Awesome GitHub RepositoriesIn-Memory Binary Patching

LSPosed is an Android runtime hooking framework and in-memory code modifier. It functions as a system hooking tool that intercepts and modifies system and application methods in memory to change behavior without altering original installation files. The project provides a standardized interface through the Xposed Module API, allowing for the development of plugins that alter the behavior of the Android operating system and installed applications. The framework covers a range of capabilities including runtime function interception, Android system debugging, and application customization. Thes

Chromatic is a Chromium runtime modifier and JavaScript engine injector designed to alter the low-level operational characteristics of Chromium and its embedded V8 engine. It functions as a tool for injecting custom logic into the V8 JavaScript engine to change application behavior at runtime. The project provides mechanisms for browser engine instrumentation and V8 runtime manipulation. It enables the modification of the internal execution flow of JavaScript within Chromium-based environments to extend native browser capabilities or bypass standard limitations.

Windhawk is a Windows OS modding framework and user-mode code injector designed to customize the behavior of Windows applications and system components. It functions as a process customization tool and API hooking engine that allows for the insertion of custom logic into running programs. The framework enables software behavior modification and user interface tweaking without requiring access to the original source code. This is achieved by intercepting function calls and altering how software interacts with the operating system to implement patches or feature enhancements. The system covers

OptiScaler is a DirectX graphics middleware and temporal upscaler wrapper designed to intercept graphics API calls. It functions as a system for replacing native temporal anti-aliasing and upscaling technologies with alternative scaling methods and frame generation interop to improve resolution and performance. The project distinguishes itself by enabling modern high-resolution upscaling and frame generation in games built for legacy rendering standards. It includes a framework for importing low-latency graphics plugins and utilizes an interception layer to replace existing frame interpolatio

vgpu_unlock es un conjunto de herramientas de software y modificaciones de controladores diseñadas para desbloquear características de virtualización de nivel empresarial en hardware gráfico de consumo. Funciona como una herramienta de desbloqueo de vGPU y suplantador de ID de dispositivo de hardware que permite compartir una sola tarjeta gráfica entre múltiples máquinas virtuales. El proyecto logra esto empleando hooking a nivel de controlador, parches de memoria dinámicos y suplantación de dispositivos a nivel de kernel. Estas técnicas interceptan las consultas de identificación de hardware y modifican el estado operativo del controlador de GPU en tiempo de ejecución para saltarse las restricciones de software impuestas por el fabricante. Las capacidades resultantes proporcionan gráficos acelerados por hardware a los sistemas operativos invitados y permiten compartir GPU virtuales en hardware que no soporta estas funciones de forma nativa.

CloverBootloader is a UEFI-compliant boot loader designed to initialize hardware and launch multiple operating systems across various platforms. Its primary purpose is to enable the booting of operating systems on unsupported hardware through system identity spoofing and hardware emulation. The project specializes in hardware compatibility patching by modifying ACPI tables, faking hardware IDs, and patching binary kernels or extensions in memory during the boot process. It provides capabilities to inject kernel extensions and spoof system parameters, such as product names and serial numbers,

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

Lilu is a kernel patching engine and runtime code injection framework designed to modify kernel drivers and libraries in memory. It functions as an operating system customization framework that intercepts function calls and redirects execution flow within the kernel to resolve hardware compatibility issues and adjust system stability. The project employs a modular platform that allows for the injection of code and the modification of system libraries during the boot process without altering files on disk. It utilizes a plugin-based extension architecture and a standardized API interface to lo

rdpwrap is a set of system utilities and services designed to enable, configure, and manage remote desktop protocol access and video compression settings. It functions as a service and manager that allows remote desktop connections on operating system versions where the feature is restricted or disabled by the vendor. The project provides tools to override system-level restrictions for remote access and activate remote desktop protocol services on unsupported versions. It includes a configuration tool for managing H.264 video compression and encoding settings to balance visual quality, networ