binarysafe Goto Github PK

jitm

JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.

kernel_gdi_renderer

kernelbhop

Cheat that uses a driver instead WinAPI for Reading / Writing memory.

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

mask

rename Xposed v89 to Mask

masterhide

MasterHide x64 Rootkit

masterlol

League of Legends Private C++ Script

metasploit-execute-assembly

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

miasm

Reverse engineering framework in Python

mrk-android

Multi-Utility dynamic library for Android

mutante

Kernel-mode Windows HWID spoofer

mylittlebear

myLittleBear

ntoskrnl

Windows Kernel nt files - To research windows kernel

petools

PE Tools - Portable executable (PE) manipulation toolkit

pinyinime

Google拼音输入法，可编译打包。

profiler

pubg-map-hack

Map hack solution for PUBG

pubg_internal

Internal cheat for PUBG. Very old but has come useful code in there still.

re_sysdiag

逆向火绒安全软件驱动——sysdiag

reloaded.core.bootstrap

Tiny Visual C++ library/example that allows you to inject CoreCLR (the .NET Core Runtime) into the current unmanaged process and execute a .NET library.

rw_socket_driver

Driver that uses network sockets to communicate with client and read/ write protected process memory.

shellcodeframework

绕3环的shellcode免杀框架

sheller

一键加壳/脱壳，混淆，花指令，反调试等

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

skidzex

A modded version of ConfuserEx | SkiDzEx

software-protection-and-analysis-techniques---principles-and-practices

软件保护及分析技术——原理与实践

stringsx64dbg

Strings plugin for x64dbg

superdllhijack

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

unicorn-net

WIP .NET binding/wrapper for the Unicorn engine written in C#

universal-dear-imgui-hook

An universal Dear ImGui Hook for Directx12 D3D12 (D3D11, D3D10 and maybe Vulkan will be added later)