An open-source, free protector for .NET applications

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

open-source x86/x64 usermode anti-anti-debug plugin

Wow64 Heaven's Gate Hook

Detect virtual machine environments using C#

[WIP] A forked version of LLVM-18 that prioritizes MSVC compatibility. This version is tailored for Windows users.

CS 1.6 Fastcup Full Kernel Driver Cheat

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

kernel mode anti cheat

Not mine, just saved

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

Experiment to use sections as User/Kernelmode comm vector

Windows driver template, using C++20 & cmake & GithubActions

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

PE bin2bin obfuscator

too busy for that all, furikuri is framework for code protection

Spotify's drm(playplay) cryptography functions. cxx/js/python supported

x64 Dynamic Reverse Engineering Toolkit

D2D EFT

some gadgets about windows process and ready to use :)

fecurity executor from factory

从MmPfnData中枚举进程和页目录基址

Custom KiSystemStartup, can be used to modificate kernel before boot.

kinda custom data ptr swap communication method

A mapper that maps shellcode into loaded large page drivers