mminwan Goto Github PK

rewolf-wow64ext

Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.

sgi-stl

剖析 STL 是一种享受的过程！

simplesvm

A minimalistic educational hypervisor for Windows on AMD processors.

simplevisor

SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.

skiphook

smap

DLL scatter manual mapper

sqlitestudio

A free, open source, multi-platform SQLite database manager.

stealthy-kernelmode-injector

Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executable pages. (VAD hide / NX bit swapping)

steamoverlay_hooker

Minimalistic hooking library using GameOverlayRenderer.

syscallhook

System call hook for Windows 10 20H1

system_trace_tool

内核驱动加载/卸载痕迹清理,努力绕过反作弊吧 PiDDBCacheTable and MmLastUnloadedDriver

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

theperfectinjector

Literally, the perfect injector.

tinyvt

轻量级VT框架和Ept无痕HOOK，测试环境：WIN10 1903，WIN7

vac

Source code of Valve Anti-Cheat obtained from disassembly of compiled modules

veil

Windows internal undocumented API.

viviennevmm

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

vm

Minimal memory library for Windows / Linux

vmwarethrough

vt-debuuger

a debugger use vt technology

wddm_hook

xfsredir file system

winaltsyscallhandler

Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999

windows

windows泄露源码

windows-dll-injector

Some DLL Injection techniques in C++ implemented for both x86 and x64 windows OS processes

windows-kernel-explorer

A free but powerful Windows kernel research tool.

windows-research-kernel-wrk-

Windows Research Kernel Source Code

xorstr

heavily vectorized c++17 compile time string encryption.

zpp_hypervisor

A very simple hypervisor for learning experience.