Add 15 archive descriptions for game security repos

Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
2026-06-21 13:56:22 +00:00 · 2026-02-25 03:48:06 +00:00
parent 02e8221092
commit 4e46ed00e2
15 changed files with 60 additions and 0 deletions
@@ -0,0 +1,4 @@
+This project is a Windows kernel-mode driver proof of concept for enumerating real process directory base values (CR3) from physical memory structures.
+It is written in C++ for the Windows Driver Kit and implements low-level paging helpers, kernel pattern scanning, and PFN database traversal.
+The code initializes self-referencing page table bases, resolves MmPfnDatabase at runtime, and walks physical ranges to recover process context data.
+It is mainly useful for kernel anti-cheat research, memory forensics experiments, and studying how hidden or protected address spaces are tracked.
@@ -0,0 +1,4 @@
+This project is a Windows process injection proof of concept that executes payloads by combining existing system resources instead of creating new ones.
+It is implemented in C++ and focuses on finding leaked process and thread handles, locating pre-existing RWX memory, and queuing special user APCs through NtQueueApcThreadEx2.
+The workflow avoids common high-noise APIs such as VirtualAllocEx, VirtualProtectEx, and CreateRemoteThread, and also includes optional shellcode encryption components.
+It is intended for offensive security research and for evaluating how EDR or anti-cheat products detect low-footprint injection paths.
@@ -0,0 +1,4 @@
+This project is a kernel DLL injector for Windows that hides execution by manipulating page permissions with NX-bit swapping and VAD-related techniques.
+It is primarily written in C with native Windows internals headers and includes code for dynamic kernel data handling, I/O, and loader logic.
+The injector allocates writable pages, modifies page-table behavior under the hood to gain execute capability, and attempts to reduce obvious memory-protection artifacts.
+It targets advanced game security and anti-cheat bypass research where stealthy kernel-assisted injection methods are studied.
@@ -0,0 +1,4 @@
+This project is a command-line utility for removing Authenticode signatures from Windows PE files such as EXE, DLL, and SYS binaries.
+It is implemented in C and provides 32-bit and 64-bit builds along with source code and Visual Studio project files.
+The tool strips signature-related data and addresses PE header edge cases that can interfere with re-signing workflows.
+It is mainly aimed at reverse engineering, malware analysis, and software security testing scenarios that require unsigned binary manipulation.
@@ -0,0 +1,4 @@
+This project is a small Windows proof of concept for detecting Any.Run-like sandbox environments using host artifact checks.
+It is written in C++ and combines folder presence checks, process enumeration, user-profile heuristics, and service or driver lookup logic.
+The sample triggers a detection result only when multiple indicators match expected sandbox traits, demonstrating a layered evasion approach.
+It is intended for malware analysis research and for understanding how sandbox-aware code can evade automated inspection.
@@ -0,0 +1,4 @@
+This project is a collection of Windows process injection techniques that abuse thread pool internals to execute code in remote processes.
+It is written in C++ and implements multiple variants, including worker factory start-routine overwrite and insertion of TP_WORK, TP_WAIT, TP_IO, TP_ALPC, TP_JOB, TP_DIRECT, and TP_TIMER items.
+The codebase includes native API wrappers, handle hijacking helpers, and structured implementations for each thread-pool primitive.
+It is designed for red-team research and for testing anti-cheat or EDR visibility against low-detection injection tradecraft.
@@ -0,0 +1,4 @@
+This project is a reference set of Counter-Strike 2 function-signature notes used to locate internal game routines.
+It is organized mainly as Markdown documentation plus an IDC helper script, with separate pages for features like team switching, item giving, chat handling, and damage-related routines.
+Instead of providing exact universal patterns, it documents string anchors and guidance to refine signature searches across builds.
+It is useful for game reverse engineering, modding research, and maintaining offset and signature updates for security tooling.
@@ -0,0 +1,4 @@
+This project is a Windows x64 utility that exploits a vulnerable CPU-Z driver to disable Driver Signature Enforcement and load unsigned kernel drivers.
+It is written in C++ and contains kernel memory patching logic, system-variable pattern scanning, and helper routines for driver loading workflows.
+The implementation targets g_CiEnable on older systems and g_CiOptions on newer systems, with explicit notes about PatchGuard-related crash risk.
+It is primarily used in kernel security research and anti-cheat bypass experimentation involving unsigned drivers.
@@ -0,0 +1,4 @@
+This project is a simple PE packer that encrypts the .text section of Windows executables and appends a decryption stub.
+It is implemented in C++ with custom PE parsing components for exploring and rewriting sections.
+The default protection method uses XOR encryption as a lightweight demonstration that can be replaced with stronger algorithms.
+It is mainly useful for reverse engineering practice, packer development learning, and basic obfuscation research in game security contexts.
@@ -0,0 +1,4 @@
+This project is an updated and consolidated Half-Life SDK for developing mods across Half-Life, Opposing Force, and Blue Shift.
+It is primarily a large C++ codebase with CMake-based cross-platform build support for modern Visual Studio and GCC toolchains.
+The repository integrates many bug fixes, refactors shared systems to reduce duplication, and provides extensive documentation, tooling, and changelogs for mod developers.
+It is intended for game development and engine-level research rather than cheating, making it valuable for understanding classic FPS code architecture and secure modding workflows.
@@ -0,0 +1,4 @@
+This project is a Linux KVM patch that improves virtual CPU timing behavior to bypass timing-based anti-VM checks.
+It is delivered as a kernel patch with documentation and demonstration artifacts showing reduced detection by common VM-check tools.
+The approach records VM-exit timing characteristics and offsets the guest TSC to make execution timing appear closer to bare metal.
+It is mainly aimed at virtualization security research and testing anti-cheat or anti-analysis timing heuristics.
@@ -0,0 +1,4 @@
+This project is a Visual Studio-oriented template for quickly building GNU-EFI-based UEFI applications for research use.
+It combines C source code, assembly, linker scripts, and bundled GNU-EFI components to provide a ready-to-build environment on Windows.
+The template focuses on simplifying setup and iteration rather than production hardening, making early firmware experiments faster.
+It is primarily useful for firmware security research, boot-stage experimentation, and low-level game security tooling prototypes.
@@ -0,0 +1,4 @@
+This project is a Windows kernel research driver that uses a global exception-hook chain to monitor and obfuscate process address-space switching.
+It is implemented mainly in C with low-level kernel internals work around CR3 handling, exception dispatch flow, and debugger-related paths while aiming to remain PatchGuard-aware and HVCI-compatible.
+The technique logs attempted switches into a protected process context and demonstrates defensive concepts inspired by anti-cheat designs.
+It targets kernel anti-cheat research and advanced studies of memory access control at context-switch time.
@@ -0,0 +1,4 @@
+This project is a single-header, minimalistic hook library for x86-64 systems that supports Windows, Linux, and EFI environments.
+It is written in pure C with no heavy disassembler dependency and includes examples for user mode, kernel mode, and firmware contexts.
+The library emphasizes portability and small integration overhead through platform-specific memory allocate, protect, and free shims.
+It is intended for low-level instrumentation, reverse engineering, and game security research where lightweight hooking is preferred.
@@ -0,0 +1,4 @@
+This project is a proof of concept that hijacks Discord's internal game overlay pipeline from an external process.
+It is written in C++ and demonstrates framebuffer sharing abuse without modifying Discord files, injecting Discord modules, or installing API hooks.
+The sample includes reusable overlay code and example integration for rendering through the trusted overlay path.
+It is mainly used in game security and anti-cheat research to study overlay trust boundaries and detection blind spots.