Add English descriptions for 15 archived game security repos

Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
2026-06-21 13:56:22 +00:00 · 2026-02-24 16:21:40 +00:00
parent 3fa0f028b4
commit 097093c847
15 changed files with 15 additions and 0 deletions
@@ -0,0 +1 @@
+This project is a reverse-engineered study of a mobile game anti-cheat implementation and its native protection logic. It includes reconstructed C/C++ code for components such as CPU and emulator checks, Dex-related handling, utility routines, and encrypted loading behavior. The code and notes focus on how detection paths are triggered and how internal anti-tamper routines are structured in practice. It is mainly useful for game security researchers who want to understand Android anti-cheat internals and evaluate potential bypass surfaces in a controlled research context.
@@ -0,0 +1 @@
+This project is a Windows PE protection framework designed to make executables harder to crack and analyze. It is implemented mainly in C++ and provides instruction mutation, a built-in x86 assembler pipeline, configurable stub logic, and binary compression support. The repository also includes compiler components, tests, and CMake-based build tooling for reproducible development. Its primary use case is software protection research, anti-tamper experimentation, and understanding packer-style defense techniques.
@@ -0,0 +1 @@
+This project is an Android syscall tracing and hooking solution built with Frida and seccomp trap handling. It combines JavaScript instrumentation with Python process orchestration to capture SVC calls, stack traces, register arguments, and return values, including multi-process logging support. The implementation uses linker symbol inspection and a Frida CModule to redirect and replay syscall behavior from a controlled thread context. It is aimed at mobile reverse engineering and game security analysis where low-level syscall visibility is needed.
@@ -0,0 +1 @@
+This project is a clean-room reimplementation of a classic action RPG engine written in C. It provides cross-platform engine components such as rendering, audio, scene management, MPQ asset handling, and media decoding using libraries like SDL2, FFmpeg, zlib, and libarchive. The codebase focuses on portability and extensibility rather than reusing original proprietary game code. Its main audience is engine developers and modding-oriented researchers who want a transparent foundation for studying and extending legacy game behavior.
@@ -0,0 +1 @@
+This project is an IDA plugin that reconstructs original Protocol Buffer schema information from compiled binaries. It is written in Python and uses the Google protobuf runtime together with IDA APIs to decode embedded descriptors and display recovered proto definitions. The plugin integrates into the disassembler workflow through a dedicated search action and custom result views for easier inspection. It is useful for reverse engineers who need to recover network or serialization formats during game security and binary analysis work.
@@ -0,0 +1 @@
+This project is an in-progress research effort focused on bypassing Windows PatchGuard on modern systems. It documents a planned dynamic approach with three core goals: disabling PatchGuard execution, evading integrity checks at runtime, and verifying PatchGuard state. The implementation is centered on low-level Windows internals and kernel-mode behavior, with C/C++ code used for experimentation. It is primarily intended for kernel security researchers and anti-cheat analysts studying defensive mechanisms and their attack surface.
@@ -0,0 +1 @@
+This project is a proof of concept that hooks MiniDumpWriteDump to intercept dump data before it is written to disk. It is implemented mainly in C++ with auxiliary Python scripts for receiving and decrypting transferred dump content. The workflow can optionally encrypt the captured buffer and exfiltrate it over a socket to a remote host, demonstrating how dump pipelines can be modified in memory. It is intended for security research on credential dumping tradecraft, detection engineering, and defensive validation.
@@ -0,0 +1 @@
+This project is a standalone implementation of the Zygisk runtime interface for rooted Android environments. It targets compatibility across KernelSU, Apatch, and Magisk setups, offering an alternative module-loading path when built-in or closed implementations are unavailable. The codebase uses Android build tooling with Kotlin and native components to provide API-level behavior expected by Zygisk modules. It is mainly used by Android security and modding researchers who need flexible process injection and module experimentation on rooted devices.
