mirror of
https://github.com/gmh5225/awesome-game-security
synced 2026-06-21 13:56:22 +00:00
Update README.md with additional resource links and prompts
This commit is contained in:
NeverSightAI
@@ -0,0 +1 @@
|
||||
This project is a fuzzing framework for the Apache HTTPD server that replaces Apache's socket layer with custom I/O filters, feeding raw bytes directly into the same code paths that handle real HTTP traffic. The Python-based framework includes reproducers for known CVEs and detailed documentation on Apache internals such as memory pools, hooks, filters, buckets, and the request pipeline. It is mainly useful for vulnerability researchers and security engineers studying server-side fuzzing techniques and HTTP parsing attack surfaces.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an all-in-one shell script and compressed archive bundle that sets up a pre-jailbroken vphone iOS emulator instance with full bootstrap installed. It automates downloading, merging, and extracting the vphone-cli environment on macOS, requiring SIP disabled and AMFI bypassed. It is mainly useful for iOS security researchers and emulator users who need a ready-to-use jailbroken iOS environment for app analysis and testing.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Unity editor plugin that provides AI-driven automation skills covering a wide range of engine subsystems. The C# codebase includes editor scripts for animator, audio, camera, Cinemachine, materials, NavMesh, optimization, physics, rendering, shaders, terrain, UI, and many other Unity components, along with a batch executor and localization support. It is mainly useful for Unity developers and technical artists seeking automated editor workflows and AI-assisted scene manipulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a MapleStory private server emulator targeting KMS version 316. The Java-based server includes SQL database schemas, JavaScript event and NPC scripts covering boss encounters, party quests, and game progression systems, along with packet handling configurations and server property files. It is mainly useful for game server emulation researchers and MapleStory modding communities studying MMORPG server architecture and game logic reimplementation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an IDA Pro plugin that integrates large language models into the reverse engineering workflow as an AI-powered copilot. It provides AI-assisted decompilation, an interactive chatbot interface with tool-calling support, function annotation, vulnerability analysis, and RAG-based context retrieval from binary databases. The Python plugin supports multiple LLM providers and includes prompt templates, syntax highlighting, and a custom viewer UI. It is mainly useful for malware analysts and reverse engineers seeking LLM-augmented binary analysis within IDA Pro.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a QEMU fork modified to support Apple Silicon virtualization and iOS device emulation. It includes the full QEMU emulator codebase with platform-specific modifications for running ARM-based virtual machines on Apple Silicon Macs. It is mainly useful for iOS security researchers and emulator developers who need hardware-accelerated ARM virtualization on macOS for app testing and analysis.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Node.js and TypeScript CLI tool that uses Frida to decrypt and dump iOS applications into IPA files from jailbroken devices. It includes a Frida agent for runtime decryption, handles app extensions and embedded frameworks, and supports both USB and remote device connections. It is mainly useful for iOS security researchers performing app decryption, binary analysis, and reverse engineering on jailbroken devices.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source Endpoint Detection and Response platform by Comodo Security. The large C++ codebase implements system monitoring, event collection, threat detection, and cloud-based analysis integration through AWS SDK connectivity. It provides real-time endpoint telemetry and response capabilities for identifying malicious activity on Windows systems. It is mainly useful for security researchers and anti-cheat engineers studying EDR architecture, endpoint monitoring techniques, and defensive security system design.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a KernelSU port for the Huawei Nova 2 device, providing a full ARM64 Linux kernel source tree modified to support kernel-level root access management. It includes Android-specific kernel configurations, device tree definitions, and the KernelSU framework patches integrated into the Huawei kernel. It is mainly useful for Android kernel researchers and root-access developers studying KernelSU integration on vendor-specific kernel trees.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a custom Android kernel source for Xiaomi SM8250-based devices including POCO F3 and POCO F4. It includes AnyKernel3 flashable packaging, device-specific defconfigs, GitLab CI integration, and GKI ABI definitions for Qualcomm platforms. It is mainly useful for Android kernel developers and mobile security researchers working with custom kernel builds on Qualcomm Snapdragon 870/888 devices.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a research tool for simplifying Mixed Boolean-Arithmetic (MBA) expressions, released by Denuvo Software Solutions. It includes a Python-based simplifier with support for linear and nonlinear MBA expressions, a bitwise expression factory, and experiment datasets from other tools such as NeuReduce, QSynth, and Syntia. The repository also contains the associated research paper and presentation slides. It is mainly useful for obfuscation and deobfuscation researchers studying MBA-based code protection and automated expression simplification techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an IDA Pro plugin that extends the built-in callee type application functionality. The Python script provides enhanced type propagation for function call sites, with test binaries and an ida-plugin.json manifest for easy integration into IDA's plugin system. It is mainly useful for reverse engineers who need improved type inference and callee type resolution when analyzing complex binaries in IDA Pro.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a dumped Unreal Engine SDK for the game Super People, containing generated C++ header files for the game's classes, structs, enums, and blueprint objects. The SDK covers weapons, vehicles, player pawns, AI modules, animation blueprints, and game-specific systems. It is mainly useful for game security researchers and reverse engineers studying Unreal Engine SDK structures and Super People's game object hierarchy.