ALittlePatate

v. Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io

eject_idb. eject_idb is a last ditch effort to flush and save your IDB when IDA hangs or a plugin causes an exception, etc.

UnityRuntimeExplorer. A live in-game Hierarchy and Inspector for IL2CPP Unity games, powered by URKit.

URKit. A native C++ runtime modding framework for Unity Mono and IL2CPP games.

GhidrOrean. Ghidra Oreans DeVirt

rax. rax is a CPU emulator that checks its own work.

Polaris-Obfuscator. Polaris: An LLVM-based obfuscator that protects software at various levels

Insert. Insert is a programming language for self-modifying code.

MogVMP. Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.

IDA-FastAnalysis. IDA Pro plugin that speeds up the initial binary auto analysis through a caching technique

striga. Striga is an experimental lifter from x86_64 to LLVM IR written in Python.

ZealOS. The Zeal Operating System is a modernized fork of the 64-bit Temple Operating System, TempleOS.

covirt. An x86-64 code virtualizer for VM based obfuscation

Themida-Research. Themida 3.x research

gaseous-server. A game ROM manager, with a built in web based emulator using multiple sources to identify and provide metadata

binprotect. x64 PE bin2bin obfuscator which doesn't add a section to the binary

ida2llvm. Python

WiiFin. Jellyfin Client for Wii

VMPStatic. A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images

CodeDefenderAnalysis. An analysis and static deobfuscation of codedefender.io protected samples.

Google-Keep-to-Joplin. Python script to convert Google Keep HTML note exports into Markdown (.md) files suitable for importing into Joplin.

th06. Decompilation of 東方紅魔郷　～ the Embodiment of Scarlet Devil (1.02h)

DevourCore. A client for DEVOUR with QoL features, performance mods, speedrunning tools, and visual customization.

demumble. A better c++filt and a better undname.exe, in one binary.

Attacks-on-Tor. Thirteen Years of Tor Attacks

HackMatrix. A 3d Linux desktop environment

Jellyswarrm. Bring all your Jellyfin servers together

marked-ReDoS-PoC.

ida-lifter. An IDA Hex-Rays microcode filter that lifts AVX/AVX2/AVX-512/AVX10 and VMX/VT-x instructions to intrinsics.

chernobog. chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.

PwnedBoot. Using Windows' own bootloader as a shim to bypass Secure Boot

csco_launcher. Community Launcher for Classic Offensive

inceptor. Template-Driven AV/EDR Evasion Framework

nodecast-tv. A self-hosted web application that lets you stream Live TV, Movies, and Series from your Xtream Codes or M3U provider directly in your browser. It's built with performance in mind and handles large libraries smoothly.

TexasSolver. 🚀 A very efficient Texas Holdem GTO solver :spades::hearts::clubs::diamonds:

e9patch. A powerful static binary rewriting tool

llvm-jutsu. Anti-LLM obfuscation via finger counting

Triton. Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

Tigress_protection. Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.

objdiff. A local diffing tool for decompilation projects

thprac. A tool for practicing Touhou shmups.

dazhbog. High-performance IDA Lumina implementation

Kiroshi. Anti-Cheat Artifacts detector for IDA

remill. Library for lifting machine code to LLVM bitcode

tp. Decompilation of The Legend of Zelda: Twilight Princess

microx. Safely execute an arbitrary x86 instruction

fcd. An optimizing decompiler

streamyfin. A modern Jellyfin client built with Expo

glance. A self-hosted dashboard that puts all your feeds in one place

lila. ♞ lichess.org: the forever free, adless and open source chess server ♞

Sn1per. Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Obfvious. LLVM

remill-template. Simple template for using Remill on Windows/Linux/macos.

KittyDisassemblerC. A basic disassembler like objdump in C for 64bits ELF files

Castafiore. 🎶 Castafiore is a music player that support Navidrome and Subsonic API.

Ryujin. Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool

mcsema. Framework for lifting x86, amd64, aarch64, sparc32, and sparc64 program binaries to LLVM bitcode

dittobytes. Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

DevourModMenu. Lightweight C++ internal mod menu for Devour.

