Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Level 1 - Hardware Antidetect source code. Spoof hardware ID

Windows Ark 工具的工程和一些demo

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

Code for Battleyes shellcode

Book PDF

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

Enumerating and removing kernel callbacks using signed vulnerable drivers

C++那些事

Easy to use overlay using Direct2d

D3D11 Aimbot for Warframe

d3d11 hook x86/x64

Detect removed thread from PspCidTable.

Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.

Hook NtDeviceIoControlFile with PatchGuard

dip hook with overlay, can bypass old anticheats

Simulate SendInput with ClassService

Game reverse drawing algorithm

InjectDll

Top level overlay drawing for game cheating using dwm.exe

不使用3环挂钩进行DWM桌面绘制

Windows driver including couple different techniques for file removal when regular operation isn't possible.

热门网络游戏辅助开发教程