Carl

dxgkrnl_hook. C++ graphics kernel subsystem hook

nt-mapper. C++17 PE manualmapper

loadlibrayy. x64 manualmapper with kernel elevation and thread hijacking capabilities

owned_alignment. Hooking kernel functions by abusing alignment

latebros. x64 usermode rootkit

MapDetection. Detect manualmapped images remotely, without hassle

x64-vm. x86-64 virtual machine and disassembler

ElevateMe. Handle access elevation via direct kernel object manipulation

ayyxam. Bypass for The Digital Exam Monitor developed by the Danish Ministry of Education (Den Digitale Prøvevagt) and ExamCookie

battleye_emulation. BattlEye BEClient<->BEService usermode emulator

eye_mapper. BattlEye x64 usermode injector

token_manipulation. Bypass User Account Control by manipulating tokens

eac_reversal. Linux EAC reversal (.so)

captain_black. Black Desert Online cheayyt

nt. NT reversal

ControlCSGO. Old (read: bad) external csgo cheat, includes knife changer and convar bypass

loggr. C++ console logging library (fmt wrapper)

tasklist-brutus. Undocumented way of fetching list of processes by bruteforcing NtQuerySystemInformation

tetris. Tetris (ASCII) in c++17

math. Math shit - Variadic vector and polygon math, statistical analysis etc

MatematikFessorBot. A bot that automated my math homework in middle school

nt_wrapper. A wrapper library around native windows sytem APIs

wow64pp. A modern c++ implementation of windows heavens gate

lazy_importer. library for importing functions from dlls in a hidden, reverse engineer unfriendly way

KernelGDIDraw. The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.

EfiCMake. CMake template for a basic EFI application/bootkit.

rootkit.com. Mirror of users section of rootkit.com

nc3ctf2019. NC3 CTF 2019

xorstr. heavily vectorized c++17 compile time string encryption.

src. Analysis of numerical algorithms

linux-pe. COFF and Portable Executable format described using standard C++ with no dependencies.

github-drama. "locked and limited conversation to collaborators"

VTIL-NativeLifters. Lifting from native architecture to VTIL. (WIP)

CutterUpdater. Very simple utility to automatically check for, download and install the latest version of Cutter.