Pinned Repositories
-
Aimtec.SDK
al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
AnalyzePdb
Kernel-Bridge
Windows kernel hacking framework, driver template, hypervisor and API written on C++
miniblink49
a lighter, faster browser kernel of blink to integrate HTML UI in your app. 一个小巧、轻量的浏览器内核,用来取代wke和libcef
mkYARA
Generating YARA rules based on binary code
taodaqiao's Repositories
taodaqiao/Kernel-Bridge
Windows kernel hacking framework, driver template, hypervisor and API written on C++
taodaqiao/AntiDBG
A bunch of Windows anti-debugging tricks for x86 and x64.
taodaqiao/asmjit
Complete x86/x64 JIT and AOT Assembler for C++
taodaqiao/capstone
Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
taodaqiao/cpp-lazy
C++11/14/17/20 library for lazy evaluation
taodaqiao/EfiGuard
Disable PatchGuard and DSE at boot time
taodaqiao/eft-packet
taodaqiao/Game-Cheating-Tutorial
热门网络游戏辅助开发教程
taodaqiao/hvpp
hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
taodaqiao/hypervisor
lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
taodaqiao/HyperWin
A native hypervisor designed for the Windows operating system
taodaqiao/iced
x86/x64 disassembler, instruction decoder & encoder
taodaqiao/injdrv
proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
taodaqiao/InputBox
Example of how to use Interpreted VBScript to access the VBScript InputBox in C++
taodaqiao/IRPMon
The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracker but has several enhancements. It supports 64-bit versions of Windows (no inline hooks are used, only moodifications to driver object structures are performed) and monitors IRP, FastIo, AddDevice, DriverUnload and StartIo requests.
taodaqiao/KBot
League of Legends external script with kernel memory reading
taodaqiao/Kernel-Anit-Anit-Debug-Plugins
Kernel Anit Anit Debug Plugins 内核反反调试插件
taodaqiao/MasterHide
MasterHide x64 Rootkit
taodaqiao/mutante
Kernel-mode Windows HWID spoofer
taodaqiao/NtCall64
Windows NT x64 syscall fuzzer
taodaqiao/ntdll
a ntdll.h head file which download from network, and fix all found problems by me.
taodaqiao/Pasting.Win
cheating.win is big paste, uses btbd hwid spoofer lmfao
taodaqiao/Poseidon
stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device objects.
taodaqiao/stlkrn
C++ STL in the Windows Kernel with C++ Exception Support
taodaqiao/SyscallTables
Windows NT x64 Syscall tables
taodaqiao/SysWhispers
AV/EDR evasion via direct system calls.
taodaqiao/ucxxrt
Universal C++ RunTime (UCXXRT)
taodaqiao/VanderLeague
Hypervisor-assisted internal League of Legends hack
taodaqiao/VmwareHardenedLoader
Vmware Hardened VM detection mitigation loader (anti anti-vm)
taodaqiao/zydis
Fast and lightweight x86/x86-64 disassembler library