not-matthias / eac-analysis
Analyzing the driver and internal module of EasyAntiCheat.
☆36Updated last year
Related projects: ⓘ
- A intel hypervisor, implementing many virtualization techniques☆35Updated last year
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆18Updated last month
- a parser for the .map file included in the aimware leak☆14Updated last year
- ☆36Updated last year
- A basic Secure Virtual Machine hypervisor☆20Updated 3 years ago
- A basic 100 loc CPU emulator using the existing code of ntoskrnl.exe☆69Updated last year
- Retrieves VAC module ice encryption key by reversing the LCG seed that it was generated with☆14Updated 10 months ago
- comparing data of module exports from disk and memory, then caching any differences.☆23Updated 2 years ago
- My research WIP bluepill hypervisor☆42Updated last year
- ☆24Updated this week
- unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…☆49Updated 7 months ago
- ☆41Updated this week
- Windows driver mapper via the UEFI☆37Updated 4 months ago
- Windows kernel driver template for cmkr (with testsigning).☆29Updated last year
- This tool Decrypt and Extract the files from the EAC☆61Updated last year
- just proof of concept. hooking MmCopyMemory PG safe.☆60Updated 10 months ago
- Library to manipulate drivers that expose a physical memory read/write primitive.☆20Updated last year
- ☆42Updated 2 years ago
- Type 2 Hypervisor for security research supported by AMD-V hardware assisted virtualization☆38Updated last year
- ☆53Updated this week
- Discarded Section Manual Map☆65Updated 4 years ago
- ☆35Updated 2 months ago
- Achieving code execution through abusing VEH☆15Updated last year
- Windows PDB parser for kernel-mode environment.☆82Updated last year
- ☆30Updated 2 years ago
- kernel driver used to monitor the activity of BadlionAnticheat.sys by patching its IAT☆32Updated 3 years ago
- POC Hook of nt!HvcallCodeVa☆49Updated last year
- Hypervisor-based debugger for AMD processors☆41Updated 4 months ago
- Just check hypervisor in ring0☆13Updated last year
- Kernel ReClassEx☆58Updated 10 months ago