy

bgfx

Cross-platform, graphics API agnostic, "Bring Your Own Engine/Framework" style rendering library.

boom

A Memory Read And Write the Hide Driver

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

callout-poc

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

cfb

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

cheat-engine

Cheat Engine. A development environment focused on modding

cheekyblinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

contiki-3.0

Contiki 3.0 VMWare

contiki-ng

Contiki-NG: The OS for Next Generation IoT Devices

cutter

Free and Open Source Reverse Engineering Platform powered by radare2

cyberbattlesim

An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.

daat

a simple intel vt code both support x86 & x64. PatchGuard monitor.

darkloadlibrary

LoadLibrary for offensive operations

dcrat

A simple remote tool in C#.

detect-vm-and-hypervisor

Detect VM and Hypervisor