Windows security tooling · detection engineering · Android performance
Small, dependency-free tools that each do one job properly.
Live usermode memory analysis for Windows. One 1.7 MB executable with the Moneta engine compiled in — no second binary, no installer, no driver, no telemetry. Pick a running process, scan its memory for injected regions and malware IOCs, export the result.
| Target search | Filter the process list by image name, full path or PID, with a live match count |
| Modes | IOC / ALL / REGION / REFERENCED, plus CLR heap, CLR JIT, WOW64 and unsigned-module filters |
| Live output | Colour-coded streaming; STOP terminates the scan child instantly |
| Reports | TXT and HTML, including host, SID, OS build, options, timings and the full engine log |
| Isolation | The scanner runs as a hidden child process, so a bad target costs a scan, not the window |
| Project | What it does | Stack |
|---|---|---|
| HyperSense64 | Usermode memory analysis — finds injected and suspicious regions in a live process | C++ Win32 |
| Sysmon Deployment Suite | Menu-driven Sysmon rollout using the Olaf Hartong config, tuned for Event ID 7 (Image Load) and 10 (Process Access) | PowerShell |
| HYPERINFO | Terminal OSINT — passive WHOIS, crt.sh, Shodan and banner lookups on an IP or hostname |
Bash |
| Phishing Analyzer | Flask service that scores a URL with VirusTotal, URLScan.io, WHOIS and DNS, and flags dead or lookalike domains | Python |
| HX Injector | Authorised red-team DLL injector — indirect syscalls, APC injection, encrypted payload staging | C++ |
| Project | What it does | Stack |
|---|---|---|
| Hypersense MAX v10 | Frame smoothing, touch response and VRAM/CPU hints with idle/active switching | Bash |
| Neural vPool / uVRAM Engine | Frame-pacing engine for 60–144 Hz targets, with a virtual memory pool | Bash |
| Hypersense Ultimate | Auto game detection, dynamic touch/FPS scaling, battery and thermal limits | Bash |
| Hypersense Android V2 | NeuralCore build with per-game profiles | Bash |
| Project | What it does | Stack |
|---|---|---|
| HyperGhostChat | Single-file browser chat interface | HTML |
| GameDeploy | Landing page for the game deploy service | HTML |
| PC Checking Kit | Windows health-check log bundle | — |
Older builds and duplicates stay public but unmaintained — the versions above are the ones to use.
| No magic | No kernel driver, no background service, no telemetry, no hidden network calls. A tool does what its name says. |
| Portable first | Single executables and single scripts. Copy it, run it, delete it — nothing to install. |
| Fault isolation | The scan runs in a child process. A crash costs a scan, not the session. |
| Honest licences | Work built on someone else's engine credits it and documents every change (NOTICE.md). |
| Real output | Reports carry timestamps, host context and the complete log — not a summary you have to trust. |
Engine work on HyperSense64: Moneta by
Forrest Orr (@forrest-orr) and
Gabriel Landau (@gabriellandau), GPLv3.
Front end, packaging and branding: AG HYDRAXFF ·
@hydraxff_yt
Use only on systems you own or are authorised to test.