awesome game security [Welcome to PR]
This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.
The AI-friendly C23 compiler for security research. Pure C23, integrated linker, DynCode pipeline, cross-platform PE/ELF/Mach-O generation, compile-time string encryption, and a plugin API spanning 130+ compiler phases — designed so LLM-generated code compiles correctly more often than C++…
The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (libneverd) built for CLI tools, integrators, and AI agents.
[A comprehensive list of custom game engines]
[Awesome Game Engine Development]
[Graphic Engine & Game Engine lists]
[A list of open source game engines]
从零编写游戏引擎教程 Writing a game engine tutorial from scratch
[Unreal]
[Unreal]
[Unreal Engine / game development programming guide]
[Unity Design]
[Apple's Metal Api]
[Game optimization notes focused on Unity and Unreal Engine]
[C# reference]
Multi-platform framework for building 2d games, interactive books, demos and other graphical applications. It is based on cocos2d-iphone, but instead of using Objective-C, it uses C++. It works on iOS, Android, Windows Phone, macOS, Windows and Linux.
Cocos simplifies game creation and distribution with Cocos Creator, a free, open-source, cross-platform game engine. Empowering millions of developers to create high-performance, engaging 2D/3D games and instant web entertainment.
A game engine, a framework for 3D rendering and game development for Python and C++ programs. [Modified BSD] website
The 2013 edition of the Source SDK by Valve Software. [Info | Wiki]
Modified source engine (2017) developed by valve and leaked in 2020. Not for commercial purporses
[GoldSource engine rebuild]
[Rust toy engine/renderer with Valve Source format loaders (bsp/mdl/vpk/vtf) and Vulkan/Metal/WebGPU backends]
Well documented 3D game engine inspired by industry standards.
Lina Engine is an open-source , modular, tiny and fast C++ game engine, aimed to develop 3D desktop games.
[Open-source C++ Vulkan game engine with editor tooling and shipped commercial titles on Steam, PSN, iOS, and macOS]
Luanti (formerly Minetest) is an open source voxel game-creation platform with easy modding and game creation
Fully featured, MIT licensed, game engine. It focuses on having great tools, and a visual oriented workflow that can export to PC, Mobile and Web platforms with no hassle. The editor, language and APIs are feature rich, yet simple to learn, allowing you to become productive in a matter of hours.
[NVIDIA fork of Godot Engine]
3D C++ Game Engine - yet another open source game engine
Free lightweight, cross-platform 2D and 3D game engine implemented in C++ and released under the MIT license. Greatly inspired by OGRE and Horde3D.
[Pure Go game engine with Vulkan rendering, ECS, physics, and headless screenshot tests]
[Rust Vulkan engine with render graph, ECS, asset pipeline, and deferred pipelines]
[Rust data-oriented game engine with custom ECS and wgpu PBR renderer (native/web/VR)]
[Rust 2D]
Upgraded features including audio, physics and particles. Built on Irrlicht.
[Half-Life 1]
[Half-Life SDK]
[Half-Life SDK]
[Half-Life Master Server]
[Cross-platform Java game development framework]
[C++ 2D]
[C++ 2D]
[C++ 2D/3D]
[HTML5/WebGL/WebGPU game and rendering engine]
[HTML5 3D]
Hazel is primarily an early-stage interactive application and rendering engine for Windows. [Apache-2.0 license]
[C# support and WYSIWYG editor]
High-performance game engine with editor and AAA quality animation graph.
[Doom source port, GZDoom continuation]
Nebula is an open-source and free-to-use modern C++ game engine.
[cross-platform C++]
[A fighting game engine written in Unreal Engine 5]
[3D rendering engine]
[C++ 2D/3D]
[C++ 2D/3D]
[C++ 2D/3D]
[C++/C# 3D]
[Open-source C# 3D game engine with Unity-like editor (MIT)]
[pixels]
[Old engine]
[Research-focused game engine designed for real-time solutions]
[Improved version of the X-Ray Engine]
[2D game framework for Lua]
[Open-source cross-platform 2D/3D/multiplayer game engine]
[Multi Theft Auto — networked multiplayer engine/mod framework for GTA: San Andreas]
[3D voxel sandbox game written by Zig language]
[Retro Engine v5 / v5Ultimate decompilation]
[WIP decompilation of Barnyard and the proprietary TOSHI 2.0 engine, with Ghidra RE workflow]
[Kingdom Hearts reverse-engineering libraries, tools, engine research, and modding documentation]
[Vulkan modernization fork of the Poseidon/CWR-CE engine (Arma: Cold War Assault)]
[C++23 Vulkan game engine with ECS, editor, and asset pipeline]
[Experimental C++23 engine with Vulkan, ECS, Linux kernel IPC module, and Morton spatial partitioning]
[C++20/Vulkan/CUDA engine with render graph, clustered deferred PBR, ECS, and wave-survival test game]
[C++20 game engine with dual OGRE renderers, Lua scripting, and AI-native editor over MCP]
[Native TypeScript game engine compiling to Metal, DirectX 12, Vulkan, OpenGL, and WebGPU]
[Open-source C++23 3D engine with DirectX 12/Vulkan RHI, ECS, Jolt Physics, and ImGui editor]
[Cross-platform C++ ECS game engine with editor, Lua/C++ scripting, and DirectX/OpenGL/Metal/Vulkan backends]
[Modular C++20 game/application framework with OpenGL ES, Vulkan, DirectX, and BGFX backends]
[Data-driven C++ game engine with modular Vulkan renderer, flecs ECS, Lua scripting, and ImGui editor]
[WIP Vulkan game engine with hot-reloadable modules, clustered forward rendering, PBR, and editor viewports]
[C++ Windows OpenGL game engine with deferred/forward rendering, tests, and CI (pre-alpha)]
. Unreal Engine integration for .NET 6 (C#).
is a Houdini Engine Plugin for Unreal Engine that brings Houdini's powerful and flexible procedural workflow into Unreal Engine through Houdini Digital Assets. Artists can interactively adjust asset parameters inside the editor and use Unreal assets as inputs. Houdini's procedural engine will then…
. Render Live2D models in Unreal Engine 4.
. Lua API integration plugin for Unreal Engine 4.
[UE 5.8 plugin that auto-builds an in-game cheat menu by reflecting UCheatManager and registered cheat extensions]
. Set of Hermes deep-link endpoints for Unreal Engine.
[Unreal Engine 5.6+ event-driven progression/quest framework with visual graph authoring]
[Claude Code CLI integration for Unreal Engine 5.7; AI coding assistance with built-in UE5.7 documentation context in the editor]
ChatGPT integration with Unity Editor.
[AI automation skills specifically designed for Unity]
[CLI to control Unity Editor from terminal — compile, test, build, inspect GameObjects; 80+ commands, AI-agent ready (Claude Code plugin, Agent Skills)]
[Cross-platform cross-version Godot 4.x mod loader with script patching, Lua hooks, and runtime mod loading without modifying game files]
[Sandboxing that enables safe modding for Godot games]
[3D Plush Character for Godot 4.x]
[Godot editor export plugin for remapping resources by feature tags]
[Map downloader]
[Mobile Game]
DirectXMath is an all inline SIMD C++ linear algebra library for use in games and graphics apps
Maths library for games. BSD-2-Clause
Single-header file, lots of graphics & utility functions.
[C++23 constexpr math/physics framework for game, mod, and cheat development]
[Rendering library]
[Rendering library]
[Physically Based Rendering: From Theory To Implementation]
Tiny C++ Software Renderer / Rasterizer, and implements OpenGL and Vulkan renderers for comparison
A Non-Euclidean Rendering Engine for 3D scenes.
[OpenGL Render]
[RayTracer]
[Xash3D FWGS with a real-time path tracing]
[A generic post-processing injector for games and video software]
[3D rendering engine]
[Real-time rendering engine]
[A brief computer graphics / rendering course]
[Render fonts]
[DirectX 12, Metal & Vulkan]
[Experimental real-time global illumination renderer]
[Experimental hot-reloading Vulkan renderer/engine (C/C++) for Linux and Windows]
[DirectX 12, Metal & Vulkan]
[JavaScript 3D Library]
[3D Gaussian Splat Editor]
[Local image-to-3D mesh desktop app; open-source AI on GPU; Windows/Linux; extensible generators]
[Claude skillset: single image to 3D meshes (.glb/.obj), Gaussian splat environment (.spz), and SFX; World Labs + FAL; Unity/Unreal/Godot/Blender]
[CLI-first YAML→3D pipeline: GPT Image 2.0 concept → TRELLIS.2 GLB; QA gate, review HTML, web/Unity/Unreal export; mock & remote GPU runners]
[AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
Parse, decode, and rasterize characters for TrueType fonts. Single header file.
A JPEG image codec that uses SIMD instructions to accelerate baseline JPEG encoding and decoding. [IJG & BSD-3-Clause & zlib] website
Simple 2D Graphics Library. [MIT]
[Rust raster image editor — layers, wgpu GPU filters, Rhai scripting, CLI batch, GIF/APNG, single portable binary]
Tiny but powerful single-file wavefront obj loader.
Game Network Programming
A lightweight online game framework
[Server Engine]
Ultra fast and low latency asynchronous socket server & client C++ library with support TCP, SSL, UDP, HTTP, HTTPS, WebSocket protocols and 10K connections problem solution. [MIT]
A modern C++ network library for developing high performance network services in TCP/UDP/HTTP protocols.
