changeofpace

Reverse engineering, windows internals, and hypervisors.

Pinned Repositories

Force-Page-Protection
This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
Language:C110 10 137
Hex-Rays-Deep-Compile
Improves Hex-Rays output through batch decompilation.
Language:C++65 8 020
MouClassInputInjection
MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
Language:C++301 15 1983
MouHidInputHook
MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
Language:C++245 11 788
Overwatch-Dump-Fix
x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
Language:C241 19 1267
PE-Header-Dump-Utilities
This x64dbg plugin adds several commands for dumping PE header information by address.
Language:C60 3 016
Remote-Process-Cookie-for-Windows-7
Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
Language:C++21 4 07
Self-Remapping-Code
This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
Language:C++575 20 5144
VivienneVMM
VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
Language:C++789 45 16180
x64dbg-Anti-Debug-POC
viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
Language:C++23 4 014

changeofpace's Repositories

changeofpace/VivienneVMM
VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
Language:C++789 45 16180
changeofpace/Self-Remapping-Code
This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
Language:C++575 20 5144
changeofpace/MouClassInputInjection
MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
Language:C++301 15 1983
changeofpace/MouHidInputHook
MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
Language:C++245 11 788
changeofpace/Overwatch-Dump-Fix
x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
Language:C241 19 1267
changeofpace/Force-Page-Protection
This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
Language:C110 10 137
changeofpace/Hex-Rays-Deep-Compile
Improves Hex-Rays output through batch decompilation.
Language:C++65 8 020
changeofpace/PE-Header-Dump-Utilities
This x64dbg plugin adds several commands for dumping PE header information by address.
Language:C60 3 016
changeofpace/x64dbg-Anti-Debug-POC
viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
Language:C++23 4 014
changeofpace/Remote-Process-Cookie-for-Windows-7
Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
Language:C++21 4 07
changeofpace/Simple-Injector
basic dll injector using Qt
Language:C++18 3 09
changeofpace/Find-Exported-Xrefs
Given a global name in IDA Pro, find all xrefs which are contained in an exported function.
Language:Python11 4 06
changeofpace/Enumerate-GetKeyState-Calls-Using-Varying-nVirtKey
IDAPython script. Bookmark all instances of calls to GetAsyncKeyState and GetKeyState which use a varying value (e.g. not const shift/ctrl/alt modifiers) for the nVirtKey arg.
Language:Python5 5 05
changeofpace/ReClassEx
ReClassEx
Language:C++5 3 01
changeofpace/cheat-engine
Cheat Engine. A development environment focused on modding
Language:Pascal2 2 02
changeofpace/HyperPlatform
Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
Language:C++1 1 01
changeofpace/x64dbg
An open-source x64/x32 debugger for windows.
Language:C++1 2 01

changeofpace

Pinned Repositories

Force-Page-Protection

Hex-Rays-Deep-Compile

MouClassInputInjection

MouHidInputHook

Overwatch-Dump-Fix

PE-Header-Dump-Utilities

Remote-Process-Cookie-for-Windows-7

Self-Remapping-Code

VivienneVMM

x64dbg-Anti-Debug-POC

changeofpace's Repositories

changeofpace/VivienneVMM

changeofpace/Self-Remapping-Code

changeofpace/MouClassInputInjection

changeofpace/MouHidInputHook

changeofpace/Overwatch-Dump-Fix

changeofpace/Force-Page-Protection

changeofpace/Hex-Rays-Deep-Compile

changeofpace/PE-Header-Dump-Utilities

changeofpace/x64dbg-Anti-Debug-POC

changeofpace/Remote-Process-Cookie-for-Windows-7

changeofpace/Simple-Injector

changeofpace/Find-Exported-Xrefs

changeofpace/Enumerate-GetKeyState-Calls-Using-Varying-nVirtKey

changeofpace/ReClassEx

changeofpace/cheat-engine

changeofpace/HyperPlatform

changeofpace/x64dbg