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a dumped Unreal Engine SDK for the game Veiled Experts, including generated C++ headers, a names dump, objects dump, and offsets file. The SDK covers agents, weapons, vehicles, UI elements, game modes, and engine subsystems specific to this tactical shooter. It is mainly useful for game security researchers and reverse engineers analyzing Unreal Engine game internals and SDK generation techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the official Unreal Engine source code and API documentation by Epic Games. It covers the complete engine runtime including build systems, rendering, physics, networking, platform abstraction, plugin architecture, and the Python scripting API. It is the primary reference for game developers and engine researchers working with Unreal Engine internals, module development, and platform-specific integration.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Unity game protection tool focused on IL2CPP and asset encryption. The C# codebase handles Unity asset file parsing, IL2CPP metadata encryption using XXTEA and custom crypto, key function obfuscation, and configuration-driven protection workflows. It supports both asset-level and code-level protection for Unity games built with the IL2CPP backend. It is mainly useful for game developers and security researchers studying Unity game protection and IL2CPP obfuscation techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a C++ proof-of-concept that calls the undocumented DPAPI RPC interface directly, bypassing the standard CryptUnprotectData API. It demonstrates how to invoke NdrClientCall3 with the correct parameters to perform data decryption through the lsass RPC endpoint, based on reverse engineering of dpapi.dll internals. It is mainly useful for security researchers studying Windows credential protection, DPAPI internals, and RPC-based attack surfaces.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Go-based reproduction of the Spyboy Terminator technique that terminates EDR, XDR, and antivirus processes by abusing the vulnerable zam64.sys (Zemana) driver. It exploits IOCTL-based process ID trust listing to bypass the driver's access controls, then uses kernel-level process termination primitives to kill security software. It is mainly useful for security researchers studying BYOVD (Bring Your Own Vulnerable Driver) attacks and EDR evasion techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a header-only C++ library for performing direct and indirect Windows syscalls without relying on standard API imports. It resolves syscall numbers at runtime by walking the PEB loader data structures and parsing ntdll export tables, supporting techniques like indirect syscall trampolines for EDR evasion. It is mainly useful for offensive security researchers and anti-cheat analysts studying syscall-level API hooking bypass and detection strategies.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a C++ proof-of-concept that demonstrates stealthy manipulation of the Windows Vectored Exception Handler (VEH) chain. It locates the internal VEH linked list in ntdll, uses RtlEncodePointer and RtlDecodePointer for handler pointer obfuscation, and leverages LdrProtectMrdata to unlock the protected MRDATA section for modification. It is mainly useful for security researchers studying VEH internals, anti-debug techniques, and exception handler manipulation on Windows.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a custom Android GKI (Generic Kernel Image) kernel source based on the common 5.10 branch with multi-vendor ABI support. It includes ABI symbol definitions for major Android OEMs including Samsung, Qualcomm, MediaTek, ASUS, Motorola, OnePlus, and others, along with a ZenX build script. It is mainly useful for Android kernel developers and mobile security researchers working with GKI-compliant custom kernels across multiple device platforms.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the Linux kernel source used by the Genymotion Android emulator. It contains a full kernel tree with Android-specific configurations and patches tailored for the Genymotion virtual device environment. It is mainly useful for Android emulator developers and mobile security researchers studying kernel-level behavior in virtualized Android environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Blu-ray Disc Java (BD-J) based jailbreak exploit for PlayStation consoles. It uses BD-J xlet payloads and the jdk.internal.misc.Unsafe class to achieve code execution, along with a C-based bdj_unpatch tool for BDMV manipulation and a Python log client for debugging. It is mainly useful for console security researchers studying PlayStation exploit chains and BD-J sandbox escape techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a QEMU-based whole-system dynamic binary analysis framework called MBA (Malware Behavior Analyzer). It extends QEMU with modules for malware analysis including memory forensics, API tracing, and behavioral monitoring across Windows and Linux guests. The codebase includes the full QEMU emulator with added instrumentation and analysis capabilities. It is mainly useful for malware analysts and security researchers performing whole-system dynamic analysis and introspection.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the GrapheneOS kernel source for the Pixel 4 (coral) and Pixel 4 XL devices, based on Qualcomm's MSM kernel tree. It includes hardened kernel configurations, Android-specific patches, and security-focused modifications characteristic of the GrapheneOS project. It is mainly useful for Android kernel security researchers and mobile platform developers studying hardened kernel implementations on Qualcomm Snapdragon devices.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source game server emulator for Genshin Impact, implementing the server-side game logic, player progression, world simulation, and network protocol handling. The Java-based server supports quests, gacha systems, dungeons, multiplayer interactions, and scripted game events. It is mainly useful for game server researchers and reverse engineers studying MMORPG server architecture and Genshin Impact's client-server protocol.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source digital image forensics toolset for detecting image manipulation and tampering. The Python-based GUI includes analysis modules for error level analysis (ELA), EXIF metadata inspection, frequency domain analysis, gradient maps, histogram analysis, cloning detection, and integration with the TruFor neural network detector. It is mainly useful for digital forensics researchers and anti-cheat analysts investigating image authenticity and screenshot manipulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an automated signature and gamedata updater for Counter-Strike 2 modding frameworks. It generates pattern signatures and offset data compatible with CS2Fixes, CounterStrikeSharp, cs2kz, and cs2surf, using Python scripts and C++ test harnesses to verify interface signatures against depot binaries. It is mainly useful for CS2 plugin developers and game modders who need up-to-date gamedata signatures after game updates.
