Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
GitHub projects from awesome lists
Search names, descriptions, topics, tags, and stacks, then tune results by ecosystem, freshness, health, and cross-list signal.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Visualize the data of bb, the Windows SDK/PHNT parser and analyzer.
Recover and statically analyze manually-mapped DLLs whose PE headers are wiped at runtime. Pure-stdlib Python, no driver, no debugger required. Includes a Claude Code skill.
基于TPM验证本机有没有开启CPU虚拟化,IOMMU,安全启动,VBS/HVCI,驱动强制签名,易受攻击驱动阻止列表
fix wow obfucated IAT
Single header code that sets any section's page to No Access
A tiny tool to strip the debug info from Windows binary files.
No description.
Bypass memory checks ( especially count )
remem is a C++ library designed for memory manipulation, function calling, and pattern scanning. It supports various calling conventions, memory reading/writing with offset handling.
Old example driver for application protection
Mounting the system partition on Windows
Dumps files & data required to use the Xenon Xbox 360 Low Level Emulator
PECleaner strips all RICH header information from x86/x64 binaries
DWARFHelper is a plugin for x64dbg, designed to load DWARF debug symbols from executable files (e.g., .exe, .dll) and apply them as labels and function information within the debugger
The stress testing of your PG bypass [old school project]
No description.
EQU8 User-Mode Bypass and Injector
Driver + DLL which allows us to open handles to callback-protected processes
Linux kernel source for Redmi Note 10 Pro / Max (sweet/sweetin) device || focused on stability and performance.
Reverse Engineered GTA III and GTA VC
No description.
project branthium - spoofer fortnite
No description.
An interesting way to detect return address spoofing on x64-windows.
反miHoYo Jcc程序控制流混淆 X64DBG 插件
swap the function pointer in NtCompareSigningLevels for undetected driver communication.
Not mine. Only for saving.
Correlating kernel notifications with the lack of ETW events to detect ETW Patching
works with most invokers, spoofs the return address to bypass the anti cheat and allow detected natives to be called.
Emulator detection is a technique used to determine if a software application or operating system is running on an emulator rather than on original hardware