Skip to content
View ck0i's full-sized avatar
61 followers · 0 following

Achievements

Achievement: StarstruckAchievement: Pull SharkAchievement: YOLO

Achievements

Achievement: StarstruckAchievement: Pull SharkAchievement: YOLO

Block or report ck0i

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ck0i/README.md

> helz_

security researcher · kernel developer · systems programmer

i break things at the lowest level to understand how they work.

GitHub   Blog   Discord


i work on windows internals, anti-cheat systems, hypervisors, and anything that runs in ring 0. most of my time is spent in ida, writing kernel drivers, or figuring out how detection systems think. i also build products @ voidware studios.


projects
Cloakwork header-only c++20 obfuscation. compile-time encryption, polymorphic transforms, zero deps.
Kernelcloak kernel driver protection and obfuscation built on c++17.
ETOC comprehensive kernel-to-usermode comms. ioctl, shared memory, callbacks, and more.
wraith-rs rust library for windows process manipulation. clean abstractions over win32.
SigmaDrift biomechanical mouse movement algorithm. windmouse's successor.
claude-patcher companion to my breaking claude code writeup.

recent writing

sigmadrift: windmouse's successor · feb 2026
obfuscating kernel drivers without crashing · feb 2026
why anti-cheats walk your call stack · jan 2026


c++ · c · rust · x86/x64 asm · python · hlsl
kernel drivers · reverse engineering · anti-cheat · hypervisors · directx

Popular repositories Loading

  1. Cloakwork Cloakwork Public

    An advanced singular header-only C++20 obfuscation library with encryption and polymorphism.

    C++ 66 13

  2. ETOC ETOC Public

    Comprehensive demonstration of kernel-mode to user-mode communication methods for Windows driver development.

    C 22 5

  3. wraith-rs wraith-rs Public

    Rust 21 2

  4. Kernelcloak Kernelcloak Public

    An advanced library for protecting/obfuscating kernel drivers using the C++ 17 standard.

    C++ 20 4

  5. SigmaDrift SigmaDrift Public

    A biomechanically-grounded mouse movement algorithm that outperforms WindMouse across every metric that matters for human-like trajectory generation.

    C++ 20 1

  6. claude-patcher claude-patcher Public

    Related to my article @ https://helz.dev/blog/breaking-claude-code/

    JavaScript 7 2