mirror of
https://github.com/gmh5225/awesome-game-security
synced 2026-06-21 13:56:22 +00:00
Add 15 English repository descriptions from archives
Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1 @@
|
||||
This project is a proof-of-concept Android detector for identifying Zygisk-style process injection behavior. It implements detection logic in C++ and JNI by forking a child process, attaching with ptrace, and reading PTRACE_GETEVENTMSG artifacts. The repository includes a sample APK and runtime logs showing how several Zygisk forks can be detected while baseline implementations may differ. It is mainly useful for mobile anti-cheat and root-detection research focused on runtime integrity checks.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an IDA Pro plugin that uses local LLMs to explain decompiled functions and suggest better variable names. Built in Python for IDAPython, it integrates into the pseudocode UI with context-menu actions and keyboard shortcuts. It supports configurable model backends and localization through plugin settings and translation files. It is aimed at reverse engineers who want to accelerate malware analysis and game security research workflows inside IDA.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an archive-style collection of Android proof-of-concept apps used to detect root, Magisk, and related tampering environments. It aggregates many APK samples and documents checks such as Zygisk detection, hook and instrumentation detection, bootloader or ROM checks, and root app discovery. The repository also provides hashes and references to help analysts compare sample behavior across tools. It is primarily intended for mobile security analysts and anti-cheat researchers studying real-world root-detection techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a small Android proof of concept that detects known root-management applications on a device. The app is written in Java and checks target package and activity pairs by attempting launches and interpreting security exceptions. It ships as a minimal Gradle-based Android project with a simple UI to rescan and display findings. It is useful for mobile anti-cheat and integrity teams validating app-presence based root detection.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a security training lab of intentionally vulnerable MCP servers for hands-on attack and defense exercises. It includes scenarios such as path traversal, indirect prompt injection, eval-based code execution, typosquatting, outdated dependencies, and secret leakage. The implementations are mainly in Python and JavaScript and include per-scenario documentation plus client configuration snippets for reproducible demos. It targets security researchers and red-team practitioners who want to assess AI agent toolchain risks in controlled environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a high-performance runtime x86-64 assembler library written in C. It provides an instruction IR, fast assembly and execution helpers, relative reference linking, rich operand macros, and debugging utilities such as IR stringification. The library supports many x86 extensions including AVX-256 and is designed for very low-latency dynamic code generation workloads. It is best suited for JIT compilers, emulators, runtime optimization, and systems research.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Linux runtime security and observability platform built on eBPF event collection. It is implemented primarily in Go and combines low-level kernel telemetry with higher-level detections for suspicious behavioral patterns. The codebase includes container and Kubernetes deployment paths, extensive detection content, and tooling for production-scale monitoring. It is aimed at cloud and host security teams performing threat detection, incident response, and runtime forensics.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a VMProtect devirtualizer that lifts virtualized code into analyzable LLVM-oriented output. It uses Triton for emulation and symbolic execution, identifies VM handlers through AST pattern matching, and reconstructs control-flow structure from virtual execution. The toolchain includes custom optimization passes and workflows around intrinsics and virtual entry-point analysis. It is intended for reverse engineering research on protected binaries, including anti-cheat and software protection studies.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an ELF binary packer designed to protect executables used on untrusted systems. It offers a password mode and a challenge-response mode based on Curve25519 key exchange with AES-128 and HMAC-SHA256. The implementation supports cross-architecture packing across Linux and FreeBSD targets including x86, x86-64, and ARM. It is aimed at security practitioners who need to harden sensitive tooling during controlled assessments and deployments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an interactive terminal resource monitor for CPU, memory, disks, network, processes, and optional GPU metrics. It is written in modern C++ and provides a fast TUI with mouse support, process filtering, configurable views, and theme customization. The codebase is cross-platform across Linux, macOS, and BSD variants with flexible build and packaging options. It is intended for developers, operators, and security engineers who need real-time host telemetry in terminal environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an IDA Pro plugin that replaces and extends the default IDAPython scripting namespace. It reorganizes disassembler APIs into a simpler Python interface and adds capabilities such as tagging, filtering, and streamlined database and function automation. The repository includes installation guidance, modular abstractions, and documentation for building rapid reverse-engineering scripts. It is primarily used by reverse engineers who want faster annotation, navigation, and analysis workflows.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a curated index of Rust resources for building and researching World of Warcraft private server ecosystems. It catalogs server implementations, protocol and file-format libraries, and supporting tools such as renderers and asset viewers. The collection emphasizes practical references for authentication, networking, data formats, and emulator-adjacent tooling. It serves Rust game-server developers and reverse engineering enthusiasts exploring WoW emulation technology.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an experimental Rust-based emulator for the World of Warcraft 3.3.5 server stack. It currently focuses on the authentication server and is designed to interoperate with TrinityCore-style database schemas. The codebase uses async Rust components, SQL-centric workflows, and containerized setup paths to support development and testing. It targets developers and protocol researchers building safe, modular, and modern infrastructure for game emulation.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows kernel proof of concept for interfering with PatchGuard execution behavior. It includes a driver and low-level assembly hook logic that observes or short-circuits specific dispatch paths in protected routines. The implementation is focused on Win8 through Win10-era systems and documents call-chain analysis from kernel debugging sessions. It is intended for kernel security and anti-cheat researchers studying PatchGuard internals and bypass concepts.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows kernel driver mapper that uses a signed helper driver to map an unsigned payload driver. It combines user-mode and kernel-mode components, transfers mapped images through kernel hooks, and attempts to clean common forensic traces such as unloaded-driver and cache artifacts. The repository includes an example entry contract for mapped drivers and buildable Visual Studio projects for the full mapping flow. It is aimed at low-level game security and kernel research where driver loading behavior and stealth tradeoffs are being studied.
|
||||
Reference in New Issue
Block a user