[C++ network library for client/server games]
[Rollback networking SDK using input prediction and speculative execution; includes the Vector War sample]
[Safe Rust reimagining of GGPO with a request-based API; includes P2P, spectator, and sync-test examples]
[C/C++ P2P rollback networking SDK inspired by GGPO and GGRS, with input prediction and speculative execution]
[Dark Souls 3]
[Dark Souls 2]
[Killing Floor UE2.5 headless client with protocol docs, Steam auth RE, and Ghidra scripts]
[Pokemon TCG Online private server emulator]
[RE toolkit for BEMANI arcade titles: network service emulation, packet sniff/redirect/reconstruct, and binary asset unpack/repack utilities]
[Server for WOW]
[WebSockets]
[mqtt nodejs]
[mqtt cpp]
[Server framework]
[Rust server-authoritative Bevy multiplayer library with prediction, rollback, and WebTransport/wasm support]
[Server for WOW]
[Rust Server for WOW]
[Rust Server for WOW]
[Server for Source Engine]
[JWT toolkit — validate, forge, scan, tamper; CVE tests (alg=none, RS/HS256, key injection, etc.), fuzzing, dict attack]
[Self-hosted reverse geocoding from OpenStreetMap; Traccar stack; Rust server + C++ PBF indexer, Docker]
NVIDIA PhysX SDK
An open-source realtime physics engine middleware SDK developed by Nvidia as a part of Nvidia GameWorks software suite. [BSD-3-Clause]
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
A collection of free software and free culture resources for making amazing games. (mirror)
Educational games to learn editors, languages, programming
[A list of open source games]
[Collection of Games]
[A collection of open source c/c++ libraries for gamedev]
[Game design documents]
[Game Development resources]
[Unity Design]
[Building game development ecosystem for ziglang]
[Video game tech analysis resources]
[Game Development resources]
[Game Development notes]
[GTA V Source Code Build Tutorial]
[Leaked CSGO]
[Leaked CSGO With CI]
[Leaked Far Cry 1]
[Leaked Far Cry 1]
[Open Source CSGO]
[COD4 Open Source Reimplementation]
[COD:Black Ops Open Source Reimplementation]
[CSGO Mod]
[Rewrote CS1.6]
[Reversed CS1.6]
[Reversed CS1.6]
[Reversed GTA III, Vice City]
[Reverse Engineered GTA III and GTA VC]
[Reimplementation of GTA:SA 1.0 US]
[GTA IV: Complete Edition fixes and modern-feature patch (graphics, FPS, QoL, scripting, widescreen)]
[Code snippets for Vice City]
[UE4 C++ examples]
[UE4 FPS Game]
[UE4 FPS Demo]
[UE4 FPS Demo]
[UE4 FPS Game]
[UE4 Game]
[UE5 FPS Game]
[UE5 FPS Game]
[UE5 FPS Game]
[UE5 horror game with anti-cheat]
[UE5 Card Game]
[UE5 Fighting Game]
[UE5 StreetFighters Game]
[UE5 constraining system]
[UE5 2D template]
[UE5 Roll a Ball Game]
[UE Roguelike Game]
[Unity Game]
[Unity FPS]
[Unity SQLite]
[Unity MoBa]
[Unity mini DNF]
[Unity VRChat Template]
[Unity Arknights]
[Mini Game With Server]
[DX11 Mini Game]
[DX9/11 Mini Game]
[Overgrowth]
[Modification For Half-Life]
[A small online game similar to MapleStory]
[WinAPI MapleStory]
[Godot MapleStory]
[Demonstration and Template Projects for Godot]
[Fortnite]
[Doom running in the NT kernel]
[Remake of Super Mario]
An open source re-implementation of RollerCoaster Tycoon 2 🎢
[Reverse-engineered HLDS]
[Android Mod Loader]
[PlantsVsZombies]
[PlantsVsZombies]
[wow launcher]
[Spider-Man Remastered Mod]
[Sample games using the Google Play Games C++ SDK]
[Simple fake Physics for UnrealEngine4 & 5]
[UE4 VTuber]
[Slay The Spire Remastered Mod]
[A reimplementation of Zelda 3]
[Dead By Daylight Copy]
[Red Alert 2: Yuri's Revenge engine extension]
[A racing game based on OpenGL]
[HL2-style, classic FPS movement for UE4 implemented in C++]
[Texas Holdem Poker made by JS]
[A simple and easy-to-use library to enjoy videogames programming]
[3D Extension Library for raylib]
[A cross-platform, open-source, pure C game engine for mobile game]
[lightspeed lightweight elegant game engine in pure c]
[Pure C Game Engine]
[a Dark-Souls like action platformer using UE4]
[Reimplementation of Captain Claw (1997) platformer]
[Reversed Devilution]
[FPS Game]
[Pixels style]
[JinYongLegend]
[Piano Game]
[Remake of MapleStory]
[Remake of Jazz Jackrabbit 2]
[Command and Conquer: Red Alert]
[Red Alert 2 on Web]
[Awesome MCP]
[Blender Model Context Protocol Integration]
[MCP for Unreal Engine]
[MCP for Unreal Engine]
[MCP for Unreal Engine 5]
[UE4SS Lua bridge with Python MCP driver for live UObject/UFunction control and verified agent write claims]
[MCP for unity]
[MCP for unity]
[MCP for unity]
[Engine-agnostic MCP server shared by Unity-MCP, Godot-MCP, and Unreal-MCP]
[Composite MCP server for Godot Engine AI-assisted game development]
[MCP for Roblox Studio]
[DayZ MCP server with 53 tools for mod build/run, server-authoritative world control, telemetry, and automated in-game testing]
[MCP for Ghidra]
[MCP for Ghidra]
[ghidra-headless-mcp — headless Ghidra over MCP]
[MCP for IDA pro]
[IDA Pro JSON-RPC daemon for LLM/agent-assisted RE: decompile, xrefs, types, patches; headless & GUI; ghidra-rpc-compatible CLI]
[Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
[Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
[Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
[MCP for IDA pro(headless)]
[MCP for IDA pro]
[MCP for IDA pro]
[MCP for IDA pro]
[MCP for IDA pro]
[IDA Codex MCP]
[Generate CS2 signatures via Agent SKILLS with ida-pro-mcp]
[A headless, extendable, multi-session, IDA Pro MCP framework]
[Headless IDA Pro MCP server]
[MCP for Binary_Ninja]
[MCP for Binary_Ninja]
[Headless Binary Ninja MCP server with 181 RE tools for AI agents — disassembly, IL, patching, types, xrefs, undo/redo, and scripting without a GUI]
[Radare2 MCP Server]
[Cursor Talk To Figma MCP server]
[MCP server that provides conversion between hexadecimal and decimal numbers]
[MCP for GDB]
[Lightweight MCP server for GDB automation (FastMCP, SSE, gdb-command proxy)]
[MCP for WinDBG]
[Windows CLI + MCP for WinDbg/TTD: replay .run traces, dump triage, live probes; JSON for AI agents; Rust]
[MCP for x64Dbg]
[MCP for x64Dbg with extensive tooling]
[MCP for Reclass]
[MCP for LLDB]
[MCP for Android]
[Cheat Engine-like but MCP]
[Linux-native MCP server for PCILeech/MemProcFS DMA memory R/W, RE scanning, and UE/Unity SDK dumping]
[MCP server for .NET assembly RE, IL2CPP/Unity dump analysis, cross-refs, and network patching (31 tools)]
[MCP for Cheat Engine]
[MCP for Cheat Engine]
[MCP for Cheat Engine]
[MCP for runtime analysis and process hacking; ProcessHacker for AI agents, extensible with DLL plugins]
[C++17 MCP server for Windows game memory R/W, scanning, DLL injection, IAT hooking, speedhack, and anti-cheat detection]
[A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)]
[Headless JADX MCP server for AI-driven Android APK/DEX/AAB reverse engineering]
[Built-in MCP for mobile RE — CLI verbs (disasm, search, cfg-of, dex-callers, bin-search, insn-search, etc.) as MCP tools on APK/IPA/AArch64; glass mcp]
[Android Proxy MCP — HTTP/HTTPS packet capture for AI assistants, mitmdump + SQLite + natural language query]
[MCP for deepwiki]
[A high-performance implementation of the MCP protocol in Zig]
[Interactive User Feedback MCP]
[A native macOS MCP server for collecting interactive user feedback with AppleScript dialogs and image support]
[MCP for Jupyter]
[MCP for Burp Suite]
[Binary analysis MCPs collections]
[MCPSafetyScanner - Automated MCP safety auditing and remediation using Agents]
[A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers]
[WinDbg Copilot - Agentic Debugging extension]
[Autonomous Windows POC developer from patchwatch diff reports; Claude agent + MCP (Hyper-V, kd, Ghidra) to write, build, and verify PoCs on pre-patch VMs]
[Open agentic coding for web games end-to-end from prompts; Game Skill (template + debug); GameCoder-27B; OpenGame-Bench; qwen-code-based CLI]
[Codex skills for game-ready 2D sprites, layered maps, and engine-ready prototypes (Godot/Unity)]
[Local cockpit for Codex imagegen workflows — pixel art, region-based editing, animation frames and sprite sheets via codex-handoff inbox/outbox; no direct OpenAI API calls]
[Autonomous game development for Godot, Bevy, and Babylon.js with Claude Code and Codex; plans, generates assets, screenshot-guided self-repair]
[Multi-engine AI agent scaffold for Unity/Unreal/Godot/HTML with Claude, Codex, Cursor, OpenCode, and Kiro harnesses]
[66 version-pinned game-dev Agent Skills plus router for Godot/Unity/Unreal and other engines across Cursor/Claude/Codex]
No attribution, retro (PS1 style) 3D graphics assets.
[Retro game console icons in multiple PNG sizes; TrimUI/Miyoo themes]
[AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
[Codex/Claude skill for generating clean 2D game sprites and animation atlases via component-row state pipelines, alpha cleanup, frame extraction, and runtime atlas output]
[God of War 2018]
[Runtime 3D Asset Delivery]
[Header only C++11 tiny glTF 2.0 library]
[CLI-first YAML→3D pipeline: GPT Image 2.0 concept → TRELLIS.2 GLB; QA gate, review HTML, web/Unity/Unreal export; mock & remote GPU runners]
[Viewing and modifying UE4 game assets]
[Accessing, reading and deserializing UE4 assets]
[A low-level .NET library for reading and writing Unreal Engine game assets]
[Rust cross-platform Unreal Engine pak/UAsset explorer and extractor (pak v3–v11, textures/meshes/audio export)]
xLua is a lua programming solution for C# ( Unity, .Net, Mono) , it supports android, ios, windows, linux, osx, etc.
HybridCLR是一个特性完整、零成本、高性能、低内存的Unity全平台原生c#热更新解决方案。 HybridCLR is a fully featured, zero-cost, high-performance, low-memory solution for Unity's all-platform native c# hotupdate.
[The collecting ideas on how to do Test Automation in Games]
[Unity Automated QA Guidebook]
[UI Automation Framework]
[Performance Analysis]
[Detecting High PC Uptime]
[Graphics Performance]
[Server Testing]
[Performance Monitor]
[A realtime CPU/GPU profiler]
[Monitor GPU/CPU/RAM performance]
[C/C++ Performance Profiler]
[C++ frame profiler]
[C++ Profiler For Games]
[Automating certain tasks in the Unreal editor]
[Facilitates setting up integration test suits with Unreal Engine 4 Gauntlet]
[Tool to collect and visualize memory usage of a process tree]
[CPU scope based profiling library]
[Unity/GameMaker debug engine that ships logs, device state, and screenshots from remote builds as short links]
[RCE hardening toolkit for PC gamers]
[Display and control your Android device]
[Build UE Source]
[Network Profiler for UE]
[Navigation-mesh Toolset for Games]
[UE Clang-Format configuration]
[Steam emulator]
[PixiEditor is a Universal Editor for all your 2D needs]
(Win) - 将众多游戏平台和模拟器平台全合一的数据库式开源游戏管理启动器，开发活跃插件众多，例如可借助Flow Launcher快速启动游戏。理论上也可用于管理本地软件。
自动测试和构建游戏项目的最快、最简单的方法
[Epic Games open source VCS for games: content-addressed chunk storage, sparse workspaces, tamper-evident history, large binary assets; Rust; UEFN]
[C++ 3D DirectX Tutorial]
[Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 11]
[Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 12 (2nd ed.)]
[DX11 Imgui]
[DX12 Imgui]
[D3D12 shader injector for FF7 Rebirth PC — intercepts rendering API calls to inject/replace pixel shaders at runtime; minhook + ImGui; adaptable to other D3D12 titles]
[D3D12 hooking tool extracting per-pixel object-ID segmentation masks from shipping UE4/UE5 games without engine source or modification]
[Launcher + native DLL that hooks D3D11/OpenGL/Vulkan to capture and flatten/replace shaders at runtime for FPS]
[DX11 Imgui]
[Direct3D 9/10/11 API hooks for screen capture and in-game overlays]
[DirectX 11/12 Present hook with a simple in-game overlay framework]
[DirectX 9–12 API-hooking and overlay rendering framework for games]
[Windows game capture with injected D3D9–D12, Vulkan, OpenGL, and DXVK hooks, custom overlays, and frame pacing]
[DX11/12 ResizeBuffers]
[d3d opengl hook imgui x86/x64]
[kiero v2 — runtime locator for D3D9–D12, OpenGL, and Vulkan graphics API method addresses; BYO hooking library; CMake FetchContent; cross-platform OpenGL/Vulkan on Win/Linux/macOS]
[a lightweight, multi-platform, multi-architecture hook framework]
[An universal Dear ImGui Hook]
[DX/OpenGL/Vulkan]
[Fixing broken stereoscopic effects in DX11 games]
[Old Game]
[DirectX 3 (DirectDraw/DirectSound) subset reimplemented on SDL3 for running legacy 2D games]
[DirectX DLL wrapper for older games on Win10/11; Dd7to9/d3d8to9, DDrawCompat, ASI loader]
[DirectX 12 DLL wrapper unlocking DLSS-G, multi-frame generation, and DLSS-NR on RTX 20xx/30xx/40xx in supported games (Windows and Proton)]
[WPF manager for per-game dlssg_for_sm86 deployment on RTX 30 (SM86), with backups, restore, and automatic kernel anti-cheat detection that blocks unsafe installs]
[DirectDraw7/D3D7 to D3D9 wrapper for Hard Truck 2 (King of the Road) — modern resolutions, MSAA, anisotropic filtering, graphics fixes, widescreen hooks]
[King of the Road / Hard Truck 2 ASI patch — collision, camera, physics, AI traffic, trailer and UI fixes; complements D2GI; ModUtils + Ultimate ASI Loader]
[GTA IV RTX Remix compatibility mod — adapts Complete Edition for NVIDIA RTX Remix path-traced remaster pipeline; complements FusionFix]
[The Direct3D9-On-12 mapping layer]
[Compatibility and enhancement framework for classic PC games]
[DirectInput interface for XInput controllers]
[Architecture analysis of DXGI swapchain/MPO overlay injection, Present-hook collisions, TDR cascades, and anti-cheat whitelist friction]
Code repository of all OpenGL chapters from the book and its accompanying website https://learnopengl.com
[Write OpenGL ES code in C/C++]
[DX/OpenGL/Vulkan]
[32-bit opengl32.dll proxy that forwards OpenGL calls and hooks wglSwapBuffers for ReShade-style GPU post-processing without binary patching]
[Modern and easy-to-use library for Vulkan]
[Object Pascal Vulkan header generator, OOP API wrapper, and Vulkan-based engine framework]
[kiero v2 — runtime locator for D3D9–D12, OpenGL, and Vulkan graphics API method addresses; BYO hooking library; CMake FetchContent; cross-platform OpenGL/Vulkan on Win/Linux/macOS]
[Linux in-game overlay via Vulkan implicit layer and OpenGL interposer]
[Vulkan implicit layer (VkLayer_callisto_spvswap) that hot-swaps Cyberpunk 2077 path-tracer ray-gen SPIR-V at load time via Proton on Linux]
[DX/OpenGL/Vulkan]
[X86/64 Windows]
[An universal Dear ImGui Hook]
[A collection of repositories related to Android game modding]
[40-chapter hands-on Unity mobile APK reverse-engineering course covering IL2CPP, Lua, DEX, Frida, and asset extraction with runnable demos and auto-graded labs]
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
[Obsidian-based reverse-engineering curriculum covering x86/x64 assembly, Windows memory and PE internals, static/dynamic analysis, and anti-analysis (packing, anti-debug)]
A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.
