mirror of
https://github.com/gmh5225/awesome-game-security
synced 2026-06-21 13:56:22 +00:00
Add 15 repository descriptions from archived snapshots
Co-authored-by: gmh5225.eth <gmh5225@users.noreply.github.com>
This commit is contained in:
Cursor Agent
@@ -0,0 +1 @@
|
||||
This project is a collection of proof-of-concept programs for triggering known Android kernel vulnerabilities. It is primarily written in C and includes many CVE-specific samples, including cases tied to vendor drivers and Wi-Fi components. The code demonstrates low-level techniques such as crafted ioctl calls, race conditions, and driver-facing memory manipulation. It is mainly useful for kernel security researchers who want to reproduce bugs, validate mitigations, and study Android exploit primitives.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a native Binary Ninja plugin for removing opaque predicates from obfuscated binaries. It is implemented in modern C++ and analyzes MLIL conditional branches to detect always-true or always-false conditions. The plugin supports single-function and whole-binary passes, configurable limits, and multithreaded processing for speed on large programs. It is intended for reverse engineers who need faster deobfuscation workflows during malware analysis or protected binary research.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an automation toolkit for setting up Linux virtualization environments with anti-detection oriented patches. It is driven mainly by Bash scripts and organizes setup modules for QEMU, EDK2, kernel patching, VFIO passthrough, and deployment helpers. The repository also includes maintained patch sets and auxiliary scripts for host and guest identifier handling. It is primarily used by researchers building reproducible VM labs for anti-cheat behavior testing and virtualization security experiments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an open-source Windows 10 and 11 spoofing and cleanup toolkit. It combines Batch and PowerShell modules to change selected system identifiers, adjust network-related values, and clear common trace artifacts. The workflow integrates external utilities for tasks such as volume ID and SMBIOS-related modification, with extensive notes on platform support and operational limits. It targets game security and anti-cheat research scenarios where analysts need to study hardware and software fingerprinting behavior in controlled test environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Direct3D9 wrapper and proxy DLL framework with a built-in in-game overlay system. It is written in C++ and provides an on-screen console, text feed rendering, and a plugin interface for loading external feature modules. The codebase relies on DirectX 9 components and Detours-style interception to integrate into target applications. It is mainly intended for single-player game modding, UI instrumentation, and graphics overlay development.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a starter template for building Windows kernel-mode drivers with CMake and KMDF. It is primarily C++ and includes scaffolding for driver entry, WDK integration through FindWDK, and optional compile-time obfuscation helpers. The setup is designed to simplify toolchain configuration across Windows target versions while keeping the code close to real kernel constraints. It is useful for security researchers and low-level developers who need a clean baseline for driver prototyping.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Frida-based tracing toolkit for observing Android smali instruction execution at runtime. It uses JavaScript and TypeScript agents to hook ART interpreter paths and emit detailed execution logs. The documentation explains how to locate architecture-specific offsets and registers with static analysis tools such as IDA before running traces. It is intended for Android reverse engineering and mobile security research focused on runtime behavior analysis.
|
||||
@@ -0,0 +1 @@
|
||||
This project is an Android-focused stack tracing and hook analysis tool built on eBPF. It combines a Go userland controller with eBPF C programs to trace syscalls, user-space probes, and hardware breakpoints on arm64 systems. The tool can capture arguments, registers, and call stacks, and also supports filtering, structured output, and optional Frida RPC integration. It is aimed at mobile security and game protection research where deep runtime telemetry is needed on rooted devices.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows kernel driver for removing forensic traces left by loading other drivers. It contains C++ kernel-mode routines that target structures such as MmUnloadedDrivers, PiDDBCacheTable, and code integrity hash caches. The implementation relies on version-specific offsets and low-level kernel data structure manipulation. It is mainly used in anti-cheat and driver forensics research to study what artifacts are created and how detection logic can track them.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a kernel-mode external framework for interacting with a first-person shooter game from a Windows driver. It is written in C++ as a KMDF driver and includes modules for memory access, drawing helpers, key handling, and game-specific offsets. The architecture demonstrates how cheat logic can be moved into kernel space rather than a conventional user-mode process. It is primarily relevant to game security research on kernel-level attack surfaces and anti-cheat bypass techniques.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a proof-of-concept Windows kernel driver for drawing graphics without installing traditional hooks. It is implemented in C++ and focuses on calling GDI-related kernel paths by spoofing required thread context values to satisfy internal checks. The sample includes supporting primitives and notes about version-dependent NT offsets and loading methods. It is mainly used for low-level graphics and anti-cheat evasion research in controlled environments.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a small utility for copying certificate data from one PE file to another executable. It is written in C++ and parses PE headers to locate and duplicate the Authenticode security directory blob. The resulting file carries copied certificate metadata but does not become a valid trusted signature, which is useful for testing verifier behavior. It is intended for Windows security research on signature handling, tampering detection, and trust pipeline edge cases.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a Windows driver triage utility that scans folders for potentially risky kernel drivers. It is implemented as a C++ console application that parses PE imports and flags binaries containing selected driver-related APIs. The current detection logic is simple and focuses on indicative imports rather than full behavioral analysis. It is useful for preliminary vulnerable-driver hunting and kernel attack surface assessment in security research workflows.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a toolkit of scripts that helps reverse engineers analyze Go binaries in IDA Pro. It is mainly written in IDAPython and is organized as a step-by-step workflow covering binary identification, pclntab recovery, function discovery, string handling, and type extraction. It also includes a YARA rule for quickly spotting Go executables across PE, ELF, and Mach-O formats. The primary use case is malware and threat analysis where stripped or heavily optimized Go samples are difficult to read manually.
|
||||
@@ -0,0 +1 @@
|
||||
This project is a cross-platform, fiber-based task scheduler designed for high-performance game workloads. It is a C++ library that provides multi-threaded job execution, task grouping, work-stealing style scheduling behavior, and platform abstractions for Windows and POSIX targets. The repository includes extensive tests, examples, and third-party low-level context-switching components needed for fiber systems. It is primarily aimed at engine programmers who need a scalable job system for parallel game logic and rendering pipelines.
|
||||
Reference in New Issue
Block a user