llkbkh Goto Github PK

hwid-kernel-spoofer

HWID Kernel Spoofer for the most recent EAC and BE games

hyperdbg

The HyperDbg project is a hypervisor-based, kernel-mode, and user-mode debugger that aims to bring innovative ideas to the debuggers world!

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

hyperhide-1

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

illicit-memory-allocation

This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page table.

iot-malware

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code

kace

Emulate Drivers in RING3 with self context mapping or unicorn

ksocket

KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK

lifters

vtil or llvm lifters

logstash-output-clickhouse

Implementation of ClickHouse output for logstash

memorymodulepp

modify from memorymodule. support exception

mouclassinputinjection

MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.

mouhidinputhook

MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.

mutante

Kernel-mode Windows HWID spoofer

nexongamesecurity

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

novmpy

ntoskrnl

The Windows Research Kernel (WRK)

ntoskrnl_viewer

可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。

osiris

Free open-source game cheat for Counter-Strike: Global Offensive, written in modern C++. GUI powered by Dear ImGui.

oxorany

obfuscated any constant encryption in compile time on any platform

pdb-cloud

perses

X86 Mutation Engine with Portable Executable compatibility.

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

ptview

Browse Page Tables on Windows

qemu-anti-detection

A patch to hide qemu itself, bypass mhyprot,EAC,nProtect / VMProtect,VProtect, Themida, Enigma Protector,Safegine Shielden

qiling

Qiling Advanced Binary Emulation Framework

query-pdb

query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.

retdec

RetDec is a retargetable machine-code decompiler based on LLVM.