Skip to content
View xhscfq's full-sized avatar
🛡️
Windows Kernel & Anti-Cheat Research
🛡️
Windows Kernel & Anti-Cheat Research
  • Independent Security Researcher

Block or report xhscfq

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
xhscfq/README.md

xhscfq

Anti-Cheat Engineer · Windows Kernel Driver Developer · Reverse Engineer

Windows Kernel Security · Anti-Cheat Detection · x86/x64 Reverse Engineering · VT-x/EPT


Profile

I am an anti-cheat engineer and Windows kernel security researcher specializing in kernel driver development, low-level reverse engineering, and virtualization-assisted analysis.

My work focuses on defensive technologies for detecting unauthorized kernel execution, memory tampering, manual-mapped drivers, rendering hooks, anti-debugging, and other threats encountered by modern anti-cheat systems.

Engineering Focus

Anti-Cheat Engineering Windows Kernel Reverse Engineering
Detection architecture Kernel driver development x86/x64 binary analysis
Memory integrity Process and thread telemetry Static and dynamic analysis
Driver trust analysis Kernel callbacks and objects Anti-debugging analysis
Kernel anomaly detection PE/PDB and symbol processing VMProtect research
Overlay and hook detection Intel VT-x and EPT Unreal Engine analysis

Featured Engineering

A VT-x/EPT-assisted debugging framework for Windows kernel and game-security research.

The project includes Windows 10/11 kernel components, VM-exit handling, EPT-based instrumentation, symbol processing, debugging components, and a Delphi-based user interface.

Research Library

The following forks and repositories are retained as research references. They are not presented as original work unless explicitly stated.

Technical Stack

Languages

C · C++ · Assembly · Python · C#

Kernel and Systems

Windows Driver Kit · WinDbg · Windows Internals · Intel VT-x · EPT

Reverse Engineering

IDA Pro · x64dbg · Ghidra · Binary Ninja · Frida

Game Technology

Unreal Engine · DirectX · Runtime Object Analysis

Responsible Research

All public material on this account is intended for authorized security research, defensive anti-cheat engineering, malware analysis, interoperability, and education.

I do not support using these materials to disrupt online services or gain an unfair advantage in games.

Contact

Open to technical discussions involving anti-cheat engineering, Windows kernel security, virtualization, and reverse engineering.

GitHub: @xhscfq

Pinned Loading

  1. UnrealVTDbg UnrealVTDbg Public

    VT-x/EPT-assisted Windows kernel debugger for authorized anti-cheat and reverse-engineering research.

    C 2 194

  2. Detect-KeAttachProcess Detect-KeAttachProcess Public

    Forked from KANKOSHEV/Detect-KeAttachProcess

    Research reference — detecting cross-process kernel attachment through process and thread context validation.

    C

  3. PresentHookDetection PresentHookDetection Public

    Forked from weak1337/PresentHookDetection

    Research reference — detection of unauthorized presentation-path hooks in Windows graphics workflows.

    C++

  4. search search Public

    Forked from rogxo/search

    Research reference — kernel shellcode detection methods for anti-cheat telemetry validation.

    C

  5. titan titan Public

    Forked from gmh5225/titan-1

    Research reference — VMProtect devirtualization and control-flow recovery.

    C++

  6. anti-cheat-research-index anti-cheat-research-index Public

    Defensive anti-cheat, Windows kernel security, and reverse-engineering research index.