Awesome Game Security

ReClassEx

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

No description.

Universal PatchGuard and Driver Signature Enforcement Disable

Official mirror of https://gitlab.freedesktop.org/freetype/freetype

限制ACE-Guard Client EXE占用系统资源，支持各种腾讯游戏

A bunch of Windows anti-debugging tricks for x86 and x64.

Shoggoth: Asmjit Based Polymorphic Encryptor

The classic, refined DOOM source port. For Windows PC.

A tool that shows detailed information about named pipes in Windows

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

kernel mode anti cheat

Driver that uses network sockets to communicate with client and read/ write protected process memory.

x64DbgMCPServer made from c# with Claude, Windsurf and Cursor support

This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.

UltimateAnticheat is an open source usermode anti-cheat system made to detect and prevent common attack vectors in game cheating (C++, Windows)

No description.

undetected counter strike 2 browser based radar cheat

Enumerating and removing kernel callbacks using signed vulnerable drivers

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

Windows Anti-Rootkit Tool

InfinityHookPro Win7 -> Win11 latest

The Definitive Guide To Process Cloning on Windows

Encrypted PE Loader Generator

Simple external ESP for Counter-Strike 2, after many years, the codebase has been modernized for clarity and ease of use, with a redesigned interface, noticeable performance improvements, and several new quality-of-life features.

A small bootkit which does not rely on x64 assembly.

A library to develop kernel level Windows payloads for post HVCI era

Loader for VAC Bypass written in C.

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

Anti-cheat library for Windows C++

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

A project that demonstrates how to screw with CSGO from Kernel Space. (CSGO Kernel Cheat/Hack) All cleaned up, and with updated offsets.

This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows

A low-level .NET library for reading and writing Unreal Engine game assets.

Dump native and .NET assemblies

Full source to the CS:GO cheat

open-source pen-test [CS:GO/CS2/Apex]

Cross-platform streamproof ESP hack for Counter-Strike: Global Offensive, written in modern C++. Rendering and GUI powered by Dear ImGui + FreeType.

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Counter-Strike 2 SDK/Base written in C++.

Debugger Anti-Detection Benchmark

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

Scan signatures and netvars. Dumps header files, cheat tables and ReClass files.

Incident Response & Digital Forensics Debugging Extension

Venom is a library that meant to perform evasive communication using stolen browser socket

A dnSpy extension to aid reversing of obfuscated assemblies

Lua in kernel-mode because why not.

strings2: An improved strings extraction tool.

Unsigned driver loader using CVE-2018-19320