Ouroboros. Decompiler written in Rust

peacestone. Defeating WARBIRD obfuscation with one stone

titan. Titan is a VMProtect devirtualizer

UniTaint. PoC for a taint based attack on VMProtect

archive.ieee1394. ieee1394 stack for old linux kernels

stitch. Rewrite and obfuscate code in compiled binaries

Xenity-Engine. PSP, PsVita and PS3 game engine

awesome-game-security. awesome game security [Welcome to PR]

xfce-winxp-tc. Windows XP stuff for XFCE

mkxp-vita. Free Software implementation of the Ruby Game Scripting System (RGSS)

GuiLite. ✔️The smallest header-only GUI library(4 KLOC) for all platforms

DarkWidow. Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

Astral-PE. Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

x64dbgida. Official x64dbg plugin for IDA Pro.

anal. Arcade Native Agnostic Layer

palachias. Rust

flag.h. Command-line flag parsing in C

memhv. Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities

sljit. Platform independent low-level JIT compiler

idashare. idashare is an IDA Pro plugin that allows you to quickly share the currently loaded binary and IDA database over a local HTTP server with a single click.

TonyHawksProStrcpy. Code execution exploit for Tony Hawk's video game series

caffeine. A symbolic execution engine for LLVM IR

manette-diy. Une manette Do It Yourself pour les journées Xpériences

fahrenheit_vita. Fahrenheit Vita

soloader-boilerplate. A boilerplate project for TheFloW's so-loader to save time on common project setup for Android to Vita ports

switchfin. Third-party native Jellyfin client for PC/PS4/PSVita/Nintendo Switch

XenonRecomp. A tool for recompiling Xbox 360 games to native executables.

InterObfu. Intermediate x86 instruction representation for use in obfuscation/deobfuscation.

Apollo-11. Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

nes86. x86 emulation on the NES

bin-graph. Visualize binary files

VMP-Vmp3_64bit_disasm-prerelease-. LLVM

ARK-4. Next Generation Custom Firmware for the PSP and Vita's ePSP.

vminer. Rust

asm-lessons. FFmpeg Assembly Language Lessons

mold. mold: A Modern Linker 🦠

pacmacs.el. Pacman for Emacs

nxdk. The cross-platform, open-source SDK to develop for original Xbox: *new* xdk

BestEdrOfTheMarket. EDR Lab for Experimentation Purposes

ClipPing. Displays a visual notification in the active window when the clipboard is updated.

ida2py. An intuitive query API for IDA Pro

OSX-KVM. Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

vxlang-page. protector & obfuscator & code virtualizer

KernelCallbackTable-Injection-PoC. Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow.

jollyc. christmas-themed metalanguage transpiler based on C

Epicode. Shell

awesome-selfhosted. A list of Free Software network services and web applications which can be hosted on your own servers

c2-vulnerabilities. PoCs of RCEs against open source C2 servers

UltimateAntiCheat. UltimateAnticheat is an open source usermode anti-cheat system made to detect and prevent common attack vectors in game cheating (C++, Windows)

IDA-Fusion. ULTRA FAST Signature Scanner & Generator for IDA Pro 7/8/9+ Compiled with GCC

RedEdr. Collect Windows telemetry for Maldev

ROPgadget. This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

VMProtect-devirtualization. Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.

obfus.h. Macro-header for compile-time C obfuscation (tcc, win x86/x64)

ThePerfectInjector. Literally, the perfect injector.

WindowsInternals. Windows Internals Book 7th edition Tools

xVMP. C++

ZathuraDbg. An emulation based tool for learning and debugging assembly.

imgui. Dear ImGui: Bloat-free Graphical User interface for C++ with minimal dependencies

deadman. Computer deadman switch

sogen. 🪅 Windows & Linux userspace emulator

guardian-rs. x86-64 code/pe virtualizer

CodeDeob. Code Deobfuscator x86_32/64

msvc-wine. Scripts for setting up and running MSVC in Wine on Linux

valthrun-cs2. Valthrun an open source external CS2 read only kernel gameplay enhancer.

EDRSandblast. C

BinaryShield. An x86-64 Code Virtualizer

AMED. Advanced Machine Decoder for x86, aarch32 and aarch64.

arm-asl-parser. Parsing tools for ARM's ASL

N64Recomp. Tool to statically recompile N64 games into native executables

dqix-functions. Function information already discovered in dq9, DRAGON QUEST IX: SENTINELS OF THE STARRY SKIES (jp only, some only)

dq9. Dragon Quest IX countdown

vitaGL. openGL wrapper for PSVITA.

