From eea1cfd7fecf6b1af2febb3d1ef3b888b19f4fa9 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Wed, 25 Feb 2026 03:56:46 +0000 Subject: [PATCH] Add descriptions for archived game security repos batch Co-authored-by: gmh5225.eth --- description/SamuelTulach/PwnedBoot/description_en.txt | 4 ++++ description/SamuelTulach/SecureGame/description_en.txt | 4 ++++ description/SamuelTulach/eac_cr3_shuffle/description_en.txt | 4 ++++ description/SamuelTulach/efi-memory/description_en.txt | 4 ++++ .../SamuelTulach/ida-unity-pdb-downloader/description_en.txt | 4 ++++ description/SamuelTulach/meme-rw/description_en.txt | 4 ++++ description/SamuelTulach/mutante/description_en.txt | 4 ++++ description/SamuelTulach/negativespoofer/description_en.txt | 4 ++++ description/SamuelTulach/tpm-spoofer/description_en.txt | 4 ++++ description/SamuelTulach/unxorer/description_en.txt | 4 ++++ description/Sandspeare/ida2llvm/description_en.txt | 4 ++++ description/Satar07/edbgserver/description_en.txt | 4 ++++ description/Saukiya/Arknights/description_en.txt | 4 ++++ description/Schnocker/EAC_dbp/description_en.txt | 4 ++++ description/Schnocker/NoEye/description_en.txt | 4 ++++ 15 files changed, 60 insertions(+) create mode 100644 description/SamuelTulach/PwnedBoot/description_en.txt create mode 100644 description/SamuelTulach/SecureGame/description_en.txt create mode 100644 description/SamuelTulach/eac_cr3_shuffle/description_en.txt create mode 100644 description/SamuelTulach/efi-memory/description_en.txt create mode 100644 description/SamuelTulach/ida-unity-pdb-downloader/description_en.txt create mode 100644 description/SamuelTulach/meme-rw/description_en.txt create mode 100644 description/SamuelTulach/mutante/description_en.txt create mode 100644 description/SamuelTulach/negativespoofer/description_en.txt create mode 100644 description/SamuelTulach/tpm-spoofer/description_en.txt create mode 100644 description/SamuelTulach/unxorer/description_en.txt create mode 100644 description/Sandspeare/ida2llvm/description_en.txt create mode 100644 description/Satar07/edbgserver/description_en.txt create mode 100644 description/Saukiya/Arknights/description_en.txt create mode 100644 description/Schnocker/EAC_dbp/description_en.txt create mode 100644 description/Schnocker/NoEye/description_en.txt diff --git a/description/SamuelTulach/PwnedBoot/description_en.txt b/description/SamuelTulach/PwnedBoot/description_en.txt new file mode 100644 index 00000000..7131073c --- /dev/null +++ b/description/SamuelTulach/PwnedBoot/description_en.txt @@ -0,0 +1,4 @@ +PwnedBoot is a proof-of-concept boot payload that replaces the Windows microcode update DLL to run custom code very early in the boot chain. +The project is implemented in C and C++ with EFI-focused code, Visual Studio project files, and bundled gnu-efi components. +Its core technique demonstrates how the bootloader can execute the replacement module under specific boot options and then remap execution to continue boot flow. +It is mainly useful for boot security research, early-boot attack surface analysis, and anti-cheat threat modeling around pre-OS execution. diff --git a/description/SamuelTulach/SecureGame/description_en.txt b/description/SamuelTulach/SecureGame/description_en.txt new file mode 100644 index 00000000..6a9a50c2 --- /dev/null +++ b/description/SamuelTulach/SecureGame/description_en.txt @@ -0,0 +1,4 @@ +SecureGame is a Pong-like sample game that places core game logic inside a Windows VBS enclave. +The solution is split into a host application for rendering and input handling and an enclave DLL that stores runtime state and gameplay rules. +It uses C and C++ with SDL2, Visual Studio, Windows SDK, and vcpkg-based dependencies on modern Windows systems with VBS features enabled. +The project is intended for anti-cheat and trusted execution research by showing how sensitive game logic can be isolated from normal user-mode tampering. diff --git a/description/SamuelTulach/eac_cr3_shuffle/description_en.txt b/description/SamuelTulach/eac_cr3_shuffle/description_en.txt new file mode 100644 index 00000000..d8fb5a9b --- /dev/null +++ b/description/SamuelTulach/eac_cr3_shuffle/description_en.txt @@ -0,0 +1,4 @@ +This project is a compact research example focused on CR3 shuffling behavior in Easy Anti-Cheat protected environments. +The C++ sample code shows low-level paging logic such as physical memory range walking, directory base discovery, and virtual-to-physical translation checks. +It is accompanied by reference material that explains why CR3 manipulation complicates external memory inspection workflows. +Its primary use case is reverse engineering and anti-cheat internals