A curated collection of 18 mini-projects spanning full-stack web development, Android reverse engineering, Telegram automation, Windows kernel programming, game enhancement tooling, and utility scripting.
Each project is a self-contained demonstration of a specific engineering concept — from React authentication to JNI/NDK integration, from DSE bypass to Zygisk module injection.
"The best portfolio is the one that shows range without losing depth."
Modern engineering demands versatility. This collection deliberately spans the stack — from user-mode React login panels to kernel-mode Windows drivers, from Python Telegram bots to C++17 game overlays with ImGui on Android. Each project is real, working code; no tutorials, no templates, no clones.
The common thread is systems thinking: understanding how things work at every layer and building tools that operate at the right level of abstraction for the problem at hand.
| Project | Description | Core Tech |
|---|---|---|
| drivers-portfolio | Windows kernel driver + DSE bypass + manual mapper + VMProtect loader | C, C++17, WDK, ImGui |
| cheat-license-bypass | License validation bypass tool | — |
| crack_for_ckumka | Software analysis & patching | — |
| DeFexTranslatedESP | ESP cheat translated from Chinese | — |
| Vo1ic | Voice-related security tool | — |
| Project | Description | Core Tech |
|---|---|---|
| GGHACKS | Android hybrid app with JNI, libcurl, OpenSSL, compile-time obfuscation | Java, C++17, NDK |
| LumenInjector | Modular Lua-native Android cheat with encrypted payload delivery + ESP rendering | AndLua, ARM64 ELF |
| NightcoreLiosImgui | ImGui overlay for Unity games — 3 injection variants + anti-cheat bypass | C++17, ImGui, Zygisk |
| Project | Description | Core Tech |
|---|---|---|
| ctf_site | Capture The Flag competition platform | — |
| defex-admin | Admin dashboard/panel | — |
| key-admin-panel | License key management system | — |
| ReactLoginSystem | React-based authentication & session management | React, JavaScript |
| DeFexSite | Personal site with clean design | — |
| Project | Description | Core Tech |
|---|---|---|
| PythonChannelBot | Telegram channel moderation — ban/unban by user ID | Python, Telethon |
| test_bot_deploy | Telegram bot deployment pipeline test | Python |
| odoo-kanban-notifier | Odoo ERP kanban board notifications | Python, Odoo API |
| Project | Description | Core Tech |
|---|---|---|
| PyConverter | File format converter | Python |
| TikTokDownloader | TikTok video downloader | Python |
| temrava-reader | File/feed reader utility | — |
| AI-description-generator | LLM-powered README generator (built this index!) | Python, AI |
| Project | Description | Core Tech |
|---|---|---|
| 2-semester-coding | Semester coursework collection | — |
| LabWork1 | Introductory programming lab | — |
| My-university | Education portfolio | — |
A production-grade Windows kernel driver with CR3-based physical page-table walks, dxgkrnl dispatch hooking (data hooks, not code patches), ObRegisterCallbacks process protection, handle-stripping kernel threads, and DSE bypass via kvc.sys. Protected with VMProtect and authenticated via Firebase.
// CR3-based physical memory read — no KeStackAttachProcess traces
NTSTATUS ReadMemoryCr3(UINT64 cr3, UINT64 va, PVOID out, SIZE_T size) {
for (int lvl = 4; lvl > 0; lvl--) {
phys = ReadPhysicalQword(phys + PML4E_OFFSET(va, lvl));
if (!(phys & 1)) return STATUS_UNSUCCESSFUL;
}
return MmCopyMemory(out, phys + PAGE_OFFSET(va), size,
MM_COPY_MEMORY_PHYSICAL, &copied);
}Rare ImGui integration on Android with three injection methods (JNI_OnLoad, Zygisk module, APK overlay), 100+ anti-cheat bypass patches, and IL2CPP runtime introspection — all in C++17.
// eglSwapBuffers hook → inject ImGui every frame
EGLBoolean hook_eglSwapBuffers(EGLDisplay dpy, EGLSurface surface) {
ImGui_ImplOpenGL3_NewFrame();
ImGui_ImplAndroid_NewFrame(glWidth, glHeight);
ImGui::NewFrame();
LoadMenu();
ImGui::Render();
ImGui_ImplOpenGL3_RenderDrawData(ImGui::GetDrawData());
return old_eglSwapBuffers(dpy, surface);
}Entire Android app in Lua (AndLua) with native ELF executables as modular, encrypted ZIP payloads. Custom OpenGL ES ESP rendering engine and ROM-aware overlay anti-detection.
-- ZIP → decrypt → chmod → execute → cleanup
function ExecuteELF(file)
os.execute("su -c chmod 777 " .. path)
Runtime.getRuntime().exec("su -c " .. path)
Safe() -- rm -rf temp directory
endThree independent HTTP stacks (libcurl/Native, OkHttp, Retrofit) in one Android app. Compile-time XOR string obfuscation. Multi-ABI NDK packaging with prebuilt libcurl + OpenSSL.
// Native POST with libcurl + OpenSSL TLS
__system_property_get("ro.build.id", build_id);
std::string post = "username=andlua&password=" + std::string(build_id);
curl_easy_setopt(curl, CURLOPT_POSTFIELDS, post.c_str()); Python ──────── Web ─────────── Android ──────── C/C++
│ │ │ │
ChannelBot ─────────┤ │ │ │
TikTokDown ─────────┤ │ │ │
ReactLogin ─────────┼───────────────┤ │ │
GGHACKS ────────────┼───────────────┼───────────────┤ │
LumenInjector ──────┼───────────────┼───────────────┤ │
NightcoreLios ──────┼───────────────┼───────────────┼───────────────┤
drivers-portfolio ──┼───────────────┼───────────────┼───────────────┤
│ │ │ │
High-level Browser Mobile OS Kernel
"Build small. Learn deep. Stack wide."