lihuizhi

support.996.ICU

Microsoft and GitHub Workers Support 996.ICU

multiOTPCredentialProvider

multiOTP Credential Provider is a V2 Credential Provider for Windows 7/8/8.1/10/2012(R2)/2016 with options like RDP only and UPN name support

dxlogin

定制Windows操作系统登录界面.

Blackbone

Windows memory hacking library

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

FuckCertVerifyTimeValidity

This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

unicorn_pe

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

OpenXLSX

A C++ library for reading, writing, creating and modifying Microsoft Excel® (.xlsx) files.

SnifferUI

基于MFC和WinPcap库开发的网络抓包和协议分析软件

WProtect

winio

fork by winio. http://www.internals.com/

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

FlagEditor

RunPE

Code that allows running another windows PE in the same address space as the host process.

KernelReadWriteMemory

Simple code to manipulate the memory of a usermode process from kernel.

KernelBhop

Cheat that uses a driver instead WinAPI for Reading / Writing memory.

udev-examples

libudev API examples

MS-DOS

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

SSDT-Hook

The windows kernel ssdt hook demo

Gozi-MBR-rootkit

Gozi-MBR-rootkit Bootkit Modified

Reflective-Driver-Loader

rosenbridge

Hardware backdoors in some x86 CPUs

Blackbone

Windows memory hacking library

DisPg

hvpp

hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

Kernel-Bridge

Windows kernel hacking framework, driver template and API written on C++

SfilterdoubleFcb

Layered filter