|
||||
@@ -0,0 +1 @@
|
||||
This project documents DMA firmware activator protection and cracking techniques for PCILeech-based FPGA devices. It includes SystemVerilog source for PCILeech FT601 basic and advanced firmware configurations, C++ activation signal analysis code, and documentation on signal registers and detection flags used by commercial firmware panels. It is mainly useful for DMA security researchers studying firmware activation mechanisms and anti-crack protections on FPGA-based DMA hardware.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an ARM64 shellcode framework for Android that provides position-independent code execution with Dobby-based symbol resolution. The C codebase includes ELF parsing, proc maps parsing, syscall wrappers, and a modular shellcode loader with custom linker scripts for generating standalone shellcode payloads. It is mainly useful for Android security researchers and exploit developers studying ARM64 shellcode construction and runtime code injection techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an anti-cheat protection system built with C++ and Boost libraries. It implements client-side integrity checking, process monitoring, and tamper detection mechanisms for protecting game applications. The codebase uses Boost.Asio for network communication and various Boost utilities for cross-platform support. It is mainly useful for anti-cheat engineers and game security researchers studying client-side protection system design and implementation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the companion source code for the LearnOpenGL tutorial series, providing progressive C++ examples covering OpenGL fundamentals through advanced rendering techniques. It includes sample code for lighting, model loading with Assimp, shadow mapping, deferred shading, PBR, and post-processing, along with GLFW, GLEW, and GLM dependencies. It is mainly useful for graphics programmers and game developers learning modern OpenGL rendering techniques from scratch.
|
||||
@@ -0,0 +1 @@
|
||||
This project provides the Cormem.sys vulnerable Windows kernel driver binary for security research purposes. The driver exposes memory read and write primitives that can be exploited for kernel-level access, making it a candidate for BYOVD (Bring Your Own Vulnerable Driver) attack research. It is mainly useful for kernel security researchers and anti-cheat analysts studying vulnerable driver exploitation and detection techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows kernel-mode driver that provides read and write memory access through a custom communication channel. It hooks HAL timer query functions for covert user-kernel communication, handles memory operations via packet-based request dispatching, and includes kernel offset resolution and system utility modules. It is mainly useful for kernel security researchers studying covert driver communication techniques and kernel memory access patterns.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a curated collection of vulnerable signed Windows kernel drivers gathered for security research. It includes dozens of .sys driver binaries from various vendors that expose exploitable IOCTL interfaces, memory access primitives, or other security weaknesses. It is mainly useful for BYOVD researchers, anti-cheat engineers, and kernel security analysts studying vulnerable driver cataloging and exploitation surface analysis.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a League of Legends skin changer that modifies client-side skin rendering without altering game files. It includes a C++ DLL injector, pattern scanning tools for finding game offsets after updates, Python-based automated pattern updaters, and community pattern fetching scripts with KsDumper integration. It is mainly useful for game modding researchers and reverse engineers studying League of Legends client internals and runtime memory patching techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a cross-platform C++ game engine with modular libraries covering graphics, physics, sound, networking, math, memory management, threading, and model handling. It supports both Windows (Visual Studio) and macOS (Xcode) builds, includes DXT texture compression tools, and provides a comprehensive standard library abstraction layer. It is mainly useful for engine programmers and game developers studying low-level cross-platform game engine architecture and design.
