SpriteOvO / sigmatch
✨ Modern C++ 20 signature match / search library
☆103Updated 2 months ago
Related projects ⓘ
Alternatives and complementary repositories for sigmatch
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆61Updated 2 weeks ago
- The most powerful and customizable binary pattern scanner☆208Updated 2 years ago
- C++23 binary signature search algorithm optimized with AVX2☆56Updated last year
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆398Updated 4 months ago
- A c++20 constexpr x86 assembler☆54Updated 3 years ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆141Updated 2 years ago
- query-pdb is a server-side software for parsing PDB files. The software provides PDB online parsing service.☆140Updated last month
- Single-header, minimalistic, cross-platform hook library written in pure C☆289Updated last month
- [WIP] A forked version of LLVM-18 that prioritizes MSVC compatibility. This version is tailored for Windows users.☆217Updated last month
- This project migrated to https://github.com/backengineering/llvm-msvc☆140Updated last year
- Windows Driver Kit Extesion Header (Undoc)☆132Updated 3 years ago
- Another wow64ext to try to be compatible with WOW64 for all architectures.☆75Updated 3 weeks ago
- Collection of undocumented Windows API declarations.☆290Updated 2 weeks ago
- Windows inline hooking tool.☆219Updated 6 years ago
- Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.☆65Updated 2 weeks ago
- Experimental disassembler for x86 binaries virtualized by VMProtect 3☆91Updated 2 years ago
- Virtual Method Table Hook☆57Updated last year
- An improved Detours.☆39Updated last week
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock(利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能)☆99Updated 2 years ago
- 8种检测虚拟机方法☆95Updated 5 years ago
- VM devirtualization PoC based on AsmJit and llvm☆103Updated 3 years ago
- COFF and Portable Executable format described using standard C++ with no dependencies.☆254Updated 6 months ago
- This project will give you an example how you can hook a kernel vtable function that cannot be directly called☆80Updated 2 years ago
- Some psuedo snippets from BattlEye's BEDaisy.sys loaded on Rainbow Six: Siege.☆122Updated 2 years ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆141Updated 2 months ago
- A library for generating C++ compatible SDKs☆105Updated 3 months ago
- Fumo Loader - All in one kernel-based DLL injector☆214Updated 3 months ago
- IDA Pro plugin AntiXorstr☆103Updated last year
- Compile-time conversion library, from IDA-style string to array (supports wildcarding).☆36Updated last year