一些使用过期或者注销证书的技术

Notepad4 (Notepad2⨯2, Notepad2++) is a light-weight Scintilla based text editor for Windows with syntax highlighting, code folding, auto-completion and API list for many programming languages and d…

An educational anti-cheat system for learning Windows kernel programming, process monitoring, and cheat detection techniques

Skills for Real Engineers. Straight from my .claude directory.

Interactive Python & C++ apps for desktop, mobile, and web - powered by Dear ImGui. Stop fighting GUI frameworks. Start building.

Colorizing text editor for Dear ImGui

A high-performance Telegram Media Downloader CLI. Auto-download Photos/Videos from Channels, backup Chat History, and monitor Groups 24/7 with auto-resume support.

A reversing plugin for cross-decompiler collaboration, built on git.

Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.

Kernel anti-cheat for protecting software.

Use XIGNCODE3 driver to cheat

x64 PE bin2bin obfuscator which doesn't add a section to the binary

A type 2 hypervisor for windows x64, supporting both Intel and AMD, with the goal of isolating user-mode applications

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

IoCreateDriver Implementation, it can be useful if you're trying to bypass anticheats

7-Zip

Lifting from native architecture to VTIL. (WIP)

VTIL2 is a ground-up reimagination of the VTIL Project, completely rewritten in modern C# with enterprise-grade architecture, performance optimizations, and developer experience enhancements. While…

Virtual-machine Translation Intermediate Language

A VMP to VTIL lifter.

Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.

Injecting code by recompiling shellcode into a ROP chain.

ACE AMD and NVIDIA screenshot method

High-performance C++ library for systems programming: memory operations, cryptographic utilities, pattern scanning, vector math, and world-to-screen transformations

A simple project that showcases how hooks can be used to bypass scans looking for private executable memory.