mminwan Goto Github PK

libpe

Library for parsing internal structures of PE32/PE32+ binary files.

lief

LIEF - Library to Instrument Executable Formats

memprocfs

The Memory Process File System

microsoft-activation-scripts

A Windows and Office activator using HWID / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

mmcopymemory

mminject

Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL

monaspace

An innovative superfamily of fonts for code

more

TLB splitting VMM

mouhidinputhook

MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.

namedpipecapture

A Windows tool that can be used to stream data from named pipe between two other process to Wireshark

newbluepill

new blue pill

noeye

An usermode BE Rootkit Bypass

noirvisor

Hardware-Accelerated Hypervisor solution with support to complex functions and purposes.

nomercy

Open source anti cheat

none

UNONE and KNONE is a couple of open source base library that makes it easy to develop software on Windows.

ntcall64

Windows NT x64 syscall fuzzer

ntoskrnl

The Windows Research Kernel (WRK)

openedr

Open EDR public repository

pedigest

Helper functions for calculating the authenticode digest for a portable executable file

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

pesignanalyzer

This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signed (nested) infomation and certificate-chain.

phnt

Native API header files for the Process Hacker project.

process-inject

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware—mirror of https://github.com/processhacker2/processhacker.git

protolesshooks

API monitoring via return-hijacking thunks; works without information about target function prototypes.

ptbypass-poc

Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.

pteditor

A small library to modify all page-table levels of all processes from user space for x86_64 and ARMv8.

ptview

Browse Page Tables on Windows

qo0-base

internal cs:go cheat base/template

reactos

A free Windows-compatible Operating System