Add 15 archived repository descriptions batch

Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
2026-06-21 13:56:22 +00:00 · 2026-02-25 05:53:52 +00:00
parent ba3302b108
commit c37471f989
15 changed files with 15 additions and 0 deletions
@@ -0,0 +1 @@
+hXOR Packer is a Windows PE packer and unpacker that compresses and encrypts executables before rebuilding them as self-unpacking files. It is written in C++ and combines Huffman compression with simple XOR encryption, with command-line options for compression only, encryption only, or both. The unpacking stub restores the payload and executes it directly from memory instead of writing an unpacked file to disk. This project is mainly useful for learning PE internals, runtime loading techniques, and packer behavior in malware and anti-malware research.
@@ -0,0 +1 @@
+KernelMon is a virtualization-based Windows monitoring framework that traces kernel activity in a ProcMon-like workflow. It hooks selected kernel-mode APIs and forwards logs to a user-mode interface, covering file system, registry, process, and thread operations. The implementation uses a kernel driver with VMX/EPT-style low-level interception components and a companion desktop UI. It is intended for kernel security research, behavior analysis, and anti-cheat or malware investigation in controlled VM environments.
@@ -0,0 +1 @@
+WSA PacMan is a GUI package manager and installer for Android apps on Windows Subsystem for Android. Built with Flutter/Dart, it supports double-click installation of APK and XAPK packages, shows metadata such as version and permissions, and handles upgrades or downgrades. It also provides quick controls to open Android settings and app-management pages inside WSA. The tool is aimed at users and testers who sideload and manage Android apps on Windows efficiently.
@@ -0,0 +1 @@
+FRIEND is an IDA plugin that enhances disassembly with richer register and instruction documentation directly in the analysis view. It extends processor behavior with third-party components such as Capstone and adds contextual hints, external documentation links, and function summaries in disassembly and decompiler views. The codebase uses C++ with CMake and integrates with IDA SDK and optional Hex-Rays SDK support across Windows, Linux, and macOS. It is primarily designed for reverse engineers who need faster code understanding, including game security analysts.
@@ -0,0 +1 @@
+This project is a kernel-mode DLL injector for Windows that injects a chosen DLL into newly created processes when kernel32 is loaded. The implementation is based on analysis of the Sirifef (Max++) rootkit technique and includes both driver and sample DLL components. It is developed in C/C++ with Visual Studio and WDK tooling and is documented as x86-focused. The repository is useful for studying kernel-assisted process injection and for defensive research on detecting or mitigating such behavior.
@@ -0,0 +1 @@
+This repository is a large collection of Windows kernel driver binaries gathered from many hardware vendors and software products. Instead of source code, it mainly provides categorized .sys files that can be used as a reference corpus of third-party drivers. The dataset includes drivers from system utilities, OEM tools, security software, and other applications that commonly expose kernel interfaces. It is mainly useful for vulnerable-driver research, exploit reproduction, and anti-cheat bypass or hardening studies.
@@ -0,0 +1 @@
+Finger is a function symbol recognition system for binary analysis that helps identify unknown library or routine names. It provides both a Python SDK and an IDA plugin that extract function features, submit them to a recognition backend, and rename or highlight matched functions in IDA. The project targets IDA 7+ and supports Python 2.7 and Python 3 environments. It is intended for reverse engineers who want to accelerate binary triage and function recovery in malware or game-related samples.
@@ -0,0 +1 @@
+This project is a Source engine SDK codebase used for Half-Life 2 era game development and engine integration work. It contains extensive C/C++ headers and source for client, server, game logic, tools, and build infrastructure across multiple platforms. The repository serves as a foundational reference for creating mods, plugins, and engine-side extensions in Source-based titles. It is widely useful for game engine research, reverse engineering, and prototyping cheat or anti-cheat related experiments on Source games.
@@ -0,0 +1 @@
+KDBG is a Windows kernel debugging toolkit that combines a kernel driver backend with a command-line client. It offers low-level memory read/write operations for both user processes and kernel modules, plus module/thread enumeration and trace-oriented features, with additional debugger functions in progress. The code is focused on x64 workflows and requires driver-loading steps that may temporarily alter driver-signing behavior. It is aimed at advanced researchers doing low-level game debugging, anti-cheat analysis, and kernel security experimentation.
@@ -0,0 +1 @@
+IDASQL exposes IDA databases as SQL tables and adds an AI-assisted interface for natural-language reverse-engineering queries. It can run as a standalone CLI against .i64 files or as an in-IDA plugin, and it supports querying functions, strings, xrefs, types, and more without writing IDAPython scripts. The system also provides remote query capabilities so external tools or agents can interact with an active analysis session. It is built for reverse engineers who want fast, query-driven binary analysis workflows.
@@ -0,0 +1 @@
+This repository contains Windows kernel programming experiments implemented as proof-of-concept drivers and companion user-mode tools. The focus is on low-level internals such as memory manager behavior, including examples like listing process VAD structures. It uses C/C++ with Visual Studio and WDK-style projects and documents strong version coupling to specific Windows builds and symbols. The project is intended for educational kernel research and controlled security experimentation rather than production deployment.
@@ -0,0 +1 @@
+Binary Internals Viewer is a Java application for visual, interactive inspection of binary file formats down to field and bit-level structure. It supports multiple formats including BMP, Java class files, JPEG, PNG, and ZIP, with additional format modules under development. The project is built with OpenJDK and Maven and also ships reusable standalone format libraries. It is useful for reverse-engineering education, parser development, and hands-on binary format analysis.
