an obfuscator based on LLVM which can obfuscate the program execution trajectory

A C++ 11 std::error_category for the NT kernel's NTSTATUS error codes

idamagnum is a plugin for integrating MagnumDB requests within IDA

GTA V Source Code Build Tutorial with an extra additions!

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization,…

Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).

ULTRA FAST Signature Scanner & Generator for IDA Pro 7/8/9+ Compiled with GCC

Code samples that serve as references for Windows API functions

A Template Engine for Modern C++

AV/EDR Evasion Lab for Training & Learning Purposes

POC exploit for CVE-2024-49138

Windows rootkit designed to work with BYOVD exploits

protector & obfuscator & code virtualizer

The Windows Driver Kit C Runtime derivative intended for the Windows user mode and UEFI applications

Develop UEFI applications using EDK II inside Visual Studio

🪅 Windows User Space Emulator

An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining

This repository contains an IDA processor for loading and disassembling compiled yara rules.

IDA plugin that allows connecting to third party Lumina servers

Windows Internals Study Notes.

A branch-monitor-based solution for process monitoring.

A collection of LLVM transform and analysis passes to write shellcode in regular C

Deterministic debugging for windows

A simple lexical analyzer built using ANTLR and C++. This project reads an input file, tokenizes its contents using a lexer generated by ANTLR, and outputs the tokens to a specified output file. Le…

Wyrm is a GCC GIMPLE to LLVM IR transpiler

DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.

An LR grammar automata generator (yet to be completed)