|
||||
@@ -0,0 +1 @@
|
||||
This project provides scripts and tools to integrate Magisk, KernelSU, and Google Apps into Windows Subsystem for Android (WSA) images locally. It includes Python and shell scripts for extracting WSA packages, patching Magisk and GApps into the system image, and generating installable WSA builds with root access and LSPosed support. It is mainly useful for Android security researchers and developers who need rooted WSA environments for testing and analysis.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a dumped Unreal Engine SDK for Veiled Experts (Project D), containing generated C++ class and struct headers for the game's agents, weapons, vehicles, UI systems, and engine subsystems. The dump includes full class hierarchies, member offsets, and virtual function tables. It is mainly useful for game security researchers and reverse engineers studying Unreal Engine game internals and SDK dumping methodologies.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a CLI tool and firmware patching framework for building and running virtualized iPhones (vphone) on Apple Silicon Macs. It includes Swift source, Python firmware patchers for iBoot, kernel, and TXM components, jailbreak patch sets, ramdisk builders, and research documentation on kernel binary patches and keyboard event pipelines. It is mainly useful for iOS security researchers and emulator developers building custom firmware for virtualized iOS environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a virtual machine-based code protection tool for ARM64 binaries, written in Go. It translates native ARM64 instructions into custom VM bytecode with support for indirect dispatch, chained encryption, CRC integrity checks, and function splitting obfuscation. The repository includes comprehensive demo programs demonstrating individual instruction virtualization and protection strategies. It is mainly useful for binary protection researchers and reverse engineers studying VM-based obfuscation schemes on ARM64 platforms.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Graph Neural Network-based approach to deobfuscating Mixed Boolean-Arithmetic (MBA) expressions. The Python codebase includes training and testing pipelines with datasets from multiple MBA obfuscators including Loki, MBABlast, and MBAObfuscator, organized by variable count and operation depth. It is mainly useful for deobfuscation researchers and security analysts studying machine learning approaches to simplifying obfuscated arithmetic expressions.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the Android kernel source for Xiaomi SM8475 (Snapdragon 8+ Gen 1) devices. It includes the full kernel tree with GKI ABI definitions for multiple vendors, Qualcomm-specific platform support, and device configurations. It is mainly useful for Android kernel developers and mobile security researchers working with custom kernel builds on Qualcomm Snapdragon 8+ Gen 1 hardware.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an external cheat framework for Counter-Strike 2, written in C++. It includes bone-based aimbot logic, entity tracking, ESP rendering, triggerbot, offset management, and a menu configuration system with multi-language documentation in English, Russian, and Chinese. It is mainly useful for game security researchers studying external cheat architecture and CS2 memory reading techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a CS2 external cheat with driver-based memory access, featuring a DirectX overlay, offset management, and game data reading through a kernel driver communication interface. The C++ codebase includes FIFO-based driver communication, overlay rendering, and math utilities for game coordinate calculations. It is mainly useful for game security researchers studying driver-assisted external cheat implementations and overlay rendering techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an external CS2 cheat that uses kernel driver-based remote process memory reading for aimbot, ESP, radar, and miscellaneous game modifications. The C++ codebase includes an ImGui-based DirectX9 menu, recoil control system, config saving, and visual overlay features. It is mainly useful for game security researchers studying RPM-based external cheat patterns and kernel driver communication for game memory access.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows DLL injector that uses vulnerable kernel drivers for injection into protected processes. It bundles multiple .sys driver files and provides a C++ user-mode application that communicates with loaded drivers to perform memory operations and DLL injection. It is mainly useful for game security researchers studying kernel-assisted DLL injection techniques and vulnerable driver exploitation for process manipulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a CSGO cheat framework with an ImGui-based DirectX9 overlay menu and a built-in code editor. The C++ codebase includes FreeType font rendering integration, custom ImGui widgets, and a modular cheat interface with configuration support. It is mainly useful for game security researchers studying cheat UI frameworks and ImGui-based overlay implementations in Source engine games.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a WebAssembly-based Mixed Boolean-Arithmetic (MBA) expression toolkit written in Rust. It provides web-accessible tools for MBA obfuscation, linear congruence solving, permutation polynomial generation, and expression simplification through a browser-based interface with MathJax rendering. It is mainly useful for obfuscation researchers and security analysts exploring MBA expression theory and interactive deobfuscation tools.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a DLL proxy that hooks standard Windows memory API functions and redirects them to a remote device via DMA using the PCILeech/MemProcFS framework. It includes a MinHook-based hooking layer for process, module, thread, and memory operations, a DMA memory library with input and registry access, and a proxy loader application. It is mainly useful for DMA security researchers studying API-transparent remote memory access and DMA-proxied game interaction techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a comprehensive DirectX 11 tutorial and sample code collection built with the Windows SDK. It includes progressive rendering examples with ImGui integration, CMake and Visual Studio build support, and covers topics from basic triangle rendering through advanced techniques like shadow mapping, deferred shading, and compute shaders. It is mainly useful for graphics programmers and game developers learning DirectX 11 rendering pipeline programming.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a lightweight cross-platform C game engine called Bulllord Engine. It includes external libraries for ASTC texture compression, FastLZ, FreeType font rendering, and provides a modular engine architecture with rendering, audio, physics, and asset management subsystems. It is mainly useful for game engine developers and researchers studying compact, C-based cross-platform game engine design.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a collection of Beacon Object Files (BOFs) that use a vulnerable kernel driver (PoisonX.sys) to perform process killing, driver loading and unloading, and file deletion from kernel mode. The C-based BOFs are cross-compiled with MinGW for use in Cobalt Strike or similar C2 frameworks, with a Python helper script. It is mainly useful for red team operators and security researchers studying BYOVD-based process termination and kernel-level file operations through BOF payloads.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows kernel driver that boots a RISC-V Linux emulator inside a bug check (BSOD) screen. It uses a mini-rv32ima RISC-V emulator, BOOTVID for framebuffer rendering during the bug check phase, and an embedded device tree and boot image to run a minimal Linux system. It is mainly useful for kernel researchers and enthusiasts exploring creative uses of the Windows bug check environment and embedded emulation from kernel mode.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an NVIDIA RTX fork of the Godot game engine with enhanced rendering capabilities. It extends the open-source Godot engine with RTX-specific optimizations and features across the rendering server, editor interface, and scene tree systems. It is mainly useful for game developers and graphics researchers working with ray tracing, advanced rendering techniques, and NVIDIA GPU-accelerated game development in the Godot ecosystem.
