A stealthy, header-only C++ library for Windows internals research. Implements disk-based SSN (System Service Number) recovery, manual PE parsing, and page-aligned memory scanning to bypass user-mode EDR/AV hooks.
cpp pattern-matching cybersecurity syscalls malware-research red-team windows-internals native-api edr-bypass hells-gate hook-evasion halos-gate pe-parsing
-
Updated
Feb 15, 2026 - C++