hzqst

VmwareHardenedLoader. Vmware Hardened VM detection mitigation loader (anti anti-vm)

unicorn_pe. Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

Syscall-Monitor. Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+

FuckCertVerifyTimeValidity. This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually

MetaHookSv. MetaHook (https://github.com/nagist/metahook) porting for SvEngine (GoldSrc engine modified by Sven-Coop), as a client-side modding framework.

CGAssistant. CGAssistant is a helper for you to play CrossGate with highly automated game experience.

CGAssistantJS. CGAssistant is a helper for you to play CrossGate (中译：魔力宝贝) with highly automated game experience.

MetaRenderer. C++

metamod-fallguys. It's a metamod plugin for Fall Guys maps in Sven Co-op

hidden. Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

FortniteLama. This project exploits the lama bug from Fortnite Save the World that every times you quit SSD with +ALT+F4 you get 4 mini lama(s)

CaptionMod. This is a caption/subtitle plugin designed for displaying captions/subtitles in GoldSRC engine & VGUI2 based singleplayer games.

sven-fallguys. Fall Guys in Sven Co-op

systeminformer. A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

CS2_External. educational CS2 external cheat.

anti-cheat-emulator. C++

EAC-CR3-BYPASS. A simple UM + KM example of how to bypass EAC CR3

oxgenPdb. a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.

lazy_importer. library for importing functions from dlls in a hidden, reverse engineer unfriendly way

cs2-signature-list. List of strings to find function signatures on cs2

DmaProtect. Shows an example of how to implement VT-d/IOMMU

ForniteCNCrashFix. the driver fix a bug that Fornite Chinese server version always crash under Windows 10.

OAC. Open Anti Cheat

LOLDrivers. Living Off The Land Drivers

MetaAudio. GoldSrc engine plugin for 3D sound

FuckACEScreenshot. C++

rest_rpc. modern C++(C++11), simple, easy to use rpc framework

Simrep. windows kernel File redirection

InfinityHook. Hook system calls, context switches, page faults and more.

dwm-screen-shot. 将shellcode注入dwm.exe以进行屏幕截取

enum_real_dirbase. 从MmPfnData中枚举进程和页目录基址

capstone. Capstone disassembly/disassembler framework: Core (Arm, Arm64, EVM, M68K, M680X, Mips, PPC, Sparc, SystemZ, TMS320C64x, X86, X86_64, XCore) + bindings (Python, Java, Ocaml, PowerShell, Visual Basic)

FreeImage_clone. Clone of https://sourceforge.net/projects/freeimage/

DeviceMon. VT-based PCI device monitor (SPI)

Motrix. A full-featured download manager.

qemu-patched. QEMU patched to avoid detection from various anticheats such as Battleye/EAC

pesign. Linux tools for signed PE-COFF binaries

KernelDwm. Kernel dwm render

Chicken-Fortress-3. Chicken Fortress 3 is a Half-Life mod that ported source game Team Fortress 2 to GoldSRC engine.

procmap. C++ wrapper around /proc/self/maps

NVDrv. Abusing nvidia driver (nvaudio.sys) for physical/virtual memory and control register manipulation.

llvm-msvc. Forked LLVM focused on MSVC Compatibility. This version is designed for windows users

hv. Lightweight Intel VT-x Hypervisor.

WoW64Injection-fork. Proof of concept for injecting a 64-bit DLL into a 32-bit application

DetectNtoskrnlIntegrity. Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe

VC-LTL5-fork. Shared to msvcrt.dll or ucrtbase.dll and optimize the C/C++ application file size.

Hunt-Weird-Syscalls. ETW based POC to identify direct and indirect syscalls

GAMBA. Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

cs2kz-metamod. Metamod Plugin for CS2 KZ (WIP).

PhysX. NVIDIA PhysX SDK

window_hijack. Rendering on external windows via hijacking thread contexts

Detours_fork. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

crtsys. C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

ida-pro-mcp. MCP Server for IDA Pro

CS2-OFFSETS. Always updated offsets.

plouton. C