Hiding unsigned DLL inside a signed DLL

kernel mode anti cheat

wdf mouse accel driver

Access without a real handle

Obfuscation library based on C++11/14 and metaprogramming

Memory hacking library powered by AMD SVM

x64 binary obfuscator

Protects deletion of files with a specified extension using a kernel-mode driver.

Framework to test any Anti-Cheat

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With …

x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

x64 Windows privilege elevation using anycall

x64 Windows kernel driver mapper, inject unsigned driver using anycall

x64 Windows implementation of virtual-address to physical-address translation

Windows Kernel Driver dlls injector using APC

Mizu - Internal Apex Legends Base

Apex Legends external cheat for UnKnoWnCheaTs in Rust

Apex Legends QEMU/KVM hack

File Infecting Binder

An Ark tool project，run on Win7 x86/x64

Code samples for the Understanding Windows x64 Assembly tutorial.

open-source game hack/base/template for Counter-Strike 2

Reverse engineered source code of the autochk rootkit

Hooking SSDT with Avast Internet Security Hypervisor

Organized list of my malware development resources

Leaked source code of the babuk ransomware by VXUG

Decrypts multiple BattlEye packets from BEService<>BEDaisy (including those with multiple encryption layers) out to a console.

A couple of streamed BattlEye shellcode/module psuedo snippets from Rainbow Six: Siege.