[Free step-by-step Rust reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
[Free step-by-step Golang reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
[Free embedded reverse-engineering course (RP2350/Pico 2) with GDB, Ghidra, OpenOCD, and hands-on firmware hacking labs]
[Game-hacking cheatsheet covering memory RE, injection, and anti-cheat topics]
[Binary Cartography webinar series with slides, samples, and Docker RE labs on agentic reverse engineering, malware analysis, code identification, and deobfuscation workflows]
[Static audit of PokeAlliance client telemetry: server-triggered process/DLL/window enumeration, login hardware fingerprinting, and supporting Frida/tracer scripts]
[BatteryShark reverse-engineering and game-hacking writeups archive (compatibility patching, classic PC game RE, low-level Windows)]
[Example code for the No Starch Press Game Hacking book]
[A list of games using anti-cheats]
[Anti-cheat compatibility list]
[IL2CPP]
[Injecting C# code]
[CE Guide zh]
[CSGO Guide]
[Hook Guide]
[Hackable Game]
[C++ Framework for external cheats]
[Rust Windows gamehacking library, internal & external; process/memory/module/scan/hook/render/syscall/input/window]
[Multi-engine internal cheat framework (Unity/Unreal/generic) with D3D11/D3D12 hooking, ImGui UI, feature plugins, and config system]
[Cross-platform game hacking library (memory, hooking, injection) for C/C++/Rust/Python]
[Android (Samsung) Security Research References]
[Integrated Android security research corpus (SKILL.md + 20 companions) covering native RE, Frida/Shizuku instrumentation, commercial protector bypass, kernel exploit methodology, and malware triage]
[Samsung TrustZone Keymaster TA research client — send unfiltered requests via libkeymaster_helper; USENIX Security'22 supplemental; CVE-2021-25444/25490 PoC]
[Linux kernel development]
[Collection of codes focused on Linux rootkits]
[A Reversal and bypass for Appsealing]
[Bypass selinux]
[Public researchings of the Google's Android apps protection]
[Small footprint and configurable PCIe core]
[collection of C2 frameworks that leverage legitimate services to evade detection]
[64-bit from-scratch MHS successor: memory searcher/debugger with expression scans, regex/string search, floating-point studio, hex editor, and scripting]
[Modified Cheat Engine with user-mode evasion, direct syscalls, and BYOVD kernel bridge for AC research]
[Windows x64 VEH-based stealth debugger (native DLL + .NET CLI) for targets with anti-debug checks]
[C# game memory editor with scanning, pointers, and assembly injection]
[Portable Windows game memory scanner/editor in C with process attach, value scan, and freeze UI]
[Windows x64 user-mode memory scanner and debugger with pointer chains, disassembly, patching, and ImGui UI]
[Open-source Windows game trainer and memory editor (Electron + C++ N-API) with value freezes, code patches, Mono/IL2CPP support, and .CT import/export]
[From-scratch C++17 XBDM trainer/debug toolkit for Xbox 360 (RGH/JTAG): pointer chains, value scanning, freeze engine, PPC patches, and shareable JSON cheat tables]
[Multi-system C# emulator with memory inspection, rerecording, and per-core debugging tools for retro game analysis]
[CE Mono Helper]
[CE Server For IOS]
[Porting ceserver to iOS.Dynamic analysis]
[An iOS port of Cheat Engine's ceserver]
[CE Server For Pcileech]
[CE Plugin For Manualmap VEH Dll]
[A debugger for Windows x86/64]
[A debugger for Windows x86/64]
[A debugger for Windows ARM64]
[Modern Win32 API monitor with Tauri UI, IAT hooks, durable replay sessions, and generated metadata for security, RE, and anti-cheat research]
[A debugger for Android/IOS]
[x86_64 native/qemu kernel debugger]
[Primitive GDB RSP server for debugging 32-bit exes on retro Windows (Win98SE/XP); builds with VC6; pairs with Binary Ninja GDB adapter]
[ReClass DriverReader]
[Kernel ReClassEx]
[ReClass DMA]
[MCP for Reclass]
[CheatEngine DMA]
[CheatEngine DMA]
[For Linux]
[For Linux]
[LLDB based debugger for Linux Kernel]
Hiding kernel-driver for x86/x64.
[VT debuger]
[VT debuger]
[VT debuger]
[VT debuger]
[VT-x/EPT-assisted Windows kernel debugging framework with Delphi UI and C++ core for authorized anti-cheat and reverse-engineering research]
[Stealth AMD-SVM Type-1 hypervisor with NPT hooks and a customized Cheat Engine debug engine for inspecting VMProtect- and ACE-protected processes]
[Native GPU frame capture and graphics debugger for Vulkan, Direct3D 12, and Metal with shader editing, pixel history, and validation]
[Bypass Remap Memory]
[For Unity]
[For Unity]
[For Unity]
[Monitor IRP]
[Monitor IRP]
[Protocol Analyzer]
[IOS cheat engine]
[Chrome extension Cheat Engine for browser/WebAssembly games — scan, edit, freeze memory and control game speed]
[Keyless Tampermonkey userscript stack for Krunker.io with aimbot, ESP, and Quirify license-emulation loader]
[Tampermonkey userscript cheat client for Moomoo.io with combat automation, bots, and in-browser hooking]
[HWBP on linux/android]
[HWBP on linux/android]
[HWBP on linux/android]
[Java Runtime Reverse Engineering and Debugging Tool]
[eBPF-based lightweight debugger for Android]
[eBPF hook]
[eBPF-based debugger for Android]
[eBPF-powered debugger server for Linux and Android]
[Linux x86-64 ptrace syscall tracer; decodes args, socket addresses, W^X memory, /proc/maps snapshots, JSONL output; C + assembly]
[Android assembly instruction tracing tool]
[Cheat Engine-like but MCP]
[Slay the Spire 2 in-game mod dev toolkit with dev rail, cheat presets, Harmony analysis, hooks, and MCP bridge]
[BepInEx Harmony mod for Muck with in-game debug/cheat command suite for player, enemy, item, and powerup manipulation]
[DexDumper based eBPF on Android Platform]
[Advanced Windows Internals, Evasion, Rootkit, Hypervisor, SMM & Bootkit Research Framework]
[Packet Divert]
[Packet Logger/Decryptor]
[Python Scapy game packet sniffer/parser with YAML action maps]
Nmap Project's Windows packet capture and transmission library
[Tool to find CVEs and Exploits]
[Aggregate public PoCs/exploits for a CVE ID — GitHub, ExploitDB, Nuclei, Metasploit; CVSS/EPSS/CISA KEV; Docker labs, bug bounty write-ups, CVE↔CPE mapping; JSON/HTML reports]
[Grafana scanner with public CVE checks, version fingerprinting, and config analysis for easier Grafana security testing]
[Reverse Engineer's Toolkit]
[One-click Windows RE toolchain installer (Scoop) with Cheat Engine MCP setup and AI agent pitfalls guide]
[Bootstrap for Bethesda script-extender plugin dev plus Ghidra/x64dbg MCP reverse-engineering toolchain]
[Reverse-engineering research toolkit for Dreams to Reality (1997): Python asset decoders, Ghidra scripts, format documentation, and a Babylon.js viewer—tools only, no copyrighted game data]
[Agent-native RE lab with knowledge base, 100+ MCP tools, and APK/PE/game-cheating analysis workflows]
[AI-assisted reverse engineering with deterministic byte-level verification via MCP server and CLI]
[Cross-platform Rust RE pipeline with static PE/ELF analysis, SSA decompilation, live memory scanning, hardware watchpoints, and MCP/JSON automation for game reversing]
[Node.js orchestrator that automates game reverse engineering and cheat development via MCP bridges to Cheat Engine, x64dbg, and Ghidra, with pointer-trace and memory-patch workflows]
[Disposable Docker harness for IDA Pro 9.4+ with Pi and IDA Nexus — runs ordered analysis prompts in isolation and exports audit trails]
[Docker Compose setup to self-host IDA Hexvault and Lumina team servers with TLS volumes and MySQL backend for collaborative reverse-engineering workflows]
[Live Textual viewer for IDA Nexus /idb_events streams with database discovery, execution provenance, and colored event families for functions, types, patches, and comments]
[WebSocket server and plugins (IDA, x64dbg, WinDbg, Binary Ninja, VS Code) to sync cursor navigation and goto requests across reverse-engineering sessions]
[Environment for streamlined binary harnessing for dynamic analysis]
[.NET Patcher]
[Emulate Drivers in RING3 with self context mapping or unicorn]
[Emulate Drivers in RING3 with self context mapping or unicorn]
[Browse Page Tables on Windows]
[GUI for apktool, signapk, zipalign and baksmali utilities]
[Display and control your Android device]
[Display and control your Android device]
[Scans for signatures and netvars and dumps their relative offsets]
[Web-based x86 wildcard byte signature generator for x64dbg, Cheat Engine, and raw hex formats]
[Scans game processes for most likely entity list addresses]
[PEiD for Android]
[Nintendo Switch]
[XCI Explorer]
[Local-first browser PWA and Rust CLI to inspect ROMs/disc images, apply and create patches, bake cheat codes, and edit saves offline]
[Rust library for parsing PlayStation 2 VIF1 DMA packets and VIF commands]
[DEF CON Dreamcast PlanetWeb exploit chain — Eden loading, memory-write flaw, and MIME stack overflow to run native SH-4 DOOM without a debugger]
[A CIL method body dumper]
[A tool for reverse engineering Android ROM images]
[PE Viewer]
[PE Viewer]
[Android Reverse-Engineering Workbench for VS Code]
[Static analyzer for Flutter/Dart AOT snapshots]
[Rust CLI that extracts Dart AOT snapshot debug symbols and structs from Mach-O, ELF, and PE binaries for IDA, radare2, and Frida workflows without a Dart SDK]
[Flutter app RE experiments — IDA scripts for Dart function renaming from reFlutter/DWARF, VM memory mapping, object/xref recovery, and decompilation aids]
[Windows Forensic Analysis]
[Statically unpacking common android banker malware]
[Shows detailed information about named pipes in Windows]
[Frida-based Windows named pipe interceptor: hooks ReadFile/WriteFile, relays IPC to an HTTP proxy over WebSocket]
[Reconstruct structures and generate header files]
[View ETW Provider manifest]
[Browse and diff ETW provider snapshots across Windows builds; backed by ETWInspector]
[Defensive Patch Tuesday semantic diff for Windows snapshots: PE/driver IOCTL diff, rule engine, lab dossiers, SARIF/MD/JSON; sibling-bug triage]
[Be used to make DeviceIoControl requests with arbitrary inputs]
[Linker/Compiler/Tool detector]
[Detect It Easy in the browser — WASM-based file format, packer, and compiler detection]
[Hex Viewer/Editor/Analyzer]
[GUI tool for sending IOCTL to windows drivers]
[Static analysis and exploitation triage for Windows kernel drivers: discover IOCTLs, symbolic links, and certificate checks]
[Automated vulnerability research framework for Windows kernel drivers: parses/decompiles at scale and analyzes exploitable IOCTLs with AI agents]
[Rust-powered static analysis framework for C/C++ via LLVM IR graphs (pointer/value-flow/taint/IFDS) with Python SDK, CLI, and SARIF export]
[DWARF Explorer]
[Win32 resource editor]
[Toolkit for python reverse engineering]
[Python library to parse and read Microsoft minidump file format]
[x86/x86 assembler and emulator]
[Chasm Runtime Assembler]
[Dex to Java decompiler]
[Dalvik bytecode emulator for Android static analysis; string decryption; Multi-DEX; no Android runtime required]
[A deobfuscator for java]
[Android and Java bytecode viewer]
[vmlinux to elf]
[A tool to log ETW Events and system debug logs]
[View Internals of Binary File]
[A Hex Editor for Reverse Engineers]
[Faster version of symchk /om for generating PDB manifests]
[Change vermagic and CRCs of a Linux Kernel Module]
[Linux tools for signed PE-COFF binaries]
[Remove all digital signatures from PE/COFF executable]
[Strips all RICH header information from x86/x64 binaries]
[Enum and Remove Hook in Windows]
[Android Apk Sign Tool]
[A revival and modernization of VirtualKD]
[A Bash script that makes reverse engineering Android apps easier]
[Android OTA payload dumper]
[Android OTA payload dumper]
[Xiaomi HyperOS BootLoader Bypass]
[Android App Dynamic Behavior Tracking Tool using eBPF]
[signtool GUI]
[A realtime assembler/disassembler]
[Pure-Rust no_std AArch64 disassembler and encoder — iced-x86-shaped API, zero-heap decode path, SVE/SME/SIMD/FP coverage, semantic round-trip encode; wasm and bare-metal friendly]
[Android system call hook]
[Tool for extracting RPG Maker XP, VX and VX Ace encrypted archives]
[Curated docs/tools for reverse engineering video game file formats and assets]
[RE documentation for Wacky Wheels (1994): WACKY.DAT archive, track/sprite formats, and fixed-point LUTs behind its pseudo-3D renderer]
[Game-agnostic Sega Saturn RE toolkit: disc/IP.BIN parsing, SH-2 decode, static recompilation to C++, and a hardware runtime (VDP1/2, SCU, SMPC, CD block, SCSP) for native PC ports]
[From-scratch C++20 reimplementation of Omikron: The Nomad Soul (1999) with documented format reverse engineering and evidence-backed asset readers]
[Universal Roblox game analysis dumper: Luau decompile stack, remote call graph, live remote logger, framework and anti-cheat pattern detection, markdown/CSV reports]
[Godot 4 port that reverse-engineers Unturned Unity serialized formats from a Steam install and renders maps with terrain, objects, lighting, and multiplayer]
[Rust desktop toolkit for The Battle Cats: import .pack/.apk data, view cats/enemies/stages, render animations, and export assets]
[Print compiler information stored in Rich Header of PE executable]
[Go symbol recovery tool]
[Disk Eraser]
[monitors hidden syscalls called from call of duty anticheat]
[Comprehensive Windows syscall extraction and analysis framework]
[Combined Windows NT syscall tables (ntoskrnl, win32k, IUM) for x86-64 and ARM64 across NT5.2 through current Windows 11 builds, with online HTML views and composition tooling]
[pdb + Rich library]
[Tools and documents for working with Microsoft PDB files, in Rust]
[A PE dumper for processes protected by user mode anti-tamper solutions (hyperion, theia, etc.)]
