Various novel EPT/NPT hook detection mechanisms.

a little exploiting toolkit for discord which ive build because i was bored

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workl…

Virtual Machine Manager for Go (govmm) is a suite of packages that provide Go APIs for creating and managing virtual machines.

Documentation of NVIDIA chip/hardware interfaces

VMProtect 2.x-3.x x64 Import Deobfuscator

Open-source user-mode Anti-Anti-Debug plugin for x64dbg & cheatengine.

This is the leaked source code of Windows Server 2003

Windows Research Kernel Source Code

A WASM virtual machine written in Go with 0 dependencies

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

llvm powered deobfuscation of a vm-based protection

semi-auto static deobfuscator for functions which is obfuscated by lazy importer.

System Call Hook for ARM64

A collection of Proof-of-Concept implementations of various anti-disassembly techniques for ARM32 and ARM64 architectures.

NOCRT - simple replacement of some parts of C runtime library

Single-header C++ HTTP request class

Wow64 syscall hook

Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.

PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and prevent access from external processes.

俞甲子的MiniCRT代码，以及我将他的代码修改，移植到64位linux系统上的源码

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

Proof of concept circumventing arxan's integrity checks.

Converts ROBLOX' .rbxm maps into source/source2 vmf/vmap files

Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared library. Format inspired by @rasta-mouse's LibTP.

Advanced JavaScript virtualization engine for code protection. KrakVM combines custom bytecode compilation with deep structural obfuscation to defeat static analysis and reverse engineering.

Collect various versions of ntoskrnl files

☄️ Reverse engineering and analysis of Call of Duty: Black Ops III