|
||||
@@ -0,0 +1 @@
|
||||
This project is NVIDIA PhysX SDK version 3.4, a production physics simulation engine for games and interactive applications. It provides rigid body dynamics, continuous collision detection, scene queries, vehicle simulation, cloth, and particle systems with a component-based architecture and cross-platform support. It is mainly useful for game developers and physics engine researchers studying industrial-grade physics simulation implementation and integration.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an Unreal Engine plugin that integrates Claude AI as a development copilot through an MCP bridge. It provides context-aware AI assistance for actors, animations, assets, blueprints, characters, materials, enhanced input, replication, and Slate UI development within the Unreal Editor. It is mainly useful for Unreal Engine developers seeking AI-assisted game development workflows and automated code generation for UE-specific patterns.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a PCILeech FPGA firmware collection supporting multiple DMA hardware configurations including 100T, Squirrel, and Captain variants. It includes Vivado IP cores for PCIe config space, BRAM, clock wizards, FIFOs, and batch scripts for generating firmware builds targeting different FPGA boards. It is mainly useful for DMA security researchers and firmware developers working with PCILeech-compatible FPGA hardware for memory forensics and DMA attack research.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the companion code for the book "Learn FPGA Programming" by Packt Publishing. It contains SystemVerilog HDL examples and testbenches organized by chapter, covering topics from basic logic design through I2C, PS/2, VGA, DDR memory, and complete final projects. It is mainly useful for hardware engineers and security researchers learning FPGA programming fundamentals relevant to DMA hardware and custom hardware development.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a mirror or archive of leaked Counter-Strike: Global Offensive source code. It contains the Source engine codebase with game-specific implementations covering networking, rendering, game logic, and client-server architecture. It is mainly useful for game engine researchers and reverse engineers studying Source engine internals and CSGO's client-server architecture.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a modern C++ game engine built with a data-oriented Entity Component System architecture, Vulkan-based rendering through the RGL abstraction layer, and GameNetworkingSockets for multiplayer networking. It features cross-platform support, CMake-based build system, resource packing pipelines, and a comprehensive set of engine subsystems including input, GUI, and audio. It is mainly useful for game engine developers and graphics researchers studying modern ECS-based engine design with Vulkan rendering.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an AI-powered aimbot that uses machine learning models to detect and aim at targets in games through screen capture analysis. It supports custom YOLO-based models for different games including Fortnite and Rust, uses Conda for environment management, and includes configuration for detection sensitivity and aiming parameters. It is mainly useful for game security researchers studying AI-based cheat detection challenges and machine learning approaches to automated game interaction.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the Android kernel source for Motorola Dubai devices based on the SM7325 (Snapdragon 778G) platform. It includes GKI ABI definitions, Qualcomm-specific drivers, and Motorola device tree configurations. It is mainly useful for Android kernel developers and mobile security researchers working with Qualcomm Snapdragon 778G device kernel customization and analysis.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a UEFI-based bootkit that operates before the Windows kernel loads, built using the EDK-II firmware development framework. It includes OVMF debugging support for QEMU-based development and testing, with a Visual Studio solution for building UEFI applications. It is mainly useful for UEFI security researchers and anti-cheat analysts studying pre-boot attack vectors, bootkit techniques, and firmware-level persistence mechanisms.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a World of Warcraft server emulator targeting the Mists of Pandaria expansion (5.4.7). Built with C++ and CMake, it implements game world simulation, player management, NPC scripting, and network protocol handling for running private WoW servers. It is mainly useful for game server emulation researchers and MMORPG reverse engineers studying WoW server architecture and game protocol implementation.