@@ -0,0 +1 @@
+This project is a .NET protection toolkit that bundles anti-debugging, anti-virtualization, anti-injection, and hook-detection techniques for managed applications. It is written in C# and includes checks ranging from PEB and thread flags to sandbox heuristics, syscall-based probes, and integrity hardening features. The repository also covers detection of common anti-anti-debug user-mode hooks and several runtime tamper scenarios. Its primary use case is hardening software and building defensive components for anti-cheat or anti-cracking workflows.
@@ -0,0 +1 @@
+This project is a plugin that exposes debugger functionality through an MCP-compatible HTTP interface for x64dbg and related variants. It is built in C# on .NET Framework and maps debugger actions to remotely callable commands for memory reads, disassembly, register queries, labeling, and automation. The architecture includes a lightweight self-hosted listener and modular command routing designed for tool integration and rapid extension. It is aimed at AI-assisted reverse engineering and scripted game security analysis workflows.
@@ -0,0 +1 @@
+This project provides scripting support resources and examples for extending debugger workflows in x64dbg. It includes script samples plus helper Python code for exporting function labels and comments from IDA into debugger sessions. The examples demonstrate practical automation patterns such as multi-step execution control, global variable usage, and instruction-sequence searching. It is primarily useful for reverse engineers who want to speed up repetitive analysis tasks in game and binary security research.
@@ -0,0 +1 @@
+This project is an experimental Windows kernel driver focused on anti-debugging and anti-analysis protections. It uses low-level C/C++ techniques, including DKOM-style structure manipulation, instrumentation callback checks, hardware breakpoint checks, and process/thread flag hardening. The implementation also explores anti-hypervisor timing and anomaly checks while documenting additional planned kernel-user communication features. It is intended for anti-cheat and protection research where kernel-level detection and debugger resistance are being studied.
@@ -0,0 +1 @@
+This project is a small proof-of-concept anti-anti-debug tool that explores race-condition-based bypass behavior. It is implemented in C++ for Visual Studio and uses native Windows NT APIs to probe debug ports, hidden-thread behavior, and related debugger artifacts. The sample focuses on demonstrating how timing and state checks can be used against common hiding mechanisms in userland debugging scenarios. Its primary audience is reverse engineering researchers experimenting with anti-debug and anti-anti-debug techniques.
@@ -0,0 +1 @@
+This project is a Linux internal cheat framework for Counter-Strike: Global Offensive. It is written primarily in C++ and includes build scripts, injection helpers, and configuration handling for deploying a feature-rich in-game module. The workflow relies on common Linux tooling such as CMake, GDB-based injection, and user-managed config directories for runtime customization. It is mainly used in game hacking research to study internal cheat architecture and client-side manipulation techniques.
@@ -0,0 +1 @@
+This project is an open-source hypervisor-based anti-anti-debug plugin for x64dbg and x32dbg. It uses a kernel driver and Intel VT-x/EPT techniques to hook and sanitize many debugger-detection surfaces, including PEB values, thread and process flags, and numerous Nt* API queries. The implementation targets 64-bit Windows systems and focuses on masking debugger presence while preserving practical debugging workflows. It is widely applicable to reverse engineering and game security research against heavily protected binaries.
				`@@ -0,0 +1 @@`
				This project is a reverse-engineered study of a mobile game anti-cheat implementation and its native protection logic. It includes reconstructed C/C++ code for components such as CPU and emulator checks, Dex-related handling, utility routines, and encrypted loading behavior. The code and notes focus on how detection paths are triggered and how internal anti-tamper routines are structured in practice. It is mainly useful for game security researchers who want to understand Android anti-cheat internals and evaluate potential bypass surfaces in a controlled research context.
				`@@ -0,0 +1 @@`
				This project is a Windows PE protection framework designed to make executables harder to crack and analyze. It is implemented mainly in C++ and provides instruction mutation, a built-in x86 assembler pipeline, configurable stub logic, and binary compression support. The repository also includes compiler components, tests, and CMake-based build tooling for reproducible development. Its primary use case is software protection research, anti-tamper experimentation, and understanding packer-style defense techniques.
