cryotb/RASD
An interesting way to detect return address spoofing on x64-windows.
works with most invokers, spoofs the return address to bypass the anti cheat and allow detected natives to be called.
Appears on
Quick read
Latest capture 2026-07-28 03:10
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
3 observed captures since 2026-06-24. Charts use measured snapshots only.
Stars from first capture 0
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
An interesting way to detect return address spoofing on x64-windows.
No description.
Invoke functions with a spoofed return address. For 32-bit Windows binaries. Supports __fastcall, __thiscall, __stdcall and __cdecl calling conventions. Written in C++17.
This tool will allow you to spoof the return addresses of your functions as well as system functions.
No description.
Use hardware breakpoints to spoof the call stack for both syscalls and API calls