research, especially for understanding page table related protection strategies. diff --git a/description/SamuelTulach/efi-memory/description_en.txt b/description/SamuelTulach/efi-memory/description_en.txt new file mode 100644 index 00000000..27ce4718 --- /dev/null +++ b/description/SamuelTulach/efi-memory/description_en.txt @@ -0,0 +1,4 @@ +efi-memory is a proof-of-concept EFI runtime driver for reading and writing virtual memory from firmware context. +It uses a SetVariable hook communication method inspired by EfiGuard and includes both firmware-side and user-mode companion components. +The repository also contains a mapper client derived from a kdmapper-style workflow for manual mapping scenarios on Windows. +It is mainly aimed at firmware security research, low-level memory access experiments, and game security studies involving pre-OS or runtime driver interactions. diff --git a/description/SamuelTulach/ida-unity-pdb-downloader/description_en.txt b/description/SamuelTulach/ida-unity-pdb-downloader/description_en.txt new file mode 100644 index 00000000..d4646564 --- /dev/null +++ b/description/SamuelTulach/ida-unity-pdb-downloader/description_en.txt @@ -0,0 +1,4 @@ +This project is an IDA Pro plugin that downloads PDB symbol files from the Unity symbol server. +It is implemented in C++ as an IDA extension and focuses on automating symbol retrieval during interactive reverse engineering sessions. +By pulling matching debug symbols, it helps recover names and structural context in Unity-related binaries more quickly. +The plugin is primarily useful for game reverse engineering and game security analysis workflows inside IDA. diff --git a/description/SamuelTulach/meme-rw/description_en.txt b/description/SamuelTulach/meme-rw/description_en.txt new file mode 100644 index 00000000..61f4e546 --- /dev/null +++ b/description/SamuelTulach/meme-rw/description_en.txt @@ -0,0 +1,4 @@ +This repository is a proof-of-concept framework for accessing protected process memory in game security contexts. +It is written in C++ with CMake and includes driver-loading helpers, process and module utilities, and memory read and write control routines. +The implementation is based on a vulnerable-driver mapping approach and demonstrates end-to-end primitives for opening a target process and operating on its memory. +Its main use case is anti-cheat bypass experimentation and defensive research into how protected memory access techniques are built. diff --git a/description/SamuelTulach/mutante/description_en.txt b/description/SamuelTulach/mutante/description_en.txt new file mode 100644 index 00000000..2cb01f91 --- /dev/null +++ b/description/SamuelTulach/mutante/description_en.txt @@ -0,0 +1,4 @@ +mutante is a Windows kernel-mode HWID spoofer designed to alter several hardware identity sources. +The C and C++ code targets disk serial information, S.M.A.R.T. behavior, and SMBIOS table fields while avoiding permanent hook dependencies. +It ships as a Visual Studio driver project and reflects an older generation of anti-cheat evasion tooling. +Today it is most useful as an archival reference for low-level SMBIOS and storage identifier manipulation techniques in game security research. diff --git a/description/SamuelTulach/negativespoofer/description_en.txt b/description/SamuelTulach/negativespoofer/description_en.txt new file mode 100644 index 00000000..f481d1b6 --- /dev/null +++ b/description/SamuelTulach/negativespoofer/description_en.txt @@ -0,0 +1,4 @@ +negativespoofer is a boot-time SMBIOS spoofing project that modifies firmware tables before the operating system starts. +Its implementation follows a Clover-style patching approach and includes C and EFI-oriented code plus separate build and usage guidance. +By changing SMBIOS data pre-boot, it targets hardware identity signals that are often consumed later by system and security software. +The repository serves as a historical resource for pre-OS hardware fingerprint manipulation research in anti-cheat and platform security contexts. diff --git a/description/SamuelTulach/tpm-spoofer/description_en.txt b/description/SamuelTulach/tpm-spoofer/description_en.txt new file mode 100644 index 00000000..125fed7b --- /dev/null +++ b/description/SamuelTulach/tpm-spoofer/description_en.txt @@ -0,0 +1,4 @@ +TPM Spoofer is a proof-of-concept project that explores manipulation of TPM-derived identifiers used in anti-cheat hardware tracking. +It contains a kernel-mode component that hooks TPM request handling paths and a user-mode utility for reading endorsement key related information. +The codebase is built with C and C++ on Visual Studio and WDK, and targets modern Windows TPM