-
Overwatch-Dump-Fix Public
x64dbg plugin which removes anti-dumping and obfuscation techniques from the popular FPS game Overwatch.
-
VivienneVMM Public
VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
-
HyperPlatform Public
Forked from tandasat/HyperPlatformIntel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
-
MouClassInputInjection Public
MouClassInputInjection implements a kernel interface for injecting mouse input data packets into the input data stream of HID USB mouse devices.
-
MouHidInputHook Public
MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices without modifying the mouse device stacks.
-
Self-Remapping-Code Public
This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.
-
Hex-Rays-Deep-Compile Public
Improves Hex-Rays output through batch decompilation.
-
cheat-engine Public
Forked from cheat-engine/cheat-engineCheat Engine. A development environment focused on modding
-
-
Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
-
Simple-Injector Public
basic dll injector using Qt
-
PE-Header-Dump-Utilities Public
This x64dbg plugin adds several commands for dumping PE header information by address.
-
Force-Page-Protection Public
This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.
-
x64dbg Public
Forked from x64dbg/x64dbgAn open-source x64/x32 debugger for windows.
-
Find-Exported-Xrefs Public
Given a global name in IDA Pro, find all xrefs which are contained in an exported function.
-
x64dbg-Anti-Debug-POC Public
viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
-
IDAPython script. Bookmark all instances of calls to GetAsyncKeyState and GetKeyState which use a varying value (e.g. not const shift/ctrl/alt modifiers) for the nVirtKey arg.