Awesome Game Security

A Windows kernel dump C++ parser library with Python 3 bindings.

XEX/XBE loader plugin for IDA 9, and xex1tool, supporting most known Xbox/Xbox360 executable formats.

midgetpack is a multiplatform secure ELF packer

Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants

No description.

Invoke functions with a spoofed return address. For 32-bit Windows binaries. Supports __fastcall, __thiscall, __stdcall and __cdecl calling conventions. Written in C++17.

SDK for automating Ghidra from Python, Rust, and C++. Decompile, rename, annotate, inspect symbols/types/xrefs, and manage project lifecycle programmatically - treat Ghidra like infrastructure, not just a GUI.

Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).

Source code for SIGGRAPH Asia 2021 paper "Fast Volume Rendering with Spatiotemporal Reservoir Resampling"

A x86_64 software emulator

sloader is an ELF loader which aims to replace ld-linux.so of glibc.

Brovan is a user-mode x86_64 binary emulator for your malware analysis & reverse engineering.

Malware Behavior Analyzer

Titan is a VMProtect devirtualizer

UE4 plugin for live2d model

Data-oriented C++20 game engine with a fiber-based job system and bindless Vulkan 1.3 renderer.

Android assembly instruction tracing tool

A library for generating C++ compatible SDKs

Ghidra decompiler in your browser

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.

WinDbg Copilot - Agentic Debugging extension

A zygisk module that dumps so file from process memory

Fully working kernel-mode VAC bypass

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

A C++ REPL for IDA Pro / IDA C++ SDK

Runtime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.

DSE & PG bypass via BYOVD attack

Minimal memory library for Windows / Linux

IntroVirt is an guest introspection library for KVM

https://key08.com/index.php/2021/10/19/1375.html

Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.

A Source/CSGO port of CornerCulling

AI reverse engineering assistant for x64dbg. Embeds a chat panel directly in the debugger with tool-use capabilities.

Pe-protector protects executable files.

your ai debugger, vibe hacking tool

This lab guides you through setting up an environment to explore CVE-2019-2215, a critical Android kernel vulnerability in the binder subsystem.

Android arm arm64-v8a ShellCode Generate

Stack spoofing Detection for CET processes by comparing shadow and user stacks.

Dynamic binary translator for x86 binaries

Ursine 3D Engine / Editor

win32/x64 obfuscate framework

LLDB based debugger for Linux Kernel

Fuzzing Framework for Modules in Apache HTTPD Server

No description.

W/RPM Driver and usermode for Linux

No description.

Tool to collect and visualize memory usage of a process tree, mainly for Windows.

libipt - an Intel(R) Processor Trace decoder library

In-progress game engine project

A graphics engine designed to run on a single thread on CPU.