DragonQuestHero

followers

following

stars

360

https://www.win32k.cn

Organizations

ClassicalMusicClub

不想加班劉's repositories

Kernel-Anit-Anit-Debug-Plugins

Kernel Anit Anit Debug Plugins 内核反反调试插件

Language:C++MIT438 16 2

Kernel_Inject

Kernel Inject DLL

Language:C++323 6 3

PUBG-PAK-Hacker

use windows kernel deriver hidden file and itself to Bypass BE

Language:C++237 22 3

Medusa

Radical Windows ARK

Language:C191 5 2

WindowsSyscallsEx

Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查

Language:C++90 40

DwmDraw

不使用3环挂钩进行DWM桌面绘制

Language:C++75 50

Kernel-Force-Delete

force delete runing .exe application file.or delete any locked file

Language:C++67 30

WindowsKernelPrivateSymbolsDump

Win7内核私有符号结构转储

Language:C64 70

PUBG-ESP

玩家不知道战场-超能力感知

Language:C++54 6 5

DriverLoaderPro

windows kernel deriver loader(pro)

Language:C++MIT49 4 1

CSKZ-AutoBhopJump

请叫我跳跳虎

Language:C++26 2 3

CSOL-AutoBhop

跳跳虎2

Language:C++15 2 1

Book

Win_Rootkit

A kernel-mode rootkit with remote control

Language:C++5 10

HyperHide

Hypervisor based anti anti debug plugin for x64dbg

Language:C++GPL-3.04 10

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Language:C++GPL-2.03 10

ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Language:C++GPL-3.03 10

spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

Language:C++GPL-3.03 10

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

Language:CMIT3 10

KPDB

Windows PDB parser for kernel-mode environment.

Language:C2 10

ThreadStackSpoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

Language:C++MIT2 10

AutoHotkey_L

AutoHotkey - macro-creation and automation-oriented scripting utility for Windows.

Language:C++GPL-2.01 10

BetterPenetration

Language:C#GPL-3.01 10

NtTrace

An strace-like program for the Windows 'native' API

Language:C++1 10

SkyrimTools

SKSE工具插件(暂定)

1 20

Winshark

A wireshark plugin to instrument ETW

Language:LuaApache-2.01 10

CSO2-Server

Counter-Strike Online 2 Server （即CSOL2服务器）支持2017年国服端和2018年韩服端

Language:GoMIT010

NexonGameSecurity

Language:C000

SteamTools

🛠「Steam++」是一个包含多种Steam工具功能的工具箱。

Language:C#GPL-3.0010

VivienneVMM

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

Language:C++MIT010