[Surgical x64 VEH/VCH dumper: walk vectored handler lists, extract each handler as a standalone PE64 for IDA with resolved imports]
[Recover and statically analyze manually-mapped DLLs with runtime-wiped PE headers; pure-stdlib Python, no driver/debugger; Claude Code skill]
[Go-based tools for modifying UEFI firmware]
[A Simple PE File Signature information Extracting Tool]
[Surface Dev Center Manager tool to automate WHQL/Attestation submissions]
[Objective-C Runtime Viewer for macOS and iOS]
[Assembler/disassembler for java bytecode]
[Open/HarmonyOS abc file parser and decompiler]
[HarmonyOS NEXT decompilation tool]
[Android reverse-engineering tool / smali editor]
[Advanced Virtual Machine Detection and Analysis Framework]
[Dumps files & data required to use the Xenon Xbox 360 Low Level Emulator]
[A Delphi symbol name recovery tool for reverse engineers]
[A Symbolic-Execution Decompiler written in Rust]
[Dynamic binary analysis library: symbolic execution, taint analysis, and SMT-backed RE automation]
[RE-Architect is an advanced automated reverse engineering platform that utilizes binary analysis techniques and machine learning to understand binary files and extract meaningful information]
[JS Debugger Bypass UserScript]
[PDB file inspection tool]
[Simple Node.jstracer that logs calls to analyze heavily obfuscated Node.js malware]
[Zero-dependency JavaScript SAST engine with obfuscator fingerprinting, string deobfuscation, and taint tracking for minified bundle analysis]
[Resolve offsets, gadgets and symbols from NTKernel]
[strings2 - Extract strings from binary files and process memory]
[Itanium + MSVC symbol demangler; D/Rust/Swift; cross-platform replacement for c++filt / undname.exe]
[Kong - agentic reverse engineer, LLM-orchestrated binary RE via in-process Ghidra, call-graph analysis, agentic deobfuscation]
[CLI to install Ghidra, manage plugins (incl. GhidraMCP), launch projects, and compare binaries]
[iOS and macOS Decompiler]
[Built-in MCP for mobile RE — CLI verbs (disasm, search, cfg-of, dex-callers, bin-search, insn-search, etc.) as MCP tools on APK/IPA/AArch64; glass mcp]
[Fuzzing Framework for Apache HTTPD Server]
[Practical Simplifications of Mixed Boolean-Arithmetic Obfuscation]
[High-performance Mixed Boolean-Arithmetic (MBA) expression synthesis tool]
[MBA deobfuscator via Program Synthesis and Term Rewriting]
[MBA deobfuscation framework using pre-computed oracles, algebraic simplification, and stochastic program synthesis; integrates with Miasm symbolic execution]
[C++17 Drill & Join exact Boolean synthesis; SMT-guided 64-bit opaque-predicate and MBA-style simplification via Bitwuzla]
[Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA]
[Mixed boolean arithmetic x+y transform]
[Non-linear Mixed Boolean-Arithmetic Expressions]
[A simple mixed-boolean-arithmetic (MBA) generator witten in python]
[Mixed boolean arithmetic deobfuscation using graph neural networks]
[Mixed Boolean-Arithmetic in Rust for WebAssembly]
[Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation]
[Cracking MBAs - An MBA simplification library]
[A small SMT solving server and wire-format toolkit for bit-vector and Boolean formulas]
[Simple Theorem Prover, an efficient SMT solver for bitvectors]
[A circuit-based Boolean satisfiability (SAT) solver based on DAG logic networks instead of CNF]
[Static VMProtect x64 3.x devirtualizer powered by VTIL]
[Emulation-first VMProtect 3.8–3.10+ x64 handler walker and lifter for VIP tracing, devirtualization, and closed-form recovery in IDA/Ghidra workflows]
[Experimental VMProtect 3.x pure-function deobfuscation via symbolic execution and LLVM]
[VMProtect x64 devirtualization lab: dragon-tales symbolic handler analysis, all 256 handler slots classified, LLVM IR recovery, and protected sample binaries with Binary Ninja databases]
[Resolves VMProtect 3.x import protection via emulation (x86/x64)]
[Dynamically untamper/unpack VMProtect-protected .NET assemblies]
[Dynamically log/manipulate VMProtect-virtualized .NET methods via Harmony]
[A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images]
[Generic x64 VMProtect/packer unpacker that drives samples through patched sogen emulation to OEP, dumps memory, and rebuilds PEs for IDA/Ghidra]
[C++ dynamic VMProtect unpacker with anti-debug bypass, OEP discovery, and IAT repair]
[WIP dynamic VMProtect 3.8.x unpacker with OEP discovery, memory dump, and IAT rebuild for protected PE binaries]
[Windows C tool to unpack VMProtect-protected PEs from memory with OEP/IAT recovery, dynamic exec-region harvesting, and pe-sieve orchestration]
[Educational guide and lab notes on Android native-library VMProtect internals, dispatcher/handler recovery, and devirtualization workflows]
[Frida boundary-hook writeup for reversing stacked VMProtect and OLLVM on Android via libc/JNI/Java exit monitoring]
[Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x]
[Two-stage unpacking pipeline that chains Themida/WinLicense dynamic unpacking (unlicense) with Nuitka onefile KAX/KAY static extraction]
[Themida auto-unpacker for 32/64-bit apps with dump and section restore helpers]
[Rust reimplementation of Magicmida Themida unpacker with IAT rebuild and OEP discovery]
[Themida 3.x unpacking/unwrapping via API-hook emulation (Tiger red64)]
[Themida 3.x research]
[Ghidra Python reimplementation of Deathway's Orean's Unvirtualizer — Oreans VM (Themida/Code Virtualizer) CISC/TIGER/RISC/FISH]
[D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
[AntiOllvm Fla with Fake Runtime]
[libtprt.so]
[libtprt.so]
[unflattener]
[unflattener]
[unflattener]
[User-mode x86_64 binary emulator for PE, ELF, memory dumps, and unrecognized file formats; C#, Unicorn, interactive debugger shell]
[Windows User Space Emulator]
[Windows User Space Emulator]
[A x86 environment emulator for Windows user and kernel binaries]
[Self-checking CPU emulator: x86-64/AArch64/Hexagon/RISC-V; instruction-level diff vs KVM/QEMU oracles; boots Linux, SDE trace, GDB stub for IDA, SMIR JIT; Rust, MIT]
[x86-64 user mode emulation using Zydis]
[Applied RE: Crude Trap-and-Emulate for control-flow tracing on Windows x64 user mode]
[E9Patch is a powerful static binary rewriting tool for x86_64 Linux ELF binaries]
Memory Debugger for Windows, Linux, Mac, and Android
[For Android]
[For Android]
[Write dynamic binary analysis tools in Python]
[dynamic binary instrumentation, analysis, and patching framework]
[A dynamic binary instrumentation tool for tracing and analyzing CUDA kernel instructions]
[AOT binary translation: control flow recovery with Ghidra, lifting with Remill, recompilation with LLVM]
[Demo NX]
[Stress Testing]
[Monitoring PG]
[Disable Hyper-V]
[DSE & PG bypass via BYOVD attack]
[A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime]
[partially disable patchguard up to win11 21H2]
[Self-implemented PatchGuard]
[PatchGuard Internals]
[Windows 11 24H2 Runtime PatchGuard Bypass]
[Windows 11 kernel research framework — boot-time DSE bypass on 25H2 by surgically patching SeCiCallbacks via native subsystem to load unsigned drivers; anti-loop protection and dual-path architecture]
[Advanced native-mode utility for bypassing DSE and HVCI — smart SeCiCallbacks patching and independent Memory Integrity management via subsystem:native for early-phase security research and driver development]
[Unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on HVCI/VBS-enabled Windows]
[Web/CLI tool to browse and diff Windows PE symbols, types, and syscalls across OS versions]
[Benowin Blanc — parse Windows SDK/PHNT via libclang; struct layouts, enums, constants like dt without WinDbg; CLI + TUI, JSON export]
[Web explorer for bb output: browse Windows SDK/PHNT functions, types, typedefs, constants, and type graphs; user/kernel, amd64/x86/arm/arm64]
[Various versions of ntoskrnl files]
[Various versions of win32k files]
[Various versions of win32k files]
[Leaked Windows XP Source]
[GUI explorer for Windows kernel objects, handles, object types, and Object Manager namespace]
[GUI viewer for user-mode OutputDebugString and kernel DbgPrint/Ex output via ETW, without registry changes or a custom driver]
[Windows kernel Big Pool snapshot/diff tool with kernel driver and Go TUI]
[Windows kernel live debugging — driver exposes memory primitives, user-mode TUI handles symbols, types, and UX (LiveKD-style)]
[CVE-2026-40369 — arbitrary kernel increment via NtQuerySystemInformation class 253; browser sandbox escape PoC, Win11 24H2–25H2]
[Kernel Driver Utility Tool]
[Enumerate and disable callbacks/ETW]
[Consuming from the Threat-Intelligence ETW provider without a driver or PPL privilege]
[open source process monitor]
[The original name is "Process Hacker"]
[AltSystemCallHandlers]
[AltSystemCallHandlers]
[ETW Hook]
[ETW Hook]
[ETW Hook Ex]
[ETW Hook Ex]
[ETW Hook WIN11]
[ETW Hook WIN11]
[ETW Hook WIN11]
[A Study on PMI in x86-Architecture]
[PMI Callback]
[PMI Callback]
[Enumerate NMI]
[Disable NMI]
[Disable NMI]
[Triggering NMI]
[AMD Sampling]
[Intel PT]
[Intel PT Fuzzer]
[ipt.sys]
[Intel PT Decoder]
[Intel Hardware Trace Library]
[User-mode ntoskrnl symbol/struct offset resolver via dbghelp + executable section gadget scanning (e.g., short ROP primitives)]
[Kernel Symbols]
[Enumerate VAD]
[Find Driver Useless Memory]
[Windows API Call Obfuscation]
[Hook MmcopyMemory]
[PT Editor]
[Ntoskrnl Viewer]
[Blocking NMI interrupts]
[Dumping processes using the power of kernel space]
[Classic and legendary KsDumper]
[Dumping processes using the power of kernel space]
[A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
[A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
[memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V]
[Runtime Hyper-V Hijacking with DDMA]
[Hyper-V host tool via LiveCloudKd hvmm.sys: patch guest securekernel debug check in live RAM so WinDbg in the guest can attach to VTL1 IUM trustlets]
[HVCI bypass via PFN swapping to call arbitrary kernel functions from user-mode]
[Voyager for Fortnite]
[APC Internals Research Code]
[Processor Counter Monitor]
[Some kernel research]
[Monitoring Windows Kernel Drivers]
[Enumerating and removing kernel callbacks using signed vulnerable drivers]
[Removing kernel callbacks]
[Removing kernel callbacks]
[A simple example how to decrypt kernel debugger data block]
[Memory scanner]
[RWX Memory scanner]
[Find Windows RWX memory regions in a target process by size via VirtualQueryEx]
[Kernel debugger protocol]
[Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe]
[Create stealthy, inline, EPT-like hooks using SMAP and SMEP]
[Shadow Stack]
[C++ library for sending processor interrupts via x2apic & xapic]
[Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.]
