Axactt's repositories
Stealthy-Kernelmode-Injector
Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executable pages. (VAD hide / NX bit swapping)
Anticheat-mhyprot2-GImpact
Reverse engineering Genshin Impact anticheat to study how anticheats work on the Windows operating system.
Apex-Legends-SDK
Open Source Cheat for Apex Legends, designed for ease of use. Made to understand reversing of Apex Legends and respawn's modified source engine as well as their Easy Anti Cheat Implementation.
Awesome-Advanced-Windows-Exploitation-References
List of Awesome Advanced Windows Exploitation References
buddyCleaner-ccCleaner-Directory
Clean up your computer! CCleaner / BleachBit alternative. Work in progress.
ceserver-pcileech
CheatEngine PCILeech Adapter
csgo-cheat-base
simple csgo internal base.
data-ptr-comm
Communicate between user-mode and kernel-mode through a swapped QWORD pointer argument.
DdiMon
Monitoring and controlling kernel API calls with stealth hook using EPT
DetectWindowsCopyOnWriteForAPI
Enumerate various traits from Windows processes as an aid to threat hunting
DICHook-NtDeviceIoControlFile
Hook NtDeviceIoControlFile with PatchGuard
Diglett-Hookdriver-HideSysthread
Does his best to hide in kernel-land
eac-mapper-unscanned-space
undetected eac mapper
external-warzone-cheat-NMan1-External
External warzone cheat with manual mapped driver (function hook), overlay (nvidia hijack), simple esp, no recoil
game-reversing
Beginner learning materials on how to reverse engineer video games
HookLib
The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
IW
IW Engine build for modern operating systems.
Kernel-Thread-Driver
This is a simple project of a driver + usermode.
kernel_window_hide-validateHwnd
内核级别隐藏指定窗口
mcsema
Framework for lifting x86, amd64, aarch64, sparc32, and sparc64 program binaries to LLVM bitcode
OpenIW
IW Engine for Call of Duty® games.
pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
pinjectra
Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
process-hollowing
process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread
reverse-engineering
List of awesome reverse engineering resources
RWX-Dlls-for-manual-mapping
Here are a few rwx dlls your can use to manual map your cheat dll, they will prob get checked soon...
Win10SysProgBookSamples
Windows 10 System Programming book samples
windows-ps-callbacks-experiments
Files for http://blog.deniable.org/posts/windows-callbacks/