Skip to content
View cli0xfa's full-sized avatar
13 followers · 15 following

Achievements

Achievement: Pull SharkAchievement: Starstruck

Achievements

Achievement: Pull SharkAchievement: Starstruck

Block or report cli0xfa

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
cli0xfa/README.md
Windows Kernel & Low-Level Security Research

Windows 内核与底层安全研究 — BYOVD 工具链 · 反 Rootkit · 漏洞分析与 Exploit · 逆向工程

Windows kernel & low-level security research — BYOVD tooling, anti-rootkit, vulnerability analysis, reverse engineering.

Followers Repos Bilibili Bilibili Fans

由于作者实在太懒 该页面由 AI 生成 本人没实力（）

🧰 技术栈 / Tech Stack

语言 / Languages

C++ C Rust Python TypeScript x86-64 Assembly

方向 / Focus

Windows Kernel WinDbg IDA Pro Ghidra BYOVD Reverse Engineering

📊 数据 / Stats

🔬 项目 / Projects

项目 说明 语言
simple-krw-vuln ⭐49 收集简单、稳定的 Windows 内核任意内存读写漏洞，每个 CVE 目录都是可编译、可稳定复现的 Exploit（以提权 / 终止安全软件为验证示例） C++
mmio-for-byovd ⭐9 Header-only 物理内存映射辅助库：System CR3 定位、LA57 感知的 VA→PA 页表翻译、跨页安全的内核读写；附带 WinIo64.sys 测试框架 C++
CVE-2026-43499-for-Redmi-K60 ⭐4 Android arm64 本地提权通用适配框架：按目标 boot.img 与 profile 生成 target.h，编译出对应 preload.so C

另有若干工具链项目（Rust 代码签名工具、单头文件 Direct2D UI 库、TrustedInstaller 提权辅助等）仍在私有仓库中打磨，稳定后开源。 More tooling — a Rust code-signing app, a single-header Direct2D UI library — is still being polished in private repos.

所有项目仅用于安全研究与教育目的 · All projects are for security research and educational purposes only.

Popular repositories Loading

  1. simple-krw-vuln simple-krw-vuln Public

    C++ 59 22

  2. mmio-for-byovd mmio-for-byovd Public

    Header-only x64 Windows kernel memory access helper for BYOVD toolchains: System CR3 scan, LA57-aware VA->PA walk, and cross-page-safe kernel read/write via caller-supplied physical map/unmap callb…

    C++ 9 3

  3. CVE-2026-43499-for-Redmi-K60 CVE-2026-43499-for-Redmi-K60 Public

    Forked from xianwan1314/CVE-2026-43499-Poc-Analysis

    Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.

    C 4

  4. gpt-5.6-instruct gpt-5.6-instruct Public

    Forked from MDX-Tom/gpt-instruct

    A Codex CLI jailbreak prompt and test pack for gpt-5.6-sol. 针对 gpt-5.6 系列的 Codex CLI 破甲提示词与测试包。

    Python

  5. WinArk WinArk Public

    Forked from BeneficialCode/WinArk

    Windows Anti-Rootkit Tool

    C++

  6. Break-This-Repo Break-This-Repo Public

    Forked from KrisTHL181/Break-This-Repo

    This repository automatically merges pull requests without conflicts. All text is subject to edits via PR and shouldn't be trusted.

    Rust