Awesome Game Security

This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows

A low-level .NET library for reading and writing Unreal Engine game assets.

Dump native and .NET assemblies

Half-Life 2 SDK Mirrors

Full source to the CS:GO cheat

open-source pen-test [CS:GO/CS2/Apex]

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

Cross-platform streamproof ESP hack for Counter-Strike: Global Offensive, written in modern C++. Rendering and GUI powered by Dear ImGui + FreeType.

A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client.

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Debugger Anti-Detection Benchmark

Counter-Strike 2 SDK/Base written in C++.

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

Scan signatures and netvars. Dumps header files, cheat tables and ReClass files.

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

Ghidra analyzer for UEFI firmware.

GptHidra is a Ghidra plugin that uses the OpenAI Chat GPT to explain functions. With GptHidra, you can easily understand the purpose and behavior of functions in your codebase. Now with GPT4 Support!

Fumo Loader - All in one kernel-based DLL injector

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together

A basic 2D side scroller blueprint template for Unreal Engine 5

KslDump — Why bring your own knife when Defender already left one in the kitchen?

Module extending manual mapper

Incident Response & Digital Forensics Debugging Extension

A low-overhead dynamic binary instrumentation and modification tool for ARM (both AArch32 and AArch64 support) and RISC-V (RV64GC).

Venom is a library that meant to perform evasive communication using stolen browser socket

Vibe Reverse Engineer with IDA SQL: An interface for IDA in SQL via live virtual tables

Examples for: Learning KVM - implement your own kernel

A dnSpy extension to aid reversing of obfuscated assemblies

🕹️ An external CS radar made specifically for observing

GhidRust: Rust decompiler plugin for Ghidra

Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

A Linux framework to enable userspace-defined "Virtual" PCIe card shims to enable in-host PCIe card driver development.

Unsigned driver loader using CVE-2018-19320

strings2: An improved strings extraction tool.

Lua in kernel-mode because why not.

Modding il2cpp games by classes, methods, fields names on Android.

DragonBurn is CS2(Counter-Strike 2 cheat) kernel-mode read-only external cheat. Undetected by all anti-cheats except Faceit.

symbolic execution plugin for binary ninja

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.

DPI bypass tool - eBPF on Linux, TUN on macOS/Windows.

The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.

Patching "signtool.exe" to accept expired certificates for code-signing.

pdb + Rich library

A GameCube/Wii emulator and debugger written in Rust.

il2cpp各个版本的源码整理

A game launcher for World of Warcraft that allows you to connect to custom servers.

D3D11 Worldtoscreen Finder, dx11 w2s, d3d11 w2s, esp, world to screen

Linux anti-debugging and anti-analysis rust library

CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.

Elden Ring Cheat Engine table maintained by The Grand Archives.