[Register-machine bytecode interpreter for Windows kernel drivers with gasm assembler, gvmlift PE lifter, and embeddable host API for kernel memory/MSR/physical access]
[Kernel integrity monitor for detecting syscall hooking]
[Linux Kernel Rookit Hooking Mechanism]
[root AVD]
[Magisk module bypassing MIUI USB debugging (Security settings), USB install, and fastboot account/SIM gates for scrcpy input injection on rooted Xiaomi]
[A module manager for Magisk]
[Portable Android app providing the MMRL WebUI X interface for browsing, installing, and managing Magisk/APatch/KernelSU modules]
[Curated MMRL module repository for Magisk/KernelSU/APatch (Play Integrity Fix, Zygisk, root-hide, TEESimulator)]
[Automated pipeline to track upstream Android build.prop tags and publish validated Play Integrity Fix (PIF) JSON profiles]
[KernelSU/APatch/Magisk module with Web UI for Play Integrity attestation, keybox injection, root hiding, and banking-app detection cleanup]
[Root-free Magisk-style Android module framework with property injection, runtime modules, and built-in LSPatch Xposed hooking]
[Run Zygisk on KernelSU]
[Boot Image Modification Tool]
[Boot Image Modification Tool]
[Boot Image Modification Tool]
[Use GitHub Actions to build magiskboot]
[Magisk module that disguises a device under Google Pixel]
[Magisk and LSPosed module collection for spoofing Android device fingerprints (manufacturer, model, build props)]
[Zygisk module for rooted Android with per-app device, CPU, and GPU spoofing, build-property and Android ID spoofing, and an on-device WebUI; supports KernelSU, Magisk, and APatch]
[Portable MagiskHide]
[Injects frida gadget using zygisk]
[Standalone implementation of Zygisk]
[Magisk module for running Tailscale]
[Disable flag secure and screenshot listeners]
[Standalone Magisk/KernelSU/APatch module that patches services.jar to disable FLAG_SECURE and block screenshot detection on Android 14+]
[A zygisk module that dumps so file from process memory]
[Transparent implementation of Zygisk]
[Zygisk Injector]
[Run a more undetectable frida server on boot using magisk]
[Magisk/Zygisk module that auto-starts Florida anti-detection frida-server on boot]
[Zygisk module injecting Rusda anti-detection Frida gadget on KernelSU, Magisk, or APatch with WebUI, listen/offline script modes, and library remapping]
[A Zygisk module to hide root]
[A Magisk/KernelSU/APatch module for moving user certificates to system certificates. Supports Android 7-15]
[Magisk/KernelSU/APatch auto-rescue module with boot watchdog, module snapshots, and WebUI recovery]
[Magisk/KernelSU/APatch module for graded cache, log, APK residue, and deep junk cleanup on rooted Android]
[A zygisk module that hooks libdexfile.so to dump dex]
[Magisk/Zygisk virtual camera module with ArtHook-based Camera1 surface and NV21 frame injection (no LSPosed)]
[An Xposed module that disables Inka AppSealing, a popular anti-cheat and anti-root solution]
[LSPosed/Xposed module that hooks Google Play, Bazaar, and Myket in-app billing to bypass purchases, with per-package Frida script support]
[Xposed/LSPosed module scaffold with hook templates and root-detection bypass example]
[LSPosed/LSPatch module template with Unity/Unreal/Godot engine detection, native pattern scan and memory helpers, and runtime overlay toggles]
[LSPosed/Xposed Android GPS spoof module with map picker, saved locations, and app/system/mock-provider modes]
[Android mock-location app with map picker, joystick movement, and LSPosed module to hide mock-provider detection]
[LSPosed/Xposed anti-detect module for profile-based device identifier and environment spoofing (Android ID, GAID, IMEI, SIM, root/LSPosed/VPN hiding)]
[LSPosed module that auto-generates a new Android device identity after clearing app data (Android ID, GAID, IMEI, MAC, GSF ID hooks)]
[LSPosed/Xposed module that hides in-app USB connection and USB debugging detection signals (Settings/SystemProperties, USB broadcasts, UsbManager, getprop/dumpsys, sysfs)]
[LSPosed module to restore Samsung Knox-gated apps and features on rooted Galaxy devices]
[Frida's setHardwareWatchpoint tutorial]
[Runtime mobile instrumentation toolkit for iOS/Android, web UI]
[Android full-stack device control with built-in Frida, MITM, UI automation, and reverse-engineering APIs]
[Self-hosted Android/iOS pentest dashboard with Frida hooking, SSL pinning bypass, APK decompilation, and Burp proxy setup]
[Multi-device terminal UI for Android/iOS mobile app testing with Frida, Objection, adb, scrcpy, and iproxy orchestration]
[Flask web dashboard to deploy frida-server on rooted Android devices and run whitelisted injection scripts (SSL pinning bypass, root detection bypass, crypto monitoring)]
[AI-agent mobile reverse-engineering skill set with layered Frida hooks and a six-stage anti-detection pipeline]
[Unofficial Frida extension for VSCode]
[Web-based Frida IDE with integrated JADX decompilation, device/process management, and Claude AI assistant for mobile reverse engineering]
[iOS Frida app decrypt / dump to IPA; extensions; jailbreak; bagbak@5 needs frida@17; deprecated]
[Frida-based iOS tool to dump deobfuscated IL2CPP global-metadata headers from running Unity apps for Il2CppDumper analysis]
[Update Frida hooks automatically]
[A binary instrumentation workshop, with Frida, for beginners]
[Some scripts]
[Some scripts]
[Smali trace]
[anti-detection version of frida-server]
[Trace classes/functions/and modify the return values]
[Organized Frida script toolkit for Android dynamic analysis: cert pinning bypass (OkHttp, Flutter, React Native), traffic/crypto logging, root-detection bypass, and runtime memory inspection with a small CLI]
[Bypass Some AntiFrida Checks]
[Frida-Seccomp]
[Getting better stacks and backtraces in Frida]
[Frida script that allows to sniff & dump USB traffic on macOS]
[Find JNI native methods while the app is running]
[A tracer based on frida for XPC messages in iOS and macOS]
[Root Detection & SSL Bypass Script]
[Frida script bypassing Talsec/freeRASP, SSL pinning, root/emulator/Frida detection on Android]
[Static-analysis Frida script generator for Android/iOS SSL pinning and root/jailbreak bypass]
[Frida script that hooks java.io.File and Runtime.exec to log suspicious paths/commands and Java stack traces for Android root-detection behavior analysis]
[Unified Android APK analysis CLI with framework detection (Unity/Flutter/RN), RASP defense profiling, and auto-generated Frida bypass scripts]
[Termux-based Android APK modding toolkit for Frida Gadget and native .so injection, patching, rebuild, align, and sign workflows]
[Debugger Detection Bypass]
[Low level scripting app for iOS]
[Stealth patch for Frida, stealth knowledge collection]
[KernelSU module wrapping official frida-server with a Rust supervisor and Material 3 WebUI]
[Powerful Frida repackaging tool for iOS and Android. Easily modify Frida servers to enhance stealth and bypass detection]
[Frida-like Android ARM64 hook — QuickJS, Java/native/stealth hook, QBDI; pairs with wxshadow (mkpms)]
[Android ARM64 dynamic instrumentation module workflow for KernelSU/Magisk: single-binary engine, attach/spawn/watch-so, HTTP RPC control plane, and multi-mode stealth (normal/wxshadow/recomp)]
[Build anti-detection Frida server from source]
[Frida Stalker dual-trace engine that pinpoints the branch where two native runs diverge, for anti-cheat checks and OLLVM analysis]
[Polymorphic anti-detection Android arm64 frida-server builds that morph static fingerprints per release]
[Among Us Android cheat menu using Frida and frida-il2cpp-bridge]
[Documented Android Terraria IL2CPP modding skill plus Frida/JsHook injectable mod menu: il2cpp-by-name hooks, system-UI overlay menus, and offline icon extraction tooling]
[Frida-based Hay Day automation with guest ARM64 libg.so hooking on LDPlayer/Houdini and Promon SHIELD/Quago anti-cheat bypass]
[End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]
Android terminal and Linux environment. (java)
[Material You Android ADB/root/shell utility (Shizuku, OTG, wireless debugging)]
[LSPosed module enabling Android wireless debugging over mobile data or Tailscale without WiFi or hotspot]
[Guide-zh]
Tools to work with Android .dex and Java .class files
[Fast APK/DEX/JAR Java decompiler (C)]
[dex deobfuscator]
[Generate dex file by c++]
[File explorer for (rooted) Android]
[File manager using ADB protocol]
[A full-featured package manager and viewer]
[An Android file explorer]
[Full-featured rooted Android file manager (Kotlin/Compose) with dual-pane tabs, SAF, USB OTG, APK analyzer, and root module browser]
[Open-source Android file explorer with root and Shizuku support, app manager, APK export, and regex search]
[apksigcopier - copy/extract/patch android apk signatures & compare apks]
[Linux read & write process memory module]
[The fork version of rwProcMem33]
[Cache attacks on ARM]
[Runtime code patching]
[Runtime code patching for IOS]
[Memory scanner]
[Memory scanner & analyzer with REST API]
[Game Hacking Tools]
[Android CE-style memory debugger with Vulkan+ImGui overlay, root engine, pointer scan, and Lua 5.4]
[Open-source Android Cheat Engine clone (Kotlin + NDK) with root memory scan, value inject/freeze, and saved sessions]
[Memory tampering tool]
[Extension to create a full memory dump using LLDB on Android]
[Run code within any debuggable Android process, without modifying its APK]
[a vulnerability affecting Android version 12 & 13]
[Root for Pixel 2/XL]
[Root for Pixel 3]
[Root for Pixel 3]
[Root for Pixel 6]
[Root for Pixel 6]
[Root for Pixel 6]
[Root for Pixel7/8 Pro with Android 14]
[Root for Samsung]
[CVE-2019-2215]
[CVE-2025-21479]
[CVE-2025-38352]
[CVE-2026-64560 — posix-cpu-timers non-leader exec() race UAF; Linux/Android trigger PoC + patch analysis]
[CVE-2026-43499]
[CVE-2026-43499]
[Samsung Galaxy KernelSU installer — CVE-2026-43499]
[Jailbreak supported Google Pixel phones with CVE-2026-43499]
[GhostLock (CVE-2026-43499) futex PI UAF exploit with multi-device offset tables for locked-bootloader OnePlus/OPPO/realme/Xiaomi root + KernelSU]
[GhostLock One-Tap Execution App - CVE-2026-43499]