@@ -0,0 +1 @@
+This repository provides dumped Source 2 engine data such as netvars, interfaces, and class IDs for multiple Valve titles. It aggregates generated headers and text listings for games including Dota 2, Artifact variants, Half-Life: Alyx, and Sandbox environments. Most content is structured reference data in C++ header and text form rather than application code. It is primarily used for Source 2 reverse engineering, offset tracking, and game security tooling workflows.
@@ -0,0 +1 @@
+Magisk Tailscaled is a Magisk module that runs the Tailscale daemon on rooted Android devices. It configures userspace networking so Tailscale can coexist with Android VPN usage, and includes service scripts plus tunnel helpers for routing traffic. The module provides practical CLI-driven workflows for login, remote SSH, and ADB-over-tailnet scenarios on arm and arm64 devices. It is intended for advanced Android users and mobile security researchers who need persistent remote connectivity on rooted phones.
@@ -0,0 +1 @@
+Anbox is a container-based runtime that runs a full Android system on Linux without relying on heavyweight virtualization. It uses Linux namespaces and a host-side daemon to broker hardware access, including OpenGL ES rendering paths adapted from Android emulator components. The codebase is primarily C++ with CMake and integrates dependencies such as LXC, D-Bus, and protobuf. It targets desktop and cloud-style Android application use cases and remains valuable as a reference project despite archived maintenance status.
				`@@ -0,0 +1 @@`
				hXOR Packer is a Windows PE packer and unpacker that compresses and encrypts executables before rebuilding them as self-unpacking files. It is written in C++ and combines Huffman compression with simple XOR encryption, with command-line options for compression only, encryption only, or both. The unpacking stub restores the payload and executes it directly from memory instead of writing an unpacked file to disk. This project is mainly useful for learning PE internals, runtime loading techniques, and packer behavior in malware and anti-malware research.
				`@@ -0,0 +1 @@`
				KernelMon is a virtualization-based Windows monitoring framework that traces kernel activity in a ProcMon-like workflow. It hooks selected kernel-mode APIs and forwards logs to a user-mode interface, covering file system, registry, process, and thread operations. The implementation uses a kernel driver with VMX/EPT-style low-level interception components and a companion desktop UI. It is intended for kernel security research, behavior analysis, and anti-cheat or malware investigation in controlled VM environments.
				`@@ -0,0 +1 @@`
				`WSA PacMan is a GUI package manager and installer for Android apps on Windows Subsystem for Android. Built with Flutter/Dart, it supports double-click installation of APK and XAPK packages, shows metadata such as version and permissions, and handles upgrades or downgrades. It also provides quick controls to open Android settings and app-management pages inside WSA. The tool is aimed at users and testers who sideload and manage Android apps on Windows efficiently.`
				`@@ -0,0 +1 @@`
				FRIEND is an IDA plugin that enhances disassembly with richer register and instruction documentation directly in the analysis view. It extends processor behavior with third-party components such as Capstone and adds contextual hints, external documentation links, and function summaries in disassembly and decompiler views. The codebase uses C++ with CMake and integrates with IDA SDK and optional Hex-Rays SDK support across Windows, Linux, and macOS. It is primarily designed for reverse engineers who need faster code understanding, including game security analysts.
				`@@ -0,0 +1 @@`
				This project is a kernel-mode DLL injector for Windows that injects a chosen DLL into newly created processes when kernel32 is loaded. The implementation is based on analysis of the Sirifef (Max++) rootkit technique and includes both driver and sample DLL components. It is developed in C/C++ with Visual Studio and WDK tooling and is documented as x86-focused. The repository is useful for studying kernel-assisted process injection and for defensive research on detecting or mitigating such behavior.
				`@@ -0,0 +1 @@`
				This repository is a large collection of Windows kernel driver binaries gathered from many hardware vendors and software products. Instead of source code, it mainly provides categorized .sys files that can be used as a reference corpus of third-party drivers. The dataset includes drivers from system utilities, OEM tools, security software, and other applications that commonly expose kernel interfaces. It is mainly useful for vulnerable-driver research, exploit reproduction, and anti-cheat bypass or hardening studies.
				`@@ -0,0 +1 @@`
				`Finger is a function symbol recognition system for binary analysis that helps identify unknown library or routine names. It provides both a Python SDK and an IDA plugin that extract function features, submit them to a recognition backend, and rename or highlight matched functions in IDA. The project targets IDA 7+ and supports Python 2.7 and Python 3 environments. It is intended for reverse engineers who want to accelerate binary triage and function recovery in malware or game-related samples.`
				`@@ -0,0 +1 @@`
				This project is a Source engine SDK codebase used for Half-Life 2 era game development and engine integration work. It contains extensive C/C++ headers and source for client, server, game logic, tools, and build infrastructure across multiple platforms. The repository serves as a foundational reference for creating mods, plugins, and engine-side extensions in Source-based titles. It is widely useful for game engine research, reverse engineering, and prototyping cheat or anti-cheat related experiments on Source games.
				`@@ -0,0 +1 @@`
				KDBG is a Windows kernel debugging toolkit that combines a kernel driver backend with a command-line client. It offers low-level memory read/write operations for both user processes and kernel modules, plus module/thread enumeration and trace-oriented features, with additional debugger functions in progress. The code is focused on x64 workflows and requires driver-loading steps that may temporarily alter driver-signing behavior. It is aimed at advanced researchers doing low-level game debugging, anti-cheat analysis, and kernel security experimentation.
				`@@ -0,0 +1 @@`
				IDASQL exposes IDA databases as SQL tables and adds an AI-assisted interface for natural-language reverse-engineering queries. It can run as a standalone CLI against .i64 files or as an in-IDA plugin, and it supports querying functions, strings, xrefs, types, and more without writing IDAPython scripts. The system also provides remote query capabilities so external tools or agents can interact with an active analysis session. It is built for reverse engineers who want fast, query-driven binary analysis workflows.