|
||||
@@ -0,0 +1 @@
|
||||
This project provides a native surface rendering library for Android that creates overlay surfaces without requiring app-level permissions. It includes AOSP-compatible source for Android versions 10 through 14, supporting both surface rendering and screen recording through native Android APIs. It is mainly useful for Android game security researchers and overlay developers studying native surface creation and drawing techniques across Android versions.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source Linux port of Counter-Strike: Global Offensive based on Valve's Source engine. It includes the full game codebase with CMake build support, app framework, material system, sound system, networking, VPC project files, and Linux-specific adaptations including SDL and OpenGL rendering paths. It is mainly useful for Source engine researchers and game developers studying the Source engine architecture and Linux game porting.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a GPU-accelerated Mixed Boolean-Arithmetic (MBA) expression simplification toolkit using CUDA. It includes multiple CUDA kernel implementations for MBA evaluation and simplification, along with JSON-based data handling and custom helper libraries for cooperative groups, memory management, and hashing. It is mainly useful for deobfuscation researchers studying high-performance approaches to MBA simplification using GPU parallelism.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source server emulator for Dark Souls 2 and Dark Souls 3 online services. It implements the game's multiplayer protocol using Protobuf message definitions, supports Docker deployment, and handles player matchmaking, co-op summoning, invasions, and message systems. It is mainly useful for game server researchers and reverse engineers studying Souls-series network protocols and multiplayer server architecture.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Rust-based eBPF security monitoring tool that uses BPF programs for kernel-level event tracing and analysis. It includes a modular crate architecture with BPF ELF loading, perf event handling, CLI interface, and client-server communication for distributed monitoring. It is mainly useful for Linux security researchers and kernel engineers studying eBPF-based runtime monitoring and threat detection systems.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a security research package containing exploit code and jailbreak tools for the Xiaomi C400 router. It includes a Python-based exploit with RNG prediction, formal verification models in Tamarin, handshake sequence documentation, and a separate jailbreak component for gaining persistent access. It is mainly useful for embedded security researchers and IoT exploit developers studying router vulnerability analysis and firmware exploitation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a simplified UEFI application development framework using Visual Studio and the EDK-II toolchain. It provides MSVC project templates, property sheets, and a Python setup script for quickly bootstrapping UEFI application projects without the full EDK-II build complexity. It is mainly useful for UEFI security researchers and bootkit developers who need a streamlined Visual Studio-based UEFI development environment.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a build system that patches Frida to evade common anti-instrumentation detection mechanisms. It uses Python-based patch scripts and name generators to randomize Frida's identifiable strings, symbols, and artifacts during the build process, with WSL build support and comprehensive JavaScript-based testing. It is mainly useful for mobile reverse engineers and security researchers who need stealth Frida builds that bypass anti-Frida detection in protected applications.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the open-source Torque 3D game engine, a full-featured C++ engine with CMake build system, Assimp model importing, and comprehensive engine subsystems for rendering, physics, networking, and scripting. It supports multiple platforms with configurable build options and community-driven development. It is mainly useful for game engine developers and researchers studying open-source 3D game engine architecture and design.
|
||||
@@ -0,0 +1 @@
|
||||
This project is TrinityCore, a comprehensive open-source MMORPG framework implementing a complete World of Warcraft server emulator. The C++ codebase features modular authentication and world servers, asynchronous database pooling with prepared statements, extensive scripting APIs for custom content, and support for multiple WoW expansions including combat, quests, achievements, and battleground systems. It is mainly useful for game server researchers and MMORPG reverse engineers studying large-scale game server architecture and protocol emulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is Unity's official first-person shooter sample game demonstrating production-level game development patterns. It includes character animation systems, weapon handling, networked multiplayer architecture, and comprehensive asset pipelines for a complete playable FPS game built with the Unity engine. It is mainly useful for game developers and Unity researchers studying production FPS game architecture, networking, and animation state machine design.
|
||||
@@ -0,0 +1 @@
|
||||
This project is Valve's Proton, a compatibility layer based on Wine that enables running Windows games on Linux through Steam. It includes build scripts, Docker-based build infrastructure, default prefix configuration, Steam integration manifests, and compatibility fixups for running Windows game binaries on Linux. It is mainly useful for Linux gaming researchers and compatibility layer developers studying Windows-to-Linux game translation and Steam Play technology.
|
||||
@@ -0,0 +1 @@
|
||||
This project is Oracle VirtualBox, a comprehensive open-source x86_64 virtualization platform. It implements a full Virtual Machine Monitor with CPU and memory virtualization, device emulation, guest additions, networking, storage, and remote desktop services across Windows, Linux, macOS, and Solaris hosts. The modular architecture uses kBuild, supports multiple CPU architectures, and provides COM APIs and IOCTL-based driver interfaces. It is mainly useful for virtualization researchers and security analysts studying hypervisor internals, hardware virtualization, and VM-based security research environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is the open-source release of Overgrowth by Wolfire Games, a 3D action game engine and game. It includes the complete game source code with custom engine components for rendering, physics, animation, AI, level editing, and scripting. It is mainly useful for game engine researchers and modders studying commercial game engine internals and open-sourced game codebases.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a kernel-mode DLL injector that uses kdmapper with an Intel vulnerable driver to load a custom kernel driver, then performs manual DLL mapping into target processes from kernel space. The C++ codebase includes PE section mapping, import resolution, TLS callback handling, and user-kernel communication through IOCTL operations. It is mainly useful for game security researchers studying kernel-assisted DLL injection, manual mapping techniques, and vulnerable driver exploitation for process manipulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a proof-of-concept exploit for CVE-2025-26125, a Windows local privilege escalation vulnerability. The C++ PoC demonstrates file or folder deletion abuse to achieve SYSTEM-level access, using MSI-based exploitation with NT API definitions and resource manipulation. It is mainly useful for Windows security researchers and exploit developers studying local privilege escalation techniques and vulnerability reproduction.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a DMA-based radar and ESP tool for Arc Raiders that reads game memory externally through FPGA hardware using MemProcFS.