[Unlocking qualcomm bootloader]
[Xiaomi Smart Camera exploits and jailbreak]
[SJCAM SJ4000 Air (Allwinner V3) firmware reverse engineering, parsers, custom CFW (Lelouch), and CVE-2026-52656 PoC]
[Guide]
[Google USB Driver]
[Unlocker for xiaomi]
[MiFlash]
[Xiaomi Firmware Updater]
[TWRP for xiaomi]
[Android ROM tool for Pixel]
[Android app for fast ROM backup, restore, migration, and post-flash tooling with Magisk, KernelSU, and APatch support]
[Android ROM/APK unpack-repack toolkit for root and non-root ARM64 devices]
[OrangeFox Recovery]
[xiaomi device trees]
[xiaomi device trees]
[PixelOS device trees]
[OFRP for Redmi K60 (mondrian)]
[Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
[An AOSP based ROM aiming to provide the best of Pixel]
[X86]
[xiaomi kernel]
[xiaomi kernel]
[xiaomi kernel for POCO F3/F4]
[Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
[Android 15 GKI 6.6 kernel source for POCO X7 Pro with built-in KernelSU Next, SuSFS root hiding, and game-oriented idle tuning]
[Pixel 4/4XL/4a]
[KernelSU for Google Pixel4XL]
[Redmi Note 8/8T with KernelSU]
[Redmi Note 10 Pro]
[Redmi Note 11T Pro(+) / POCO X4 GT]
[KernelSU for Oneplus]
[samsung sm7150]
[KernelSU for SAMSUNG A14 5G (a14x)]
[Xiaomi Pad 6 kernel]
[OnePlus 8/8T/8Pro/(9R?) kernel]
[Automatic kernel builder for Oppo/OnePlus/Realme Snapdragon SM8750 / MediaTek MT6991 devices]
[Awesome Android Root]
A suite of open source tools for customizing Android, providing root access, boot image manipulation, and systemless modifications
[Hardened KernelSU fork with Rust userspace, stealth hardening, and reduced attack surface for Android 12+]
[Adapted for Linux Kernel 4.4 + Google GCC 4.9]
[Bootloader unlock, Magisk root, and restore toolkit for the KONKR Pocket Advance gaming handheld with integrity-module support]
[APatch modules]
新一代SKRoot，挑战全网root检测手段，跟面具完全不同思路，摆脱面具被检测的弱点，完美隐藏root功能，全程不需要暂停SELinux，实现真正的SELinux 0%触碰，通用性强，通杀所有内核，不需要内核源码，直接patch内核，兼容安卓APP直接JNI调用，稳定、流畅、不闪退。
[Curated Morphe patch source for Android games — root/integrity bypass, license checks, Play Integrity spoof, and SSL pinning]
[DuckDetector refactor: Android local device-integrity inspector for root tampering, runtime hooking, mount anomalies, attestation trust, and virtualization evidence]
[Root privilege IPC via Unix Socket — Magisk/KernelSU/APatch compatible JNI client, reinforcement-proof, low-latency root ops (OpenProcess, ReadMemory)]
[Root-required Kotlin/Compose Android utility for device identity spoofing, environment sanitization, kernel memory purge, and telemetry/log cleanup]
[Bypass driver signature verification in Android kernel(ARMv8.3)]
[A GKI Android kernel driver(AArch64) template]
[a action to build kernel automatically]
[kade — lyenv-based Android kernel driver automation for GKI/non-GKI builds via kadeflow.yaml, ABI patching, and GitHub Actions]
[kernel build scripts]
[Android aarch64 rootkit]
[Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping]
[Android touch-event replay toolkit: Magisk module + command socket + gesture trace analyze/generate; supports left/right/up/down/click]
[Linux Kernel documentation]
[ARM Architecture Reference Manual for ARMv8-A]
[DIY Kernel]
[Android Kernel Exploitation]
[Syscall Dispatcher Patching PoC]
[Linux Runtime Security and Forensics using eBPF]
[eBPF toolkit: dump (sniff traffic with PID/process), tls (OpenSSL key/master-secret extraction), proxy (intercept and decrypt TLS); PCAPng + Scapy; OpenSSL, IPv4, TLS 1.2]
[A kpm kernel module based on uprobe, capable of simultaneously hooking a large number of user address space functions]
[wxshadow — KPM stealth breakpoint/hook via R^X page split, bypass self-read integrity check]
[An Android-ARM64 kernel emulator written in Rust. (Rewrite from unidbg)]
[Android aarch64 LKM toolkit — filecopy, hideproc, propedit, syscall_hijack; CFI bypass, kprobes, mmuhack for sys_call_table]
[Kernel inline hook framework]
[KPM kernel module, cross-process memory read via ioctl hook; KernelPatch/APatch]
[Android ARM64 kernel module (lsdriver + wxshadow) + Zygisk injector for game RE — PTE-remap/AT S1E0R memory R/W, W^X shadow-page stealth breakpoints, HW/PTE/single-step breakpoints, do_el0_svc syscall monitor, virtual touch/gyro/GNSS; ptrace-less ELF-linker injection]
PCAPdroid is an Android app which lets you monitor and export the network traffic of your device without root. Traffic can be dumped in the PCAP format to be analyzed with popular tools like Wireshark, even in real time. The built-in traffic monitor lets you detect suspicious connections made by…
[No-root userspace RTL8852AU Wi-Fi driver for Android with libusb monitor mode, channel hopping, and 802.11 frame injection]
[Android Proxy MCP — HTTP/HTTPS packet capture for AI assistants, mitmdump + SQLite + natural language query]
[Pure-software USIM/UICC SIM card simulator — full APDU/SIM logic without physical hardware; PC/SC via swICC reader; pairs with SIMtrace2/cardem for phone testing; GSM/LTE auth, MILENAGE, private LTE/IoT and cellular security research]
[iOS 15.7 and iOS 16.5]
[iOS 15 and 16]
[iOS 15 and 16]
[iOS 15 and 16]
[ANE kernel r/w exploit for iOS 15 and macOS 12]
[Jailbroken iOS App Attest oracle daemon: headless DCAppAttestService attestation/assertion API for mobile integrity-bypass research]
Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.
[jailed app]
[Patch iOS Apps without Jailbreak]
[iOS file-exploit based tool to disable call-recording notifications without jailbreak]
[CVE-2025-24203]
[CVE-2025-24203]
[DarkSword kernel r/w exploit playground; iOS/iPadOS 17.0-26.0.1 except A19/M5; sandbox escape, process control/crash, SSV root FS overwrite, UID/GID/sticky bits, disable ASLR via launchd P_DISABLE_ASLR]
[XNU 1-day exploit practice collection — PoCs for CVE-2019 through CVE-2025 (e.g. 30883, 24153, 24257, 43510, 43520) plus Coruna/PEGruber research]
[iOS 14.0–14.4.2 kernel r/w exploit app from Coruna Pendulum PE; pipe/lockf/OOL-port primitives; tested iPhone 6s–11 Pro]
[WIP darksword kexploit implementation; iOS 17.1.1-26.0.1 tested; includes font overwrite, app bypass, file manager, and DirtyZero2 experiments]
[iOS 18.4-18.6.2 userland exploit chain with JS injection into SpringBoard and other processes. Derived from DarkSword]
[iOS 3.0-10.3.4 tfp0 kernel exploit]
[A12/A13 Apple Page Protection Layer (PPL) bypass; C; by staturnzz and Clarity]
[Leaked iOS exploit toolkit — WebKit chains for multiple iOS versions, partially deobfuscated]
[XNU kern_aio.c AIO+kevent UAF; sandbox app, no entitlements; panic/double-free; iOS 26.2, patched 26.3]
[Experimental iOS 26.0–26.6.1 / 27.0 beta 4 sandbox-escape PoC demonstrating access to selected app, daemon, plug-in, App Group, and system-container paths]
[iOS 27.0 beta CFW jailbreak via usbliter8 SecureROM exploit; iPhone 11 Pro only; RP2350 PWN DFU; destructive (breaks SEP/WiFi/baseband/Apple services)]
[Spoof Apple WiFi/cell network location (gs-loc WLOC) — MITM protobuf patch via Surge/Quantumult X/Loon/Stash/Shadowrocket; online picker + Shortcuts; GCJ-02→WGS84; no jailbreak; indoor/WiFi positioning only]
[iOS network location spoofer without jailbreak — MITM Apple map lookup responses; patch WiFi BSSID + CellTower coords; Surge/Shadowrocket/Loon/Stash/QX modules; motion state spoof; location-picker web UI]
[iOS kernel memory explorer]
[A runtime ObjC class-dump]
[an iOS kernel function hooking framework for checkra1n'able devices]
[TrollStore iOS memory editor with value scanning, hex editing, pointer analysis, RVA patching, signatures, scripts, and app archive management]
[Package and sign iOS applications]
[Go CLI toolbox to inject, extract, and convert iOS tweak packages for sideloaded IPAs]
[Host-no-root Android container VM (Twoyi fork) with built-in root and LSPosed for isolated mobile modding]
[Android VM app (VM Studio) with Vulkan rendering, Magisk root toggle, Xposed module support, and Google Play services for isolated mobile environments]
[Windows desktop rooted Android game VM workbench with GUI/CLI management, APK install/update, root diagnostics, and private app-data export for isolated mobile testing]
Vmware Hardened VM detection mitigation loader (anti anti-vm)
[Virtual machines for iOS and macOS]
[Official radare2 GUI (Qt5/6), focused on reverse engineering workflow]
[C++ reimplementation of Ghidra analytical core (SoftwareModeling + Utility): no JVM, SLEIGH + native Capstone pipelines, embeddable for AI/agents]
[Rust CLI suite for static recovery: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and nested application packages through an automatic pipeline]
[Native multi-arch disassembler & decompiler — PE/ELF/Mach-O/.NET, x86/x64/ARM64/MIPS/PPC, RTTI recovery, SSA decompiler, Lua scripting, packer detection]
[Static binary analysis workbench: PE/ELF/Mach-O, x86/x64 disasm, CFG, pseudocode, browser UI via --serve; malware triage and RE]
[Integrated disassembler, decompiler, and x64dbg-style debugger for Windows and Linux with Lua plugins and a built-in MCP server for AI-assisted binary analysis]
[VS Code-based native RE IDE: Capstone/Unicorn/Remill/Helix decompilation pipeline, PE/ELF emulation, YARA/IOC/entropy, headless .hexcore_job.json automation, and agent integration]
[Mobile-first Android disassembler and decompiler for APK, ELF, PE, and DEX with ptrace debugger, call graph, and SakoScript plugins]
[Lua bytecode disassembler and decompiler for Lua 5.1, 5.2, 5.3, 5.4, and 5.5 binary chunks]
[EVM dissassembler]
[Rust decompiler on angr — high-fidelity pseudocode from stripped binaries, enum/match/? recovery, Rust 1.39–1.93]
[Agent-first decompiler in Rust, originally ported from Ghidra; CLI, WASM, and Ghidra integration; tunable for LLM-driven autonomous refinement]
[DecBench — benchmark for exact decompilation: structural CFG (GED), type recovery, recompilation bytematch; angr/Ghidra/IDA/Binja + LLMs; https://decbench.com]
[BinaryAudit — open-source Harbor benchmark for AI agents finding injected backdoors in stripped binaries (Ghidra/Radare2); lighttpd/dnsmasq/Dropbear/Sozu/Caddy]
The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (libneverd) built for CLI tools, integrators, and AI agents.
