KimChangYoun

rootbeerFresh

Magisk Unix Domain Socket(UDS) and File Stat Check Added, Simple to use root checking Android library and sample app

EternalAntirootkit

Anti-rootkit works as a Windows system driver.

ac

kernel mode anti cheat

AntiCheat-Testing-Framework

Framework to test any Anti-Cheat

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

dynamorio

Dynamic Instrumentation Tool Platform

GameAntiCheat

反外挂

android-unpacker

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

Antimalware-Research

Research on Anti-malware and other related security solutions

awesome-windows-kernel-security-development

windows kernel security development

Blackbone

Windows memory hacking library

distorm

Powerful Disassembler Library For x86/AMD64

drmemory

Memory Debugger for Windows, Linux, Mac, and Android

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

HyperBone

Minimalistic VT-x hypervisor with hooks

HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

kerneldetective

Kernel Detective

nmi

nmi stackwalking + module verification

NoMercy

Open source anti cheat

OpenArk

OpenArk is a open source anti-rookit(ARK) tool on Windows.

phnt

Native API header files for the Process Hacker project.

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

ScyllaHide

Advanced usermode anti-anti-debugger

SimpleVisor

SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.

SSDT_Detection

Kerenel-level anti-rootkit

TitanEngine

udis86

Disassembler Library for x86 and x86-64

Windows-Rootkits

x64dbg

An open-source x64/x32 debugger for windows.

zydis

Fast and lightweight x86/x86-64 disassembler library