KANKOSHEV

NoScreen. Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent

face-injector-v2. update face injector by KANKOSHEV

Detect-KeAttachProcess. Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.

Detect-HiddenThread-via-KPRCB. Detect removed thread from PspCidTable.

Detect-MouseClassServiceCallback. mouseclassservicecallback detection via hook

ValorantExternal. Bypass valorant page guard external

WindowsHardwareInfo. A project written in C++ to get hardware info on a Windows PC. Interfaces with the Windows Management Instrumentation (WMI) service to query hardware info of interest and provides a basic command line interface.

EASY-HWID-SPOOFER. 基于内核模式的硬件信息欺骗工具

Detect-VM-and-Hypervisor. Detect VM and Hypervisor

EasyAntiPatchGuard. Easy Anti PatchGuard

Warface-wallhack-minimalistic. - No CRT and no IMPORTS - Without hook endscene and present - Without strings - Minimal code

CosMapper. Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

StrCrypt. Compile-time string crypter library for C++

mmid. A module manual map Injection Detector. (mmid)

SystemThreadFinder. C++

be-shellcode-tester. BattlEye shellcodes tester

InjectMouseInputExample. C/C++ example of InjectMouseInput function

Diminish-self-leak. I will be leaving cheating scene for a while so thought I would release my UD driver

idaplugins-list. A list of IDA Plugins

km-um-communication. A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

ioctl_decoder-utility-. I was reversing some vulnerable drivers and thought it was kinda a pain in the ass to decode the ioctls as there are no public decoders (except osr's one but its online) afaik, so I made this tool so I could help anyone who might be lazy to decode them themselves.

Shared-FlushFileBuffers-Communication. Cool kernel communication method.

valorant-internal. C++

poc. Proof of Concepts

rzctl. Control your mouse using razer synapse

warzone-deobfuscator. Simple tool deobfuscating a Modern Warfare dump so IDA can analyse it right way (and faster).

ADVobfuscator. Obfuscation library based on C++11/14 and metaprogramming

NoVmp. A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

EFI_Driver_Access. C++

Shh0yaUEDumper. UEDumper

memflow. physical memory introspection framework

HyperHide. Hypervisor based anti anti debug plugin for x64dbg

FortniteCheatSRCUpdateEveryUpdate. A Free Open-Source Fortnite Cheat.

valorant-external. C++

Windows-Privilege-Escalation-CVE-2021-1732. Read my blog for more info -

Controlling-The-Driver-With-IOCTL. As i was busy reversing the githubs^^ i stumbled on old source which allows you to control driver kernal^^ with IOCTL, amazing rite?

Vanguard. Official Vanguard Anti-Cheat source code.

sumap. manually map driver for a signed driver memory space

rw_socket_driver. Driver that uses network sockets to communicate with client and read/ write protected process memory.

pHake. GTA Online Cheat

modernwarfare-cheat-rs. A Cheat for Call of Duty: Modern Warfare written in Rust using my memlib-rs library

MakeInfinityHookGreatAgain. 让Etwhook再次伟大! Make InfinityHook Great Again!

IGodsEye-Reborn. Esp for warzone

SCUM-SDK-26.05.2021.

iw4x-client. 🎮 Official IW4x source code

Nt-Modules. Collect different versions of Crucial modules.

Protectors. 🛡️ Obfuscator, Encryption, Junkcode, Anti-Debug, PE protection/modification

KM-to-UM-Injector. Kernel mode to user mode injector

process-handle-lister. Process file handle lister

Self-Leak---Avalanche-Valorant-External. decided to leak this as I don't have any kind of use for it, enjoy it maybe you can learn something off of it.

r6-SynX. A cheat made for rainbow six siege. This includes all you need to build your own cheat for the game

LeagueDumper. Process dumper edited to fit the new League of Legends Anti-Cheat system.

injection. A resource for thread hijacking and manual mapping code, that works with MEM_MAPPED & MEM_IMAGE.

R6Updater. Offset Dumper for Rainbow Six Siege