[Dark theme for IDA Pro]
[Dark+ Theme]
[Modern Windows UI theme plugin for IDA Pro 9.3 with scoped Qt styling, live preview, and persistent appearance settings]
[List of IDA Plugins]
[List of IDA Plugins]
[Official Hex-Rays JSON manifest and sync pipeline for plugins.hex-rays.com and the IDA Plugin Manager]
[Curated list of IDA, x64dbg, Ghidra, GDB, and OllyDbg plugins]
[IDA Pro resources, scripts, and configurations]
[IDA SDK]
[Migrate Database]
[Windows Kernel Enhance]
[Windows Kernel Enhance]
[Windows Kernel Analysis]
[COFF Relink]
[Import .NET Symbol]
[Recognizing Function By Cloud]
[Recognizing Function By Pattern]
[IDA Pro plugin to build JSON instruction signatures from debug libraries and rename unknown library functions via Jaro-Winkler matching]
[Signature Maker]
[Signature Maker]
[Zero-dependency IDA Pro 9+ cross-platform signature maker with optional SIMD speedups]
[Signature Maker]
[PDB Generation From IDA]
[Symbolic Execution]
[Time Travel Debugging]
[LazyIDA]
[Hex-Rays decompiler utilities: parameter labeling, SEH, Rust strings]
[IDA Pro plugin showing full x86-64/ARM/MIPS instruction reference at the cursor]
[IDA Pro plugin adding dereferenced register and stack views with colors for x86, ARM, and MIPS debugging]
[IDA 9.X: auto-generate function comments from string literals]
[Greybox Synthesizer geared for deobfuscation of assembly instructions]
[IDA+VMWARE+GDB]
[IDA+BOCHS]
[UEFI firmware]
[GO Reversed]
[Ghidra Decompiler]
[IDA Pro 9.4 plugin decompiling Motorola M·CORE firmware into structured C pseudocode with stack-frame and control-flow recovery]
[Trace Execution]
[PS5 elf loader]
[Execution Traces]
[Execution Traces]
[Frida-based tracer]
[Find crypto constants]
[VMAttack PlugIn for IDA Pro]
[Unicorn]
[Manage classes]
[Renames pseudocode windows with the current function name]
[Deobfuscate code at decompilation time by modifying IDA Pro microcode]
[Deobfuscate code at decompilation time by modifying IDA Pro microcode]
[Resolves functions imported from external libraries]
[EFI binaries]
[ChatGPT]
[ChatGPT]
[Emulation]
[Display Hex-Rays Microcode]
[Hex-Rays Microcode]
[IDA Pro plugin for decryption, deobfuscation, patching, and Hex-Rays transforms]
[Simplify MBA]
[WakaTime integration for IDA Pro]
[Fast Signature scanner & creator]
[Resolves PPL calls to the actual underlying PPL function]
[Fills in missing indirect CALL & JMP target information]
[Attempts to decrypt JM Xorstr in some x64 binaries]
[Rust Demangler & Normalizer]
[.data ptr lookup script]
[Register Cross References]
[Anti Xorstr]
[Analyzing Golang Binaries]
[IDAPython Made Easy]
[Deobfuscation script for ConfuserEx]
[PDB plugin with enhance and bugfix]
[IDA-For-Delphi]
[Improve call stack]
[RevEng.AI]
[AVX Lifter]
[IDA kmdf]
[XrefsExt plugin]
[IDA Pro plugin that scans large binaries for missing string/data xrefs and materializes undefined bytes so cross-references appear]
[IDA Pro cross-reference generator for indirect refs and complex control-flow, with XRefer-compatible output]
[Python script for patching binary]
[IDA Pro plugin that exports grouped patched-byte sequences and disassembly context for building external patchers]
[YARA signature creation]
[VirusTotal plugin]
[Auto rename symbol]
[Extract anti-debugging]
[Integrate Ghidra's decompiler]
[Find and disassembly vu microcode in ps2 executables]
[IDA plugin that annotates PlayStation 3 Cell SPU opcodes as readable C-style comments]
[Functional DWIM interface]
[Deobfuscation]
[Scan file with Yara rules]
[Unity PDB Downloader]
[A IDA plugin to show ARM MSRs nicely]
[A template for cross-compatible GUI plugins]
[Python library and GUI plugin for fetching and editing IDA Pro plugin configuration via Hex-Rays HCLI/ida-config.json]
[IDA Map File Symbol Renamer]
[IDA kallsyms Renamer]
[IDA Pro Plugin to import /proc/kallsyms for Linux Kernel]
[Allows connecting to third party Lumina servers]
[Claude-3 models assistant]
[CheatEngine Value Tracer of IDA]
[Displaying the P-Code for the current function]
[IDA plugin to deobfuscate emotet CFF]
[Deobfuscating Pikabot's strings using RC4 and AES]
[IDA plugin to make classes automatically]
[An IDA Plugin that help analyzing module that use COM]
[Lifting IDA Microcode into LLVM IR]
[GameGuard String Decryption]
[Displaying potentially installed Cargo dependencies]
[IDA Pro and Cheat Engine to get the offset of the current module]
[IDA Plugin to colorize function definition in pseudocode]
[IDA plugin which queries Local language models]
[IDA python 3 plugin and binary file similarity comparison]
[IDA plugin aid to set android so breakpoint]
[High-resolution screenshot capture plugin for IDA Pro]
[Small rust binary analysis helper for IDA]
[Plugin for IDA Pro disassembler which allows loading .map files]
[HashDB API hash lookup plugin for IDA Pro]
[IDA Plugin for decoding bytes as big5]
[Binoculars is an IDA PRO plugin with an integrated AI interface]
[IDA Plugin to set custom breakpoints on mnemonics]
[IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays]
[IDA Pro plugin that serves disassembly, Hex-Rays pseudocode, graphs, and live sync over HTTP to a React browser client]
[optimize the readability of decompiled code for iOS ARM64 binaries]
[Converted phnt to IDA TIL, IDC (Hex-Rays)]
[A helper plugin for PS4 module loader]
[ChatGPT Agent analyses your IDA pseudocode]
[IDA Processor Module for the Ethereum Virtual Machine (EVM)]
[Zeus VM bytecode processor + loader for IDA Pro, from OALabs ZVM]
[a IDA plugin helps you to manage your IDA Comments]
[Xbox360/Xenon loader plugin for IDA 9]
[automatically identify and set enums for standard functions]
[IDA plugin to aid with Swift reverse engineering]
[a IDA Pro plugin to export data better]
[For grouping similar functions]
[help the analysis of x86/x86_64 binaries written in Delphi]
[IDA processor for loading and disassembling compiled yara rules]
[An IDA plugin that can be used to partially synchronize IDBs between different users reversing the same binaries]
[Live IDA ↔ x64dbg annotation and type synchronization bridge]
[An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining]
[RTTI Parsing IDA plugin]
[An advanced cross-reference navigation tool for IDA Pro]
[ScyllaHide-For-IDA9]
[MCP for IDA pro]
[IDA Pro JSON-RPC daemon for LLM/agent-assisted RE: decompile, xrefs, types, patches; headless & GUI; ghidra-rpc-compatible CLI]
[Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
[Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
[MCP for IDA pro]
[MCP for IDA pro]
[MCP for IDA pro]
[MCP for IDA pro]
[Export IDA Pro Function List to a Specified Path (Markdown Format)]
[Remove WPP calls from hexrays decompiled code]
[Augur is a blazing fast IDA Pro headless plugin that extracts strings and related pseudo-code from a binary file]
[IDA Pro headless plugin: locate calls to potentially insecure API functions; tiered badness, bookmarks, backtrace audit paths; idalib/Rust]
[Run IDA scripts headlessly]
[Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib]
[IDA Pro CLI for agents and humans: Unix socket to live GUI or headless idalib, structured JSON, batch/preview/dry-run, bundled agent skill; not MCP — early alpha]
[Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
[IDA plugin + Rust/idalib CLI: export Hex-Rays decompilation, disasm fallback, strings/imports/exports/memory as files for AI IDEs without MCP]
[Windbg-style idalib CLI (idb) for agents: persistent headless worker per database, compact stdout, disasm/decompile/xrefs/types and DB mutations with undo]
[An IDA Plugin for analyzing iOS kernelcaches]
[IDA Taskr is a pure Python library for IDA Pro related parallel computing]
[An AI-powered assistant for IDA 9.0+ to accelerate reverse engineering of C++ games]
[FRIEND is an IDA plugin created to improve disassembly and bring register/instruction documentation right into IDA View]
[Binary analysis MCPs collections]
[Yet another IDA Pro/Home plugin for deobfuscating stack strings]
[IDA2LLVM - Dynamic Binary Lifting IDA code to LLVM IR]
[Patches PLT sections when IDA fails to do so]
[Plugin to ease reversing iOS projects]
[IDA Enums Helper Plugin]
[A headless, extendable, multi-session, IDA Pro MCP framework]
[Headless IDA Pro MCP server]
[Unofficial YARA IDA Pro plugin]
[An IDA plugin that uses LLM to speed up binary analysis]
[AI-powered RE plugin for IDA Pro: LLM function explanation, semantic knowledge graph, RAG, MCP integration]
[IDA Pro 9.4 Windows plugin with built-in AI console and MCP gateway for pseudocode analysis, bounded caller tracing, guard-evidence extraction, and preview/apply/rollback IDB ChangeSets]
[Local llama.cpp IDA plugin for function explain/rename/struct inference with human-in-the-loop accept]
[Driver Vuln Analyzer]
[Integrate essential IDA Pro plugins for enhanced functionality, including deobfuscation, binary diffing, and custom cryptography support]
[IDA plugin to find patched memory]
[A Qt-based CyberChef interface designed for malware analysis workflows, particularly in IDA Pro]
[Lightweight whiteboard plugin for IDA that allows reverse engineers to sketch and brainstorm directly inside IDA]
[Present live RE with Marp/Slidev decks docked in IDA; @name/@addr tokens jump disasm/pseudocode, embed decompiled lines, unresolved-ref lint]
[IDA script to parse RTTI information in executable support for IDA 9.2]
[High-performance, AI-driven semantic analysis for the IDA Pro decompiler]
[C++ virtual table detection and annotation tool for IDA Pro 9.x]
[IDA 9.X plugin for vtable ops: dump C++ interface skeleton (.hpp), rename with class prefix, set this pointer type, show slot index/offset]
[A Hex-Rays IDA Pro plugin for deobfuscating binaries protected with the Hikari LLVM obfuscator]
[A plugin to use MCRIT from IDA Pro]
[Workflow-centric function triage and prioritization plugin for IDA Pro]
[AIMachDec is an IDA plugin for Apple AARCH64/ARM64 binaries that utilizes LLMs to translate assembly functions into readable pseudo-code in C, Objective-C, or Swift]
[An IDA Pro Plugin to detect common Anti-Cheat Artifacts]
[IDA Claude Code Plugins]
[Lua scripting plugin for IDA Pro]
[Interface with IDA in SQL via live virtual tables]
[IDA PRO auto-renaming plugin with tagging support]
[A security-focused code scanner for IDA Pro]
[Ctrl+F search support for Pseudocode windows]
[IDA Pro plugin that helps reconstruct structures]
[A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI]
[Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries; supports IDA Pro and radare2]
[ApplyCalleeType reborn for IDA Pro 9.3 — apply function prototype to indirect CALL for correct decompiler/disasm; IDA 8.x–9.3+]
[A C++ REPL for IDA Pro / IDA C++ SDK]
[An IDA Pro 9.x plugin that brings 010 Editor-style type-aware binary search to IDA]
[An AI-powered reverse-engineering copilot for assisting tedious malware analysis in IDA Pro]
[OpenCode agent harness for Qwen 27B/35B with read-only IDA 9.3/IDASQL PE static-analysis tools; NeverD/LLVM lift→O3→redecompile fallback for oversized functions; malware analysis; macOS/Linux]
[Solana sBPF rlib files for IDA Pro / Ghidra / Binary Ninja signature generation]
[SEH Helper]
[Slices Functions]
[BinDiff]
[Symbolic Execution]
[Division and Modulo Deoptimizer]
[Opaque Predicate Patcher]
[Collection of scripts to pinpoint obfuscated code]
[Graph Analysis]
[Plugin for loading MachO kernelcache and dSYM files]
[Objective-C]
[Create and find signatures]
[Binary Ninja plugin to generate IDA Pro FLIRT .pat pattern files for signature libraries]
[AMD-SP or PSP firmware]
[Integrates OpenAI]
[Frida plugin for Binary Ninja]
[Detect Themida/WinLicense and Code Virtualizer's obfuscated code locations]
[Binary Ninja Ollama]
[BinaryNinja Shellcoder Plugin]
[This plugin serves as a bridge between Binary Ninja and Ghidra's disassembler]
[Binary Ninja plugin that bidirectionally syncs symbols, comments, types, and analysis with a Ghidra Server repository via a Java bridge]
[Binary Ninja plugin for Solana eBPF]
[MCP for Binary_Ninja]
[MCP for Binary_Ninja]
[Binary Ninja plugin to analyze and simplify obfuscated code]
[Binary Ninja plugin for removing opaque predicates]
[binary ninja cli for agents]
[Binary Ninja plugin for reverse engineering PTX — CUDA GPU virtual ISA]
[Ghidra plugin exposing GhidraDB queries to Frida at runtime for dynamic call-target resolution, backtraces, and live xref/comment updates]
[Sharp SM83 / Game Boy extension for Ghidra]
[Ghidra SLEIGH extension for Qualcomm Hexagon QDSP6 decompilation and analysis]
[Loadable Ghidra decompiler plugins and rules that simplify RISC-V vector-instruction analysis in the decompiler window]
[Dockable hex editor Ghidra plugin for byte-level memory editing during RE]
[Ghidra extension for dockable dark-mode hex/ASCII viewing, wildcard hex search, and inline byte patching during RE]
[ChatGPT]
[ChatGPT]
[Ghidra script to generate and search byte signatures with SPF-style templates for ATS/ETS2 plugin RE]
[Command Palette]
[Use angr in Ghidra]
[Python 3 bridge to Ghidra's Python scripting]
[DSH plugin bundle with PyGhidra Ghidra bridge for binary import, decompilation, strings, and xrefs]
[dsh agent skill family: Ghidra headless RPC daemon plus seven RE scenarios (triage, unpack, static, vuln audit, dynamic, traffic, Android APK)]
[Vivisect extension bridging symbolik analysis to a headless Ghidra backend for decompiled C pseudocode]
[Typed API for Ghidra program databases from C++/Python/Rust; functions, types, memory, decompiler; LibGhidraHost HTTP extension or offline Sleigh backend]
[Orbis OS specific software and file formats]
[C++ Class and Run Time Type Information Analyzer]
[Ghidra analyzer/UI plugin for reversing .NET Native AOT binaries (type hierarchy, frozen objects)]
[Rust decompiler]
[GDB session]
[Ghidra Debugger plugins for the RESim reverse-engineering simulator (Simics/gdb integration)]
[Ghidra analyzer that locates and labels cryptographic constants]
[Detect obfuscated/complex code]
[A better string analyzer for Ghidra]
[Ghidra script that associates string literals with functions as comments, mirroring IDA FunctionStringAssociate]
[Python Command-Line Ghidra Binary Diffing Engine]
[Ghidra BSim-based binary similarity, function diffing, and family clustering with API and web UI]
[Struct Importer]
[An LLM extension for Ghidra to enable AI assistance in RE]
[RevEng.AI Ghidra plugin for binary similarity, function renaming, and AI-assisted reverse engineering]
[Ghidra analyzer for UEFI firmware]
[MCP for Ghidra]
[Windows Minidump loader for Ghidra]
[Ghidra Jython scripts to annotate Windows 9x VxD INT 20h calls in legacy device drivers]
[MCP for Ghidra]
[Ghidra MCP server/plugin with 200+ tools for AI-assisted reverse engineering]
[Ghidra decompiler in your browser]
[A Ghidra plugin for native code metrics]
[LLM-based reversing for radare2]
[Fast binary emulation and symbolic execution framework using radare2]
[Rust SMT-assisted opaque-predicate deobfuscator and symbolic-analysis toolkit for radare2]
[Garlic DEX/Dalvik decompiler plugin for radare2]
[A metamorphic binary transformation engine based on r2pipe and radare2]
Microsoft WinDbg extension which includes the ability to use YARA rules to hunt processes in memory.