				`@@ -0,0 +1 @@`
				This project is an Android syscall tracing and hooking solution built with Frida and seccomp trap handling. It combines JavaScript instrumentation with Python process orchestration to capture SVC calls, stack traces, register arguments, and return values, including multi-process logging support. The implementation uses linker symbol inspection and a Frida CModule to redirect and replay syscall behavior from a controlled thread context. It is aimed at mobile reverse engineering and game security analysis where low-level syscall visibility is needed.
				`@@ -0,0 +1 @@`
				This project is a clean-room reimplementation of a classic action RPG engine written in C. It provides cross-platform engine components such as rendering, audio, scene management, MPQ asset handling, and media decoding using libraries like SDL2, FFmpeg, zlib, and libarchive. The codebase focuses on portability and extensibility rather than reusing original proprietary game code. Its main audience is engine developers and modding-oriented researchers who want a transparent foundation for studying and extending legacy game behavior.
				`@@ -0,0 +1 @@`
				This project is an IDA plugin that reconstructs original Protocol Buffer schema information from compiled binaries. It is written in Python and uses the Google protobuf runtime together with IDA APIs to decode embedded descriptors and display recovered proto definitions. The plugin integrates into the disassembler workflow through a dedicated search action and custom result views for easier inspection. It is useful for reverse engineers who need to recover network or serialization formats during game security and binary analysis work.
				`@@ -0,0 +1 @@`
				This project is an in-progress research effort focused on bypassing Windows PatchGuard on modern systems. It documents a planned dynamic approach with three core goals: disabling PatchGuard execution, evading integrity checks at runtime, and verifying PatchGuard state. The implementation is centered on low-level Windows internals and kernel-mode behavior, with C/C++ code used for experimentation. It is primarily intended for kernel security researchers and anti-cheat analysts studying defensive mechanisms and their attack surface.
				`@@ -0,0 +1 @@`
				This project is a proof of concept that hooks MiniDumpWriteDump to intercept dump data before it is written to disk. It is implemented mainly in C++ with auxiliary Python scripts for receiving and decrypting transferred dump content. The workflow can optionally encrypt the captured buffer and exfiltrate it over a socket to a remote host, demonstrating how dump pipelines can be modified in memory. It is intended for security research on credential dumping tradecraft, detection engineering, and defensive validation.
				`@@ -0,0 +1 @@`
				This project is a standalone implementation of the Zygisk runtime interface for rooted Android environments. It targets compatibility across KernelSU, Apatch, and Magisk setups, offering an alternative module-loading path when built-in or closed implementations are unavailable. The codebase uses Android build tooling with Kotlin and native components to provide API-level behavior expected by Zygisk modules. It is mainly used by Android security and modding researchers who need flexible process injection and module experimentation on rooted devices.
				`@@ -0,0 +1 @@`
				This project is a .NET protection toolkit that bundles anti-debugging, anti-virtualization, anti-injection, and hook-detection techniques for managed applications. It is written in C# and includes checks ranging from PEB and thread flags to sandbox heuristics, syscall-based probes, and integrity hardening features. The repository also covers detection of common anti-anti-debug user-mode hooks and several runtime tamper scenarios. Its primary use case is hardening software and building defensive components for anti-cheat or anti-cracking workflows.
				`@@ -0,0 +1 @@`
				This project is a plugin that exposes debugger functionality through an MCP-compatible HTTP interface for x64dbg and related variants. It is built in C# on .NET Framework and maps debugger actions to remotely callable commands for memory reads, disassembly, register queries, labeling, and automation. The architecture includes a lightweight self-hosted listener and modular command routing designed for tool integration and rapid extension. It is aimed at AI-assisted reverse engineering and scripted game security analysis workflows.