|
||||
It uses Unicorn Engine to emulate the game's own decryption functions for resolving obfuscated pointers such as GWorld, GameInstance, CameraManager, and BoneBase without manually reversing the decryption logic.
|
||||
The C++ codebase includes DMA initialization, process and module discovery, emulation-based pointer decryption, and a framework for player and actor iteration.
|
||||
It is mainly useful for DMA security researchers studying emulation-assisted pointer resolution and hardware-based external memory reading techniques.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a proof-of-concept for GPU-assisted process hollowing using DirectX 11 shared buffers and compute shaders.
|
||||
The C++ codebase consists of an Injector that encodes shellcode and uploads it to a GPU shared buffer, and a Target that uses an HLSL compute shader to decode the payload on the GPU before executing it on the CPU.
|
||||
Cross-process synchronization is handled through named events and shared memory with DXGI shared handles.
|
||||
It is mainly useful for security researchers studying GPU-based payload transport, compute shader abuse, and novel code injection techniques.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a game market mod for Duckov that implements a flea market system with listing, purchasing, and fulfillment workflows.
|
||||
The C# codebase includes a core module with UI management, network API client with Steam authentication, WebSocket communication, Harmony-based game patches, and a mod loader with version checking and auto-update support.
|
||||
It was developed through reverse engineering of the game's internals, with sanitized and semantically renamed variables for readability and secondary development.
|
||||
It is mainly useful for game modding researchers studying online marketplace integration and reverse-engineered mod architectures.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is an external cheat demo for PUBG built with C++ and the Unreal Engine SDK.
|
||||
It includes a dumped CppSDK with generated class headers, bone helper utilities for skeleton rendering, an ESP and aimbot framework, and an ImGui-based DirectX 11 overlay for rendering.
|
||||
The DLL-injected cheat module handles game memory reading and visual overlays through a separate rendering pipeline.
|
||||
It is mainly useful for game security researchers studying Unreal Engine SDK-based cheat architectures and external overlay techniques.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a QEMU fork by Aleph Security that aims to boot a fully functional iOS system on QEMU with ARM64 emulation.
|
||||
It supports launchd services, interactive bash, read/write secondary disk devices, execution of unsigned binaries, and SSH through TCP tunneling, with optional KVM hardware acceleration.
|
||||
The codebase extends QEMU with iOS-specific machine and device models for XNU kernel emulation on ARM64.
|
||||
It is mainly useful for iOS security researchers and kernel exploit developers studying XNU internals and iOS runtime behavior in an emulated environment.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a C++ scripting plugin for IDA Pro that embeds a Cling/Clang 20-based C++ interpreter directly into IDA's scripting engine.
|
||||
It provides native access to the full IDA SDK and Hex-Rays APIs in a REPL, using the same types (ea_t, func_t*, cfunc_t*) as compiled plugins without FFI or bindings.
|
||||
The plugin includes a snippet editor, output window REPL tab, and cross-platform support for Windows and macOS.
|
||||
It is mainly useful for reverse engineers who want interactive C++ scripting in IDA Pro with direct SDK-level access.
|
||||
@@ -0,0 +1 @@
|
||||
This project is Kong, a tool for deobfuscating or analyzing obfuscated code, likely targeting mixed boolean-arithmetic (MBA) expressions or similar obfuscation patterns. It applies algebraic simplification, pattern matching, or symbolic execution to reduce complex obfuscated expressions back to their original simpler forms. It is aimed at reverse engineers and deobfuscation researchers working with MBA-obfuscated binaries and expressions.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project extracts credentials from PPL-protected LSASS using only Microsoft-signed components already present on the system.
|
||||
It exploits a vulnerable version of Microsoft Defender's KslD.sys driver that exposes IOCTL 0x222044 with sub-commands for arbitrary kernel memory read via MmCopyMemory and CPU control register disclosure for KASLR defeat.
|
||||
The attack chain requires no external driver loading, as it points the service back to the old unpatched driver binary left on disk by Microsoft.
|
||||
It is mainly useful for security researchers studying BYOVD-style attacks using vendor-shipped vulnerable drivers and PPL bypass techniques.
|
||||
@@ -0,0 +1 @@
|
||||
Official AOSP Generic Kernel Image (GKI) common kernel mirror that serves as the shared upstream base all Android device vendors build upon, containing the core kernel source with Android-specific patches, Bazel build integration, and Rust toolchain support used to study kernel attack surfaces and defense mechanisms across the Android ecosystem.
|
||||
@@ -0,0 +1 @@
|
||||
This project is ProMBA, a tool for deobfuscating Mixed Boolean-Arithmetic (MBA) expressions. It applies algebraic simplification techniques, pattern matching, and synthesis-based approaches to reduce complex MBA-obfuscated expressions back to their simpler original forms. The tool handles linear and polynomial MBA transformations commonly used by VM-based protectors. It is aimed at reverse engineers and deobfuscation researchers tackling MBA-obfuscated code in protected binaries.
