Ricardo Carvalho

MasterHide. A x64 Windows Rootkit using SSDT or Hypervisor hook

vac-bypass-kernel. Fully working kernel-mode VAC bypass

intraceptor. Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.

cpp-ransomware. C\C++ Ransomware example using RSA and AES-128 with BCrypt library on Windows

emaclab-reversal. EMACLab (Gamersclub) anticheat analysis

obfuscator. ollvm 4.0 using clang 10.0.1

free-loader. C++

loader-clientserver. A basic skeleton project for a "cheat loader", includes client and server.

ida-jm-xorstr-decrypt-plugin. Attempts to decrypt JM Xorstr in some x64 binaries

Blackbone. Windows memory hacking library

Scylla. Imports Reconstructor

cheat_render_framework. C++

lazy_importer_ex. library for importing functions from dlls in a hidden, reverse engineer unfriendly way with Windows kernel drivers support

black_ops_1. C++

KasperskyHook. Hook system calls on Windows by using Kaspersky's hypervisor

DirectInput. Simulate SendInput with ClassService

cheat-engine. Cheat Engine. A development environment focused on modding

bombcrypto-bot. This is a python bot that automatically logs in, clicks the new button, and sends heroes to work in the bombcrypto game. It is fully open source and free.

AimStar. Free and open-source external cheat for CS2, written in C++, has 100+ features

crvvdev.github.io. HTML