393686984 Follow 
Stars
PoC Implementation of a fully dynamic call stack spoofer
HumanMoveMouse is a realistic mouse‑movement simulator based on a statistical model trained on 300 samples of real human behavior. It generates natural cursor trajectories with realistic accelerati…
dumping and reconstructing Unreal Engine 4 (UE4) SDK structures from Android games at runtime using AndUE4Dumper. The goal is to analyze UE4 internal data structures in memory and generate usable S…
Professional Android SO dumper for UE4/Unity with multi-architecture support
Moufiltr is a Windows kernel filter driver which will attach to your mouse driver stack pipeline and allows you to filter or modify your mouse input.
Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446(eneio64.sys)
SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
🪝 Various EPT hook detection approaches
从0开始编写Windows AMD-V Hook 驱动的个人项目，可能会G，不定期上传参考资料和进度
从0开始编写Windows Intel VT-X Hook 驱动的个人项目
Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to p…
A slimmed-down, modified kd-mapper for game cheat development this repository removes unnecessary code, increases the reliability. It loads unsigned drivers safely. This kd-mapper instance is perfe…
Kernel-level memory cleaning signatures for Windows 11 24H2 (CacheBuckets, PiDDB, MmUnloadedDrivers)