|
||||
@@ -0,0 +1 @@
|
||||
This project is UAssetGUI, a GUI tool for viewing and editing Unreal Engine .uasset and .umap files. It parses the UAsset binary format and displays exports, imports, name maps, property data, and asset metadata in an interactive tree view with editing capabilities. The C# application supports multiple Unreal Engine versions from UE4 through UE5. It is aimed at Unreal Engine modders and game researchers who need to inspect or modify cooked asset files without the Unreal Editor.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a CS2 (Counter-Strike 2) cheat that operates from a KVM virtual machine using DMA (Direct Memory Access) for memory reading. It runs the cheat logic in a separate VM or host OS, accessing the game's physical memory through DMA hardware or KVM's memory mapping, rendering radar or ESP information outside the game's OS. This architecture makes the cheat invisible to the game's anti-cheat running inside the guest VM. It is aimed at security researchers studying KVM/DMA-based cheat architectures and their detection challenges.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a PE image dumper designed for processes protected by dynamic code encryption such as Hyperion and Theia anti-tamper solutions.
|
||||
It restores encrypted PE images by iteratively resolving NOACCESS pages until the target module is decrypted, with configurable decryption factor thresholds and import resolution support.
|
||||
The C++ tool has been tested on Roblox and The Finals, and also works for dumping regular images and loaded modules from memory.
|
||||
It is mainly useful for reverse engineers and game security researchers studying anti-tamper protections and PE dumping techniques for encrypted executables.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a collection of game hacks for Call of Duty v1.5 demonstrating various cheat implementation techniques.
|
||||
It includes Desk.dll (a multi-hack with wallhack, chams, night-mode, and no-fog), an internal ESP using world-to-screen hooking, OpenGL wallhack via glDrawElements hooking, a syscall-based internal wallhack, and a trainer with pattern scanning.
|
||||
The C++ codebase covers both internal DLL injection and external trainer approaches with detailed screenshots.
|
||||
It is mainly useful for game security researchers studying classic FPS cheat architectures including OpenGL hooking, game loop interception, and pattern-based memory scanning.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a PUBG Mobile cheat for the Gameloop emulator with ESP and aimbot functionality implemented in C++.
|
||||
It uses a kernel driver for memory access, DirectX-based overlay rendering for ESP display, and includes the full Unreal Engine SDK headers for game structure access.
|
||||
The codebase covers driver loading with DSEFix, x64 build configuration, and window detection through process enumeration.
|
||||
It is mainly useful for game security researchers studying mobile game cheat implementations on PC emulators with kernel-level memory access.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a Rust library for interacting with the Windows built-in Intel Processor Trace (IPT) driver from user mode.
|
||||
It provides APIs to start, stop, and retrieve IPT traces through DeviceIoControl calls to the ipt.sys driver, based on reverse engineering of the current Windows IPT driver interface.
|
||||
The library focuses on driver interaction only and does not include IPT trace parsing or coverage analysis functionality.
|
||||
It is mainly useful for security researchers and anti-cheat analysts studying hardware-assisted code tracing on Windows via Intel PT.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a Bash script that automates Android APK reverse engineering tasks including pulling, decoding, rebuilding, and patching APKs.
|
||||
It uses apktool for disassembly and rebuilding, supports Frida gadget injection for runtime instrumentation, handles app bundles and split APKs by combining them into a single APK, and signs the result with apksigner.
|
||||
The tool supports multiple architectures (arm, arm64, x86, x86_64) and works without requiring a rooted Android device.
|
||||
It is mainly useful for mobile security researchers and reverse engineers performing Android app analysis and Frida-based instrumentation.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a headless, extendable, multi-session MCP framework for IDA Pro built with ida-domain and FastMCP.
|
||||
It supports simultaneous analysis of multiple binaries and includes built-in plugins for functions, cross-references, symbol naming, comments, strings, segments, byte patching, types, and entry points.
|
||||
The Python package is extensible through custom plugins via entry points and provides auto-generated documentation.
|
||||
It is mainly useful for reverse engineers seeking AI-integrated, headless IDA Pro analysis through the Model Context Protocol.
|
||||
@@ -0,0 +1,4 @@
|
||||
This project is a Frida-based runtime parsing and hooking framework for Unity IL2CPP games, published as the il2cpp-hooker npm package.
|
||||
It provides runtime parsing of IL2CPP methods, classes, fields, and instances, batch hooking utilities, function return value modification, object hierarchy printing, disassembly with method info, and QBDI-based function emulation.
|
||||
The TypeScript codebase includes JNI RegisterNatives hooking, Il2CppMethod inspection, game object detail display, and an MCP companion version.
|
||||
It is mainly useful for mobile game security researchers and reverse engineers performing runtime analysis and instrumentation of Unity IL2CPP games with Frida.
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user