Awesome Game Security

A tool designed for low-level examination and modification of Unreal Engine game assets by hand.

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

VirtualKD-Redux - A revival and modernization of VirtualKD

ReClassEx

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

Official mirror of https://gitlab.freedesktop.org/freetype/freetype

No description.

Universal PatchGuard and Driver Signature Enforcement Disable

限制ACE-Guard Client EXE占用系统资源，支持各种腾讯游戏

A bunch of Windows anti-debugging tricks for x86 and x64.

Shoggoth: Asmjit Based Polymorphic Encryptor

The classic, refined DOOM source port. For Windows PC.

A tool that shows detailed information about named pipes in Windows

x64DbgMCPServer made from c# with Claude, Windsurf and Cursor support

kernel mode anti cheat

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

Driver that uses network sockets to communicate with client and read/ write protected process memory.

UltimateAnticheat is an open source usermode anti-cheat system made to detect and prevent common attack vectors in game cheating (C++, Windows)

This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.

undetected counter strike 2 browser based radar cheat

No description.

Enumerating and removing kernel callbacks using signed vulnerable drivers

Simple external ESP for Counter-Strike 2, after many years, the codebase has been modernized for clarity and ease of use, with a redesigned interface, noticeable performance improvements, and several new quality-of-life features.

Windows Anti-Rootkit Tool

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

InfinityHookPro Win7 -> Win11 latest

The Definitive Guide To Process Cloning on Windows

Encrypted PE Loader Generator

A small bootkit which does not rely on x64 assembly.

A library to develop kernel level Windows payloads for post HVCI era

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

Loader for VAC Bypass written in C.

Anti-cheat library for Windows C++

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

A project that demonstrates how to screw with CSGO from Kernel Space. (CSGO Kernel Cheat/Hack) All cleaned up, and with updated offsets.

This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows

A low-level .NET library for reading and writing Unreal Engine game assets.

Dump native and .NET assemblies

Full source to the CS:GO cheat

open-source pen-test [CS:GO/CS2/Apex]

Cross-platform streamproof ESP hack for Counter-Strike: Global Offensive, written in modern C++. Rendering and GUI powered by Dear ImGui + FreeType.

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Debugger Anti-Detection Benchmark

Counter-Strike 2 SDK/Base written in C++.

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

Scan signatures and netvars. Dumps header files, cheat tables and ReClass files.

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

Incident Response & Digital Forensics Debugging Extension

Venom is a library that meant to perform evasive communication using stolen browser socket

A dnSpy extension to aid reversing of obfuscated assemblies