stack behavior. +Its primary use case is game security research focused on how TPM and EK-based signals can be inspected, intercepted, and validated. diff --git a/description/SamuelTulach/unxorer/description_en.txt b/description/SamuelTulach/unxorer/description_en.txt new file mode 100644 index 00000000..7203a8f0 --- /dev/null +++ b/description/SamuelTulach/unxorer/description_en.txt @@ -0,0 +1,4 @@ +unxorer is an IDA plugin for recovering stack strings from obfuscated binaries through emulation. +The plugin is implemented in C++ and uses Unicorn to explore branching paths, preserve emulation state, and scan stack data for decoded text. +It integrates directly into IDA workflows with configurable starting points and output navigation for discovered strings. +This makes it useful for reverse engineering tasks in malware and game security analysis where stack-string obfuscation is common. diff --git a/description/Sandspeare/ida2llvm/description_en.txt b/description/Sandspeare/ida2llvm/description_en.txt new file mode 100644 index 00000000..8428e289 --- /dev/null +++ b/description/Sandspeare/ida2llvm/description_en.txt @@ -0,0 +1,4 @@ +IDA2LLVM is a lifting tool that translates IDA microcode into LLVM IR for downstream analysis. +It is primarily implemented as a Python script using IDA APIs together with llvmlite and includes logic for mapping IDA types and structures to LLVM types. +The repository also provides sample binaries and generated IR examples to demonstrate translation outputs. +It is intended for reverse engineering research, binary analysis pipelines, and experiments that combine IDA decompilation artifacts with LLVM tooling. diff --git a/description/Satar07/edbgserver/description_en.txt b/description/Satar07/edbgserver/description_en.txt new file mode 100644 index 00000000..299712d6 --- /dev/null +++ b/description/Satar07/edbgserver/description_en.txt @@ -0,0 +1,4 @@ +edbgserver is an eBPF-powered debugger server for Android and Linux that avoids the traditional ptrace path. +The project is written in Rust as a multi-crate workspace with separate CLI, shared logic, and eBPF program components for Arm64 and x86_64. +It provides breakpoints, stepping, memory and register operations, signal handling, and process library information in a low-intrusion model. +Its main audience is low-level debugging and security researchers who need alternative instrumentation methods in monitored or restricted environments. diff --git a/description/Saukiya/Arknights/description_en.txt b/description/Saukiya/Arknights/description_en.txt new file mode 100644 index 00000000..6d6812c1 --- /dev/null +++ b/description/Saukiya/Arknights/description_en.txt @@ -0,0 +1,4 @@ +This project is a Unity-style reimplementation of Arknights gameplay code without bundled original game assets. +It is mostly written in C# and organizes systems for characters, monsters, dungeons, UI flows, events, and core game state management. +The codebase also includes manager layers for resources, audio, shop logic, and Lua script integration points. +It is useful for developers and researchers studying Unity project architecture and prototyping tower-defense RPG mechanics. diff --git a/description/Schnocker/EAC_dbp/description_en.txt b/description/Schnocker/EAC_dbp/description_en.txt new file mode 100644 index 00000000..f7f2f97a --- /dev/null +++ b/description/Schnocker/EAC_dbp/description_en.txt @@ -0,0 +1,4 @@ +EAC Bypass is a Windows proof-of-concept project aimed at debugging applications protected by Easy Anti-Cheat. +It combines a kernel-mode driver and a user-mode module to interfere with selected anti-cheat callbacks, minifilter behavior, and control paths. +The implementation is written in C and C++ with Visual Studio and WDK project structure, including user-layer API interception logic. +Its primary use case is reverse engineering and controlled security testing of anti-cheat protected game processes. diff --git a/description/Schnocker/NoEye/description_en.txt b/description/Schnocker/NoEye/description_en.txt new file mode 100644 index 00000000..891eeb0f --- /dev/null +++ b/description/Schnocker/NoEye/description_en.txt @@ -0,0 +1,4 @@ +NoEye is a BattlEye bypass toolkit intended to counter specific protection behavior in game environments. +The repository includes native C++ components, a dedicated Windows service layer, and a C# setup application for deployment tasks. +Its code structure covers service installation, process interaction, and runtime control modules built around Visual Studio projects. +It is mainly relevant as a historical anti-cheat bypass reference for researchers analyzing older BattlEye-focused techniques.