• 1
• 0
• 58

时光/Syscall Monitor

hzqst's Syscall Monitor.一个用Intel VT-X/EPT实现的类似Sysinternal's Process Monitor的工具。现已迁移至QT框架，支持32位/64位Windows 7及以上系统。

• 1
• 0
• 0

时光/x64dbg

• 1
• 0
• 0

时光/ScyllaHide

Advanced usermode anti-anti-debugger

• 1
• 0
• 4

时光/symbolTypeView

• 1
• 0
• 1

时光/DdiMon

Monitoring and controlling kernel API calls with stealth hook using EPT

• 1
• 1
• 2

时光/HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

• 1
• 0
• 1

时光/capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

• 1
• 0
• 2

时光/EASTL

• 1
• 0
• 3

时光/dxx 驱动中使用 std

在内核中使用 std

• 1
• 0
• 1

时光/WDKExt

Windows Driver Kit Extesion Header (Undoc)

• 1
• 0
• 2

时光/DriverLoaderPro

驱动姐在

• 0
• 0
• 1

时光/fcml-lib

General purpose machine code manipulation library for IA-32 and Intel 64 architectures (Assembler, Disassembler, Library).

• 1
• 0
• 1

时光/keystone

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

• 1
• 0
• 1

时光/asmjit

Complete x86/x64 JIT and AOT Assembler for C++

• 1
• 0
• 1

时光/zydis

Fast and lightweight x86/x86-64 disassembler library

• 2
• 1
• 1

时光/unicorn_pe

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

• 1
• 0
• 1

时光/ret-sync

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra disassemblers.

• 1
• 0
• 214

时光/DM forked from hgy413/DM

REDM是一套基于商业化标准的开源directui界面框架，不仅能提供完善的项目管理方案、详细的文档框架，也可轻松协助完成可视化界面设计，其核心库的稳定性已在内部多个大型商化项目中通过验证。

• 1
• 0
• 1

时光/AnalyzePdb

• 1
• 0
• 1

时光/Dress

好耶 是女装