Samuel Tulach

VirusTotalUploader. C# Open-Source Winforms application for uploading files to VirusTotal

mutante. Kernel-mode Windows HWID spoofer

efi-memory. PoC EFI runtime driver for memory r/w & kdmapper fork

memhv. Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities

LightHook. Single-header, minimalistic, cross-platform hook library written in pure C

negativespoofer. PoC HWID spoofer that runs in EFI

rainbow. Hide SMBIOS/disk/NIC serials from EFI bootkit

HookGuard. Hooking Windows' exception dispatcher to protect process's PML4

tpm-spoofer. Simple proof of concept kernel mode driver hooking tpm.sys dispatch to randomize any public key reads

PwnedBoot. Using Windows' own bootloader as a shim to bypass Secure Boot

RwxMeme. State of the art DLL injector that took 20 minutes to make

SecureFakePkg. Simple EFI runtime driver that hooks GetVariable function and returns data expected by Windows to make it think that it's running with secure boot enabled (faking secure boot)

OverlayCord. Simple proof of concept showing how you can use Discord's in-game internal module to draw on top of the game (even if the game is in fullscreen) from an external application without modifying any Discord files or loading its modules.

nullmap. Using CVE-2023-21768 to manual map kernel mode driver

meme-rw. Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode

unxorer. Yet another IDA Pro/Home plugin for deobfuscating stack strings

PatchBoot. Guide for patching AMI Aptio V UEFI firmware to circumvent Secure Boot checks

BetterTiming. PoC TSC offsetting in KVM

SecureHack. Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory

CanetisRadar. Open-source application for detecting sound direction using 7.1 audio device in games

eac_cr3_shuffle. C++

DirectPageManipulation. A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy

voidmap. Using CVE-2021-40449 to manual map kernel mode driver

windowhide. Hide external overlay by using SetWindowDisplayAffinity

ida-unity-pdb-downloader. Simple IDA Pro plugin to download Unity debug symbols from their symbol server

ImGui-AppKit. Project template for single-window GUI apps using Dear ImGui

SecureGame. Proof-of-concept game using VBS enclaves to protect itself from cheating

MemoryGuard. Experiment with PAGE_GUARD protection to hide memory from other processes

Occulto. Proof-of-concept post-build obfuscator for Unity IL2CPP projects

InjectMouseInputExample. C/C++ example of InjectMouseInput function

winzentool. Port of zentool to Windows

GetDeviceInterfacesMemoryLeak. Small memory leak PoC that is happening in IopGetDeviceInterfaces

SaberHighlight. Beat Saber mod enabling NVIDIA Highlights functionality

vmcheck. C

SoundReplacer. BSIPA mod for replacing hit sounds, menu music, click sounds and much more!

HitSoundChanger. A plugin for changing hitsounds in Beat Saber

OcuFix. Simple mod to automatically disable ASW and change services/runtime priority

EasyUefi. Visual Studio template for GNU-EFI

disable-memory-compression. Utility for disabling memory compression on Windows

InactiveTitlebarPatch. Simple registry patch to turn inactive title bar color dark

OneplusDebloat. Remove crappy useless apps in Oxygen OS (both 3rd party and Google)

obs-dda. C

ByeMouse. C#

PowerControl. C#

NuGetCheck. C#