archar123 Goto Github PK

llvmpass_win

loadlibrary

Porting Windows Dynamic Link Libraries to Linux

lockfree

A collection of lock-free data structures written in standard C++11

lpmapper

A mapper that maps shellcode into loaded large page drivers

luainject-minty-sr

One more dynamically-loading library tool but now for another game

manual-smap

DLL scatter manual mapper

melon-gensin

MelonLoader but for an 4nime g4me

mem-pointerguard

PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and prevent access from external processes.

memorydll-dllredirect

Dll memory redirection through Hook NtMapViewOfSection

memprocfs

The Memory Process File System

millin-injector

Millin Injector offers many features which can aid in creating usermode cheats. Its meant to be light weight and allow users to view things such as loaded modules, imports and other smaller things

mitigationflagsclitool

Command like tool to print mitigation flags for running processes in a memory dump

mminject

Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL

modded-voyager

bypass to the p2c(s) that I have run over the past few months.

modfinder

Manual-mapped region detector.

mouclassinputinjection

MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.

mouhidinputhook

MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.

movfuscator

The single instruction C compiler

noirvisor

The Grimoire Hypervisor solution for x86 Processors.

nopatchguardcallback

x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code

norsefire

get_module, read/write mem, mouse emulation

ntdeviceiocontrolfile-hook

Hook NtDeviceIoControlFile with PatchGuard

ntoskrnl_emu

Library of missed NTOSKRNL import functions

obfuscatep

编译时混淆字符串，以确保生成的二进制PE不会暴漏明文字符串。（C++ 14 及以上）

openedr

Open EDR public repository

pagetablehook

pagetableinjection

Code Injection, Inject malicious payload via pagetables pml4.

passdriver

测试案例，仅供研究使用

patchestester

用来检测 windows 系统尚未安装的补丁信息，并根据指定的严重等级按顺序输出到文件中,可以作为 Windows 服务器运维人员日常检查更新或者网络安全人员对 Windows 服务器安全检查的有力工具，欢迎师傅们 star 支持。

patchwerk

Binary patching framework for Linux kernels