Stephen Eckels

PolyHook_2_0. C++20, x86/x64 Hooking Libary v2.0

PolyHook. x86/x64 C++ Hooking Library

RETools. My reversing tools. Some custom, some not.

UniHook. Intercept arbitrary functions at run-time, without knowing their typedefs

YTCH. Youtube If it Had Channels

CompileTime-String-Encryption. C++ 17 compile time string encryption supporting vs2010-2019

BF4-AtomBot. Latest version of my personal BF4 Hack

DX11Overlay. Object Oriented Overlay For Game Hacking

Snake. C# Snake Game

OpenSSL_Wrapper. RSA/AES OpenSSL Wrapper

HashBrowns. C++ BCrypt Library, using OpenWall's library

Star-Wars-BattleFront-Hack. C

capstone. Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

VS2013-Compile-Time-XOR. Compile time string XOR for visual studio 2010-2013

PVZ-Hack. Personal MultiHack for Plants Vs. Zombies: Garden Warfare

MultiSnap. An alternative "Aero-Snap" experience for multi-monitor setups

GeLuBigNum. A (tiny) bignumber library that implements multiplication with the Genaille Lucas rulers.

DaMenu. C++ 11 Event Drive, Object Oriented GUI.

jitm. JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.

VideoCall. JS WebRTC video chat client + relay server

GetAllControls. Enumerates controls and windows of injected process

Fractal-Generator. C# Fractal Generator

COM-Code-Helper. Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code

cpu-internals. Intel / AMD CPU Internals

ideas. Ideas for protecting C/C++

al-khaser. Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Random-Generator. C++ Style PRNG

SingleFileExtractor. A tool to extract the contents (assemblies, configuration, ...) of a single file application to a directory.

pics. Posters, drawings...

FIDL. A sane API for IDA Pro's decompiler. Useful for malware RE and vulnerability research

Reclass-2015. ReClass 2015

polyscope. A prototyping-oriented UI for geometric algorithms

Auto-Voter. VB.Net Automated Poll Voter

flare-fakenet-ng. FakeNet-NG - Next Generation Dynamic Network Analysis Tool

FlareOn2020_Wednesday-3. In memory bot for flareon 2020 challenge #3

x64dbg. An open-source x64/x32 debugger for windows.

DES. Des Utility, 8 character ascii key, N byte data processed in 64bit blocks

pe-parse. Principled, lightweight C/C++ PE parser

VM-Packages. PowerShell

visulator. A machine emulator that visualizes how each instruction is processed

lancelot. intel x86(-64) code analysis library that reconstructs control flow

imgui_club. Nice things to use along dear imgui

dnSpy. .NET debugger and assembly editor

retext-equality. plugin to check for possible insensitive, inconsiderate language

sickbeard_mp4_automator. Automatically convert video files to a standardized format with metadata tagging to create a beautiful and uniform media library

pygore. pyGoRE - Python library for analyzing Go binaries

capa-rules. Standard collection of rules for capa: the tool for enumerating the capabilities of programs

docker-guacamole. A self-contained guacamole docker container for x64 and ARM. Remotely connect over SSH, RDP or VNC using HTML5.

NgrokRouter. Displays and serves open ngrok tunnels via json

shellcode. C