Source Code

POWERSHELL2026.04.09

LDPlayer AMD fix

Kills the hidden VBS hypervisor on Windows 11 24H2 that prevents Android emulators (LDPlayer, BlueStacks, MuMu) and Type-2 hypervisors (VirtualBox, VMware) from accessing AMD-V / VT-x. Targets the undocumented WindowsHello DeviceGuard registry key that Microsoft never documented.

#Requires -RunAsAdministrator
<#
.SYNOPSIS
    Disable-VBS24H2.ps1 — Kill VBS on Windows 11 24H2 for Android Emulator Compatibility
.DESCRIPTION
    Windows 11 24H2 introduced an undocumented change that ties Virtualization-Based

9,601 bytesView source

POWERSHELL2026.02.06

Tracer.Fody.NLog Vulnerability Scanner & Remover

A security utility designed to identify and remove the malicious typosquatted NuGet package 'Tracer.Fody.NLog'. It recursively scans .csproj and packages.config files in the current directory, flags matches, and provides an interactive prompt to safely excise the malicious references.

# Utility: NuGet Typosquatting Scanner - Tracer.Fody.NLog
# Purpose: Identifies and removes cryptocurrency wallet-stealing malware references

$maliciousPackage = "Tracer.Fody.NLog"
$searchPath = Get-Location
Write-Host "--- Initiating Scan for: $maliciousPackage ---" -ForegroundColor Cyan

1,614 bytesView source

PYTHON2026.02.06

Urban VPN Malware Detector - 8M+ Users Affected

Cross-platform Python script to detect malicious Urban VPN browser extensions that silently harvest AI conversations from ChatGPT, Claude, Gemini, and other platforms. Affects 8+ million Chrome/Edge users. Works on Windows, macOS, and Linux with zero dependencies.

#!/usr/bin/env python3
"""
Urban VPN Malicious Extension Detector
Checks for presence of malicious extensions that harvest AI conversations
Supports: Windows, macOS, Linux
"""

10,285 bytesView source

VB62026.02.01

ecPrivate-Crack // Legacy AIM Auth

I have archived my private AIM screen name cracking utility here. It serves as a study in legacy socket programming and protocol handshakes. SOURCE CODE: Paste the GitHub URL for this new repo.

LINK: https://github.com/seven305/ecPrivate-Crack

49 bytesView source

VB62026.02.01

OSCSEVEN_VB6_SOURCE

I have successfully re-indexed the original source for OscSeven into the new mainframe. This project represents a critical era of the AOL/AIM automation scene, featuring the full .frm, .bas, and .vbp logic used for advanced rich text manipulation and system hooks. DATA STREAM ACCESS: The repository is now public and hosted on the GitHub node for permanent preservation.

LINK: https://github.com/seven305/OscSeven-VB6

46 bytesView source

POWERSHELL2025.10.26

GlassWorm VS Code Extension Scanner - Detect & Remove Malicious Extensions PS

Powershell code to detect and remove GlassWorm malware from VS Code extensions. Detects 14 known infected extensions, invisible Unicode code, Solana blockchain C2, credential theft patterns, and system compromise. Auto-removes infected extensions with --remove flag. Works on Windows.

#Requires -Version 5.1
<#
.SYNOPSIS
    GlassWorm VS Code Extension Scanner
    
.DESCRIPTION

16,846 bytesView source