Empire. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

BringBackGHXSS. JavaScript

module_overloading. A more stealthy variant of "DLL hollowing"

GLWTPL. "Good Luck With That" Public License

vsc-de. Browser extension for censoring VS C*de

Laika. Remote Administration Tool, created for fun

fcd. An optimizing decompiler (modified to use remill semantics)

recompiler. Xbox360 -> Windows executable converter

hrtng. IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

DSVita. Extremely fast NDS Emulator for ARM32/PSVita

ZeroHVCI. Achieve arbitrary kernel read/writes/function calling in Hypervisor-Protected Code Integrity (HVCI) protected environments calling without admin permissions or kernel drivers.

vm_jit. VM devirtualization PoC based on AsmJit and llvm

xObf. Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine

AFFiNE. There can be more than Notion and Miro. AFFiNE(pronounced [ə‘fain]) is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

themida-unmutate. Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

obfusheader.h. Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

OldTwitter. Extension to return old Twitter layout from 2015 / 2018.

WDExtract. Extract Windows Defender database from vdm files and unpack it

Mergen. Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

immich. High performance self-hosted photo and video management solution.

ladybird. Truly independent web browser

STL. MSVC's implementation of the C++ Standard Library.

IL2CPP_Scanner_Reborn. An in game GUI tool based on IL2CPP Resolver made to modify Unity il2cpp games running on DX11

no-defender. A slightly more fun way to disable windows defender + firewall. (through the WSC api)

stract. web search done right

dm. Discord Messenger is a free Discord-compatible messaging client that works on 30 years of Windows versions.

dnSpy. Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

PPPwn. PPPwn - PlayStation 4 PPPoE RCE

operating-system-design-review. Operating System Design Review: A systematic analysis of modern systems architecture

k8slab. This project automates the setup of a Kubernetes cluster using Ansible. It includes roles for setting up Docker, Kubernetes, and configuring one master and multiple worker nodes.

patate.dev. Source code of my website: www.patate.dev

bite. Disassembler focused on comprehensive rust support.

Microsoft-Activation-Scripts. Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

doomgeneric. Easily portable doom

overgrowth. Open Source codebase of the game Overgrowth by Wolfire Games LLC

Aetherim. A C++ library for accessing Unity's IL2CPP classes, methods, and fields during run-time.

PBIO_FIRMWARE. Firmware to flash on the ardunio board controlled by Proton MMS

GreyM. Me fockin' pe protector

www.bingops.com. ReactJS & TailwindCSS portfolio

CVE-2024-1086. Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

Denuvo-Info. There will be notes about Denuvo cracking in this repository, please note that there will be notes not only mine, but also other people's (their nicknames will also be written)

awesome-virtualization. Collection of resources about Virtualization

DefenderCheck. Identifies the bytes that Microsoft Defender flags on.

NsCDE. Modern and functional CDE desktop based on FVWM

winrar-keygen. Principle of WinRAR key generation.

Windows-Server-2003. This is the leaked source code of Windows Server 2003

papillon-v6. Le client alternatif de vie scolaire ouvert à tous et porté par la communauté

PortableBuildTools. Portable VS Build Tools installer

exwm. Emacs X Window Manager

ya-webadb. ADB in your browser

x64dbg-vmp-trace. unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared up A LOT of misconceptions I had regarding VMP, and helped me not be as spooked as before about trying to use complex libs

brainfuck-mode. Brainfuck mode for Emacs

epitech.js. Wrapper for Epitech intranet with complete TypeScript typings

not-paid. Client did not pay? Add opacity to the body tag and decrease it every day until their site completely fades away

AntiOreans-CodeDevirtualizer.

ImThemes. Dear ImGui style browser and editor written in Nim

Ponce. IDA 2016 plugin contest winner! Symbolic Execution just one-click away!

Redmatch2-Internal. A simple, poorly coded and functional cheat for the game RedMatch2.

KsDumper-11. A revival of the classic and legendary KsDumper

dxgkrnl_hook. C++ graphics kernel subsystem hook

stumper_bttf. Stumper for the start of the BTTF for december

Aiwnios. A HolyC Compiler/Runtime for aarch64/riscv64/amd64 windows/linux/macos/*bsd

obfuscator. PE (and elf now!) bin2bin obfuscator

llvmcpy. Python bindings for LLVM auto-generated from the LLVM-C API

VectorKernel. PoCs for Kernelmode rootkit techniques research.

kaichan. An imageboard (4chan) client for KaiOS feature phones.

ProMBA. MBA deobfuscator via Program Synthesis and Term Rewriting

jack_uzi_punchline. JavaScript