Add descriptions for archived game security repos batch

Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
2026-06-21 13:56:22 +00:00 · 2026-02-25 03:56:46 +00:00
parent c2891d6d7c
commit eea1cfd7fe
15 changed files with 60 additions and 0 deletions
@@ -0,0 +1,4 @@
+PwnedBoot is a proof-of-concept boot payload that replaces the Windows microcode update DLL to run custom code very early in the boot chain.
+The project is implemented in C and C++ with EFI-focused code, Visual Studio project files, and bundled gnu-efi components.
+Its core technique demonstrates how the bootloader can execute the replacement module under specific boot options and then remap execution to continue boot flow.
+It is mainly useful for boot security research, early-boot attack surface analysis, and anti-cheat threat modeling around pre-OS execution.
@@ -0,0 +1,4 @@
+SecureGame is a Pong-like sample game that places core game logic inside a Windows VBS enclave.
+The solution is split into a host application for rendering and input handling and an enclave DLL that stores runtime state and gameplay rules.
+It uses C and C++ with SDL2, Visual Studio, Windows SDK, and vcpkg-based dependencies on modern Windows systems with VBS features enabled.
+The project is intended for anti-cheat and trusted execution research by showing how sensitive game logic can be isolated from normal user-mode tampering.
@@ -0,0 +1,4 @@
+This project is a compact research example focused on CR3 shuffling behavior in Easy Anti-Cheat protected environments.
+The C++ sample code shows low-level paging logic such as physical memory range walking, directory base discovery, and virtual-to-physical translation checks.
+It is accompanied by reference material that explains why CR3 manipulation complicates external memory inspection workflows.
+Its primary use case is reverse engineering and anti-cheat internals research, especially for understanding page table related protection strategies.
@@ -0,0 +1,4 @@
+efi-memory is a proof-of-concept EFI runtime driver for reading and writing virtual memory from firmware context.
+It uses a SetVariable hook communication method inspired by EfiGuard and includes both firmware-side and user-mode companion components.
+The repository also contains a mapper client derived from a kdmapper-style workflow for manual mapping scenarios on Windows.
+It is mainly aimed at firmware security research, low-level memory access experiments, and game security studies involving pre-OS or runtime driver interactions.
@@ -0,0 +1,4 @@
+This project is an IDA Pro plugin that downloads PDB symbol files from the Unity symbol server.
+It is implemented in C++ as an IDA extension and focuses on automating symbol retrieval during interactive reverse engineering sessions.
+By pulling matching debug symbols, it helps recover names and structural context in Unity-related binaries more quickly.
+The plugin is primarily useful for game reverse engineering and game security analysis workflows inside IDA.
@@ -0,0 +1,4 @@
+This repository is a proof-of-concept framework for accessing protected process memory in game security contexts.
+It is written in C++ with CMake and includes driver-loading helpers, process and module utilities, and memory read and write control routines.
+The implementation is based on a vulnerable-driver mapping approach and demonstrates end-to-end primitives for opening a target process and operating on its memory.
+Its main use case is anti-cheat bypass experimentation and defensive research into how protected memory access techniques are built.
@@ -0,0 +1,4 @@
+mutante is a Windows kernel-mode HWID spoofer designed to alter several hardware identity sources.
+The C and C++ code targets disk serial information, S.M.A.R.T. behavior, and SMBIOS table fields while avoiding permanent hook dependencies.
+It ships as a Visual Studio driver project and reflects an older generation of anti-cheat evasion tooling.
+Today it is most useful as an archival reference for low-level SMBIOS and storage identifier manipulation techniques in game security research.
@@ -0,0 +1,4 @@
+negativespoofer is a boot-time SMBIOS spoofing project that modifies firmware tables before the operating system starts.
+Its implementation follows a Clover-style patching approach and includes C and EFI-oriented code plus separate build and usage guidance.
+By changing SMBIOS data pre-boot, it targets hardware identity signals that are often consumed later by system and security software.
+The repository serves as a historical resource for pre-OS hardware fingerprint manipulation research in anti-cheat and platform security contexts.
@@ -0,0 +1,4 @@
+TPM Spoofer is a proof-of-concept project that explores manipulation of TPM-derived identifiers used in anti-cheat hardware tracking.
+It contains a kernel-mode component that hooks TPM request handling paths and a user-mode utility for reading endorsement key related information.
+The codebase is built with C and C++ on Visual Studio and WDK, and targets modern Windows TPM stack behavior.
+Its primary use case is game security research focused on how TPM and EK-based signals can be inspected, intercepted, and validated.
@@ -0,0 +1,4 @@
+unxorer is an IDA plugin for recovering stack strings from obfuscated binaries through emulation.
+The plugin is implemented in C++ and uses Unicorn to explore branching paths, preserve emulation state, and scan stack data for decoded text.
+It integrates directly into IDA workflows with configurable starting points and output navigation for discovered strings.
+This makes it useful for reverse engineering tasks in malware and game security analysis where stack-string obfuscation is common.
@@ -0,0 +1,4 @@
+IDA2LLVM is a lifting tool that translates IDA microcode into LLVM IR for downstream analysis.
+It is primarily implemented as a Python script using IDA APIs together with llvmlite and includes logic for mapping IDA types and structures to LLVM types.
+The repository also provides sample binaries and generated IR examples to demonstrate translation outputs.
+It is intended for reverse engineering research, binary analysis pipelines, and experiments that combine IDA decompilation artifacts with LLVM tooling.
@@ -0,0 +1,4 @@
+edbgserver is an eBPF-powered debugger server for Android and Linux that avoids the traditional ptrace path.
+The project is written in Rust as a multi-crate workspace with separate CLI, shared logic, and eBPF program components for Arm64 and x86_64.
+It provides breakpoints, stepping, memory and register operations, signal handling, and process library information in a low-intrusion model.
+Its main audience is low-level debugging and security researchers who need alternative instrumentation methods in monitored or restricted environments.
@@ -0,0 +1,4 @@
+This project is a Unity-style reimplementation of Arknights gameplay code without bundled original game assets.
+It is mostly written in C# and organizes systems for characters, monsters, dungeons, UI flows, events, and core game state management.
+The codebase also includes manager layers for resources, audio, shop logic, and Lua script integration points.
+It is useful for developers and researchers studying Unity project architecture and prototyping tower-defense RPG mechanics.
@@ -0,0 +1,4 @@
+EAC Bypass is a Windows proof-of-concept project aimed at debugging applications protected by Easy Anti-Cheat.
+It combines a kernel-mode driver and a user-mode module to interfere with selected anti-cheat callbacks, minifilter behavior, and control paths.
+The implementation is written in C and C++ with Visual Studio and WDK project structure, including user-layer API interception logic.
+Its primary use case is reverse engineering and controlled security testing of anti-cheat protected game processes.
@@ -0,0 +1,4 @@
+NoEye is a BattlEye bypass toolkit intended to counter specific protection behavior in game environments.
+The repository includes native C++ components, a dedicated Windows service layer, and a C# setup application for deployment tasks.
+Its code structure covers service installation, process interaction, and runtime control modules built around Visual Studio projects.
+It is mainly relevant as a historical anti-cheat bypass reference for researchers analyzing older BattlEye-focused techniques.