hzqst

VmwareHardenedLoader. Vmware Hardened VM detection mitigation loader (anti anti-vm)

unicorn_pe. Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

Syscall-Monitor. Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+

MetaHookSv. MetaHook (https://github.com/nagist/metahook) porting for SvEngine (GoldSrc engine modified by Sven-Coop), as a client-side modding framework.

FuckCertVerifyTimeValidity. This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually

CGAssistant. CGAssistant is a helper for you to play CrossGate with highly automated game experience.

CGAssistantJS. CGAssistant is a helper for you to play CrossGate (中译：魔力宝贝) with highly automated game experience.

MetaRenderer. C++

metamod-fallguys. It's a metamod plugin for Fall Guys maps in Sven Co-op

hidden. Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

FortniteLama. This project exploits the lama bug from Fortnite Save the World that every times you quit SSD with +ALT+F4 you get 4 mini lama(s)

CaptionMod. This is a caption/subtitle plugin designed for displaying captions/subtitles in GoldSRC engine & VGUI2 based singleplayer games.

sven-fallguys. Fall Guys in Sven Co-op

CS2_External. educational CS2 external cheat.

systeminformer. A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

anti-cheat-emulator. C++

EAC-CR3-BYPASS. A simple UM + KM example of how to bypass EAC CR3

oxgenPdb. a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.

lazy_importer. library for importing functions from dlls in a hidden, reverse engineer unfriendly way

cs2-signature-list. List of strings to find function signatures on cs2

DmaProtect. Shows an example of how to implement VT-d/IOMMU

ForniteCNCrashFix. the driver fix a bug that Fornite Chinese server version always crash under Windows 10.

OAC. Open Anti Cheat

LOLDrivers. Living Off The Land Drivers

MetaAudio. GoldSrc engine plugin for 3D sound

FuckACEScreenshot. C++

rest_rpc. modern C++(C++11), simple, easy to use rpc framework

Simrep. windows kernel File redirection

InfinityHook. Hook system calls, context switches, page faults and more.

dwm-screen-shot. 将shellcode注入dwm.exe以进行屏幕截取

enum_real_dirbase. 从MmPfnData中枚举进程和页目录基址

capstone. Capstone disassembly/disassembler framework: Core (Arm, Arm64, EVM, M68K, M680X, Mips, PPC, Sparc, SystemZ, TMS320C64x, X86, X86_64, XCore) + bindings (Python, Java, Ocaml, PowerShell, Visual Basic)

FreeImage_clone. Clone of https://sourceforge.net/projects/freeimage/

DeviceMon. VT-based PCI device monitor (SPI)

Motrix. A full-featured download manager.

qemu-patched. QEMU patched to avoid detection from various anticheats such as Battleye/EAC

pesign. Linux tools for signed PE-COFF binaries

KernelDwm. Kernel dwm render

Chicken-Fortress-3. Chicken Fortress 3 is a Half-Life mod that ported source game Team Fortress 2 to GoldSRC engine.

procmap. C++ wrapper around /proc/self/maps

NVDrv. Abusing nvidia driver (nvaudio.sys) for physical/virtual memory and control register manipulation.

llvm-msvc. Forked LLVM focused on MSVC Compatibility. This version is designed for windows users

hv. Lightweight Intel VT-x Hypervisor.

WoW64Injection-fork. Proof of concept for injecting a 64-bit DLL into a 32-bit application

DetectNtoskrnlIntegrity. Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe

VC-LTL5-fork. Shared to msvcrt.dll or ucrtbase.dll and optimize the C/C++ application file size.

Hunt-Weird-Syscalls. ETW based POC to identify direct and indirect syscalls

GAMBA. Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

cs2kz-metamod. Metamod Plugin for CS2 KZ (WIP).

PhysX. NVIDIA PhysX SDK

window_hijack. Rendering on external windows via hijacking thread contexts

Detours_fork. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

crtsys. C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

ida-pro-mcp. MCP Server for IDA Pro

CS2-OFFSETS. Always updated offsets.

plouton. C