A Pin Tool for tracing API calls etc

Signtool for expired certificates

VMProtect 2.x-3.x x64 Import Deobfuscator

ULTRA FAST Signature Scanner & Generator for IDA Pro 7/8/9+ Compiled with GCC

scan system / process integrity

A 5G Sniffer and Downlink Injector Framework on steroids... And yes, Wireshark supported!!!

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

Finding Truth in the Shadows

Microsoft Teams presence report blocker.

A simple way to spoof return addresses using an exception handler

d3d12 wallhack, dx12 wallhack, d3d wallhack, wallhack, d3d12 overlay

Interprocess communication via a covert timing channel

Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)

Just check hypervisor in ring0

vulkan wallhack hook dll

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

Minimalistic and foolproof POC for instrumentation callbacks