0x00Alchemist

MilkBox

Tool to dump EFI runtime drivers.

ResilienceKit

Another UEFI runtime bootkit

Calamity

Example of using Windows Platform Binary Table (WPBT)

PicoHook

Small driver that uses alternative syscalls feature (the project is still under development).

MiniMemoryDumper

A small program written in C + WinAPI that allows you to dump processes via PID.

TheSleeper

Custom analog of Sleep function from WinAPI.

0x00Alchemist

Avast-Reverse-Engineering

Pseudocodes of various Avast antivirus files are collected here. (DLL, SYS)! Abandoned collaboration with @colby57

KernelBeep

HalMakeBeep

recycle-bin-themes

Silly icons for the Windows Recycle Bin

smm

alternative smm driver for ryzen motherboards

winrev

Some reverse-engineered things from windows internals

AFLplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

core_analyzer

A power tool to debug memory-related issues

DummyDevice

minhook

The Minimalistic x86/x64 API Hooking Library for Windows

0x00Alchemist.github.io