Awesome Game Security

A library for generating C++ compatible SDKs

for chinese maplestory V027

Analyze Windows x64 Kernel Memory Layout

Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.

A fast execution trace symbolizer for Windows.

Some Of Anti-Frida Stuff

CSGO Cheat

A CUDA Mesh RayTracer with BVH acceleration, with python bindings and a GUI.

Scripts to run within Ghidra, maintained by the Trellix ARC team

Simple ELF crypter. Uses RC4 encryption.

The beginning and end of Devilution - Diablo reverse engineered

Free DMA Firmware.Bypass VGK/FAC and MSI-X interrupt

An injector focused on undetectability that automatically injects a DLL into the target process with VAC3 bypass.

This x64dbg plugin sets the page protection for memory mapped views in scenarios which cause NtProtectVirtualMemory to fail.

Dalvik bytecode emulator for Android static analysis | String decryption | Multi-DEX | No Android runtime required

Ghidra decompiler in your browser

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.

A Repository to Track Anti-Forensic Techniques

x86-64 virtualizing obfuscator written in Rust

Library containing Anti-RE and Anti-Debug methods.

Reverse engineering assistant that extracts strings and related pseudocode from a binary file.

IDA Claude Code Plugins

Proof of Concepts code for Bring Your Own Vulnerable Driver techniques

No description.

Windows PDB parser for kernel-mode environment.

driver manual mapper (outdated/for educational purposes)

pasted eft cheat

Kasumi - a kernel-level path manipulation and hiding framework

可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。

WinDbg Copilot - Agentic Debugging extension

🍂 Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping.

A zygisk module that dumps so file from process memory

Fully working kernel-mode VAC bypass

Overwatch Anti-Flag

No description.

This bypass is for anti cheats like battleye and EAC. All this does is abuse lsass's handles and use them for yourself. This is quite useful as this is usermode which doesnt require you to find a way to load a driver

No description.

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

Unreal Engine UI Texture Validator Plugin

A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.

Game cheat base and clean architecture for your next cheat

Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when attackers disable standard process notify callbacks.

A C++ REPL for IDA Pro / IDA C++ SDK

CE MCP Plugin是一个Cheat Engine插件，它实现了Model Context Protocol (MCP)，允许AI模型与Cheat Engine进行交互。通过这个插件，AI可以使用Cheat Engine的各种功能，如内存读写、进程管理等。

MalUnpack companion driver

A gadget finder and a ROP-Chainer tool for x86 platforms

The windows kernel debugger consists of two parts, KMOD which is the kernel driver handling ring3 request and KCLI, the command line interface for the driver. It originated due to insufficient useability with CheatEngine's DBVM driver while debugging games running under certain AntiCheat software.

Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.

Pubg Mobile Emulator Gameloop Memory Hacking C++ Source Code. Ex: Name, Cords, Bones, Weapons, Items, Box, Drop, Aimbot etc.

just proof of concept. hooking MmCopyMemory PG safe.