[Trace COM]
[PEDA-like debugger UI for WinDbg]
[Analyze Control Flow Guard map]
[WinDbg scripts]
[Refactored version of tokenext]
[Callback Extension]
[WinDbg Copilot]
[Trace driver module transitions]
[WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode]
Plugin manager for x64dbg
[x64dbg plugin for Nauz File Detector (linker/compiler/tool detection)]
[Strings plugin for x64dbg]
[Detect malicious materials]
[Generate signatures]
[Binary Ninja]
[Disable parallel loading of dependencies]
[Running python3 script]
[Library Function Identification]
[Collaborative Breakpoint Manager]
[Api Breakpoint]
[paste string formatted byte data block into x64dbg easy]
[Lua script]
[Exports monitoring]
[Marks XFG call signatures as data]
[Call Finder]
[Loads the map file generated by IDA Pro]
[Load DWARF debug symbols from PE (.exe/.dll) as labels, functions, and file:line comments; libdwarf; x86/x64]
[Trace Reader]
[Cleaning Themida Mutation Assembly codes]
[x64dbg typeparsing plugin with Windows types]
[AI reverse engineering assistant for x64dbg]
[Python client for scriptable and repeatable debug sessions; full RPC protocol + MCP server]
[x64dbg memory scanner plugin inspired by Cheat Engine]
[Lua Extensions]
[Lua Extensions]
[Official CE Lua tools to scan Unreal Engine games (UObject/UClass/FProperty)]
[Official CE Lua extension to navigate and operate Cheat Engine with a game controller while attached to a process]
[Cheat Engine script to dump/inspect Godot 3.x/4.x runtime SceneTree and GDScript]
[Collection of Cheat Engine tables curated from CE forums (offline-focused)]
[Rust Windows trainer that converts Cheat Engine .CT tables to TOML and runs Auto Assembler scripts]
[Standalone Windows ImGui/DX11 trainer that parses Cheat Engine .CT tables and reads, writes, and freezes values in attached 32/64-bit game processes]
[Elden Ring]
[Overwatch IAT Fixer]
[Some Examples]
[Analyzing WebAssembly]
[MCP for Cheat Engine]
[DSH agent plugin bridging DeepSeek Harness to Cheat Engine via ce_* tools for memory scan, breakpoints, pointer analysis, and Lua/AA scripting]
[awesome injection]
[Scatter Manual Map]
[Extend Manual Map]
[Extend Manual Map]
[Extend Manual Map]
[IAT Manual Map]
[PTE/VAD Manipulation Manual Map]
[Map + APC]
[APC Remote Call]
[Manual Map]
[PTE.User]
[PTE.User]
[PTE.User]
[Hijack ROP]
[Attack COW]
[Hot Reload]
[KeUserModeCallBack]
[inject library and tool]
[inject tool]
[RtlCreateProcessReflection]
[NtQueueApcThreadEx + gadget]
[NtQueueApcThreadEx2 + existing handles & natural RWX]
[Various process injection techniques]
[Shellcode via Windows Debug API + HWBP; file mapping transfer; no WPM/RPM/VirtualAllocEx]
[Console child process injection via named-pipe IPC; no VirtualAllocEx/WriteProcessMemory]
[Manual mapper from LSASS]
[Map x64 DLLs in WoW64]
[Using NX Bit Swapping and VAD hide]
[Several code injection techniques]
[TpAllocInject]
[ThreadPool]
[SetThreadDescription]
[Early Cascade Injection]
[kernel-mode DLL Injector]
[Thread scheduling stealth method using APC with encrypted shellcode]
[Page Table Injector (PT-Injector)]
[Application launcher with DLL Injection and Lua Scripting]
[D3D11 GPU payload transport + compute shader decode, GPU-assisted process hollowing (research)]
[DLL injector using WHQL-signed driver; credits kdmapper]
[Runtime JS injection toolkit for Electron (V8/Node.js) apps via manual-map DLL injection; self-unmapping payload, REPL/SDK]
[Native Android mod injecting libmultiplayermod.so into FS12 via runtime hooking for multiplayer]
[Injecting into SELinux-protected system service processes]
[Code injection on Android without ptrace]
[Non-root injection]
[Inject through Virtual Space without root permissions]
[iOS runtime dylib injection tool]
[macOS Roblox dylib injector with internal/external ESP and offset finder]
[A PlayStation 5 ELF injector]
[Hijacking researches]
[Hijacking researches Tool]
[Hijacking researches]
[Project for tracking publicly disclosed DLL Hijacking opportunities]
[Dump the export table of PE files]
[DLL Hijacking Detection Tool]
[A general DLL hijack technology]
[DLL Hijack SCanner]
Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
[Modular Microsoft Detours anti-cheat bypass framework with ~130 API hooks across 16 modules, deployed via dinput8.dll proxy]
[A modified version of MinHook that only uses the Windows Native API]
[Global user-mode hooking framework via AppInit_DLLs (MinHook-based)]
A C++ x86/x64 hooking library. [MIT]
C++20, x86/x64 Hooking Libary v2.0
[Hooking the Linux kernel]
[Easy Kernel Detour]
[Page Guard]
[Skip Hook]
[gdi32 .data swap]
[cross-platform hook library]
[ARM64 Patching exception handler]
[PLT(Procedure Linkage Table) hook]
[ARM64 ELF static GOT hook patcher: code-cave shellcode injection, .init_array RELA hijack, config-driven ASLR-safe patching]
[Android ARMv8 inline hook framework]
[Android ARMv8 inline hook framework]
[ARM64 Android kernel inline hook framework with instruction relocation]
[Arm64 inline hooking for iOS, Android, OSX, and Linux]
[Rust x86]
[First-person camera mod for Ghost Recon Wildlands via dxgi proxy DLL, ThunkHook, and in-process memory writes on current EAC builds]
[rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries]
[This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation]
[A gadget finder and a ROP-Chainer tool for x86 platforms]
[Another (bad) ROP gadget finder, but this time in Rust]
[ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together]
[angrop is a rop gadget finder and chain builder]
[LLVM 18 pass plugin (sub/bcf/fla/trim) for manually mapped Windows DLLs to evade anti-cheat allocation/table pattern scans]
[Updated fork of btbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility]
Windows memory hacking library
Windows kernel hacking framework, driver template, hypervisor and API written on C++
[Clone process]
[kdmapper]
[read physical memory]
[Disk based DMA for ATA and SCSI]
[Disk based DMA for ATA and SCSI]
[Minimal memory library for Windows/Linux]
[W/RPM Driver and usermode for Linux]
[RPM for Windows]
[DMA RPM for Windows]
[Kernel-mode W/RPM for Windows]
[Kernel-mode W/RPM/mouse_event for Windows]
[RPM for Windows]
[Kernel-mode W/RPM/mouse_event for Windows]
[Usermode exploit to bypass any AC using a 0day shatter attack]
[Guide to building custom/modified DMA attack firmware based on pcileech-fpga]
[Windows-first guide to building custom PCILeech FPGA DMA firmware (donor analysis, BAR/TLP, Vivado)]
[Guide to disguising LambdaConcept PCIe Screamer Squirrel DMA firmware as a Realtek RTL8111 NIC to evade anti-cheat PCIe enumeration]
[A Linux framework for synthetic PCIe device emulation entirely in userspace]
Uses PCIe hardware devices to read and write from the target system memory via Direct Memory Access (DMA) over PCIe.
[FPGA HDL/firmware modules for PCILeech DMA attack hardware]
[Quantumstealth open source Fullstealth firmware; Vivado build for M2/Squirrel/Captain 75T/Enigma X1]
[Pcileech QuantumStealth Max firmware; Vivado for M2/Squirrel/100T/Captain 75T/Enigma X1/Immortal 75T]
[pcileech-fpga with wireless card emulation]
[pcileech-style DMA network-card firmware (AX200) for FPGA DMA research vs anti-cheat]
[PCILeech FPGA firmware emulating C-Media CMI8738/PCI-SX sound card on Artix-7 DMA boards]
[PCIe DIY DMA toolkit for Xilinx SP605 with TLP control, UEFI/Hyper-V backdoor PoCs]
[Cheat base]
[DMA library]
[DMA library]
[C++ DMA library for FPGA memory R/W, scatter I/O, module dumps, signature scans, CR3 fix, and kernel-derived input state (LeechCore/MemProcFS based)]
[CheatEngine DMA, not open-source]
[Windows/Linux DMA testing tools]
[PyQt6 Windows forensics suite with PCILeech-FPGA physical memory read/write via MemProcFS, process autopsy, and audited reversible actions]
[Windows CLI/GUI for benchmarking DMA read/write throughput and latency via memflow (pcileech/native)]
[Rust Windows GUI for flashing Artix-7 FPGA bitstreams, reading device DNA, and validating PCILeech/memflow DMA setups via CH347 or RS232 JTAG]
[Windows Go utility to detect/configure Artix-7 FPGA DMA boards, flash bitstreams, and measure DMA throughput]
[Go tool to clone a real PCI/PCIe donor via VFIO and synthesize ready-to-flash PCILeech FPGA bitstreams through Vivado]
[Scanning and patching of the entire Windows Kernel using DMA]
[DMA-PCIE-BOARD-75T]
[pcileech-fpga with wireless card emulation]
[DMA PE (Portable Executable) Dumper with DTB patching capabilities]
[PCILeech FPGA DMA VMD Controller Simulation Project]
[Free DMA Firmware.Bypass VGK/FAC and MSI-X interrupt]
[Using no interrupt bypass faceit/vgk]
[Use specific PID/VID to bypass faceit]
[DMA activator signal config (FT601/SystemVerilog): activation signal definition, state machine, anti-crack]
[VGK DMA bypass]
[VT-d/IOMMU]
[Firmware real camouflage through motherboard VMD function.（Pcileech-DMA）]
[DMA radar/ESP, MemProcFS + Unicorn Engine for pointer decryption emulation]
[Call of Duty read-only DMA cheat framework with PCILeech/MockDMA backends, BO6 offsets, and client-info decryption]
[CS2 external DMA assistant with configurable player ESP, map collision visibility checks, and LeechCore/VMM integration]
[A DLL with Loader that hooks common windows memory API functions and proxies them to the remote device via DMA]
[GDI + Steam]
[DWM VFTable]
[Hijack Nvidia]
[Hijack Nvidia]
[Hijack Nvidia]
[Hijack Nvidia]
[SetWindowsHookEx]
[OBS Hook]
[Duplicating with GDI]
[Android Native Overlay]
[Android Native Overlay]
[Rust Android cdylib mod menu with EGL/Vulkan render-chain hooks and ARM64 inline hooking]
[EAC Overlay]
[imgui overlay]
[Lightweight C++20 Win32/DirectX 11 transparent multi-window overlay framework with smart click-through and parent-child hierarchy]
[C++ DirectX overlay for Guild Wars 2 with D3D render hooks, game offsets, and ESP-style world/player visualization]
[Kernel Overlay Hider]
[DirectX hook game overlay for Electron/Qt/CEF apps injected into games]
[Multi-API (D3D9–12/Vulkan) proxy-DLL framework for ImGui overlays and game plugins on Windows]
[Rust overlay library with DirectX, OpenGL, and Vulkan hooking for in-game overlays]
[Hijacking thread contexts]
[Dxgkrnl + GDI]
[Kernel + GDI]
[Doom running in the NT kernel]
[Drawing from kernelmode without any hooks]
[DWM In Kernel]
[DWM In Kernel]
[DWM StackWalk]
[DWM Overlay without modify .text]
[Imgui On Android]
[Imgui On Android]
[Floating mod menu for Android]
[Imgui For Unity]
[Imgui For Unity]
[Imgui For Unity]
[Imgui For Unity]
[Imgui For Unity]
[ImGui with Zygisk]
[Imgui For Unity]
[IL2CPP Menu]
[External Imgui Menu]
[External Imgui Menu for Android]
[Imgui Menu for IOS]
[Menu for imgui]
[ImGui menu using Zygisk]
[ImGui menu using Zygisk]
[Imgui Menu for Android]
[Official Dear ImGui extensions including a hex memory editor widget]
[Living Off The Land Drivers]
[Living Off The Land Drivers]
[Vulnerable drivers for windows machines]
[Identifies LOLDrivers that are not blocked by the active HVCI policy]
[Scan loldrivers]
[Scan loldrivers]
[HVCI loldrivers check]
[Vulnerable Driver List]
[Vulnerable Driver List]
[Vulnerable Driver List]
[Scans for vulnerable drivers]
[Scans for vulnerable drivers]
[gdrv enhance]
[gdrv.sys]
[gdrv.sys]
[gdrv.sys Win11]
[gdrv.sys Win11]
[iqvw64e.sys]
[iqvw64e.sys]
[iqvw64e.sys]
[iqvw64e.sys]
[A kdmapper library for Rust]
[MsIo64.sys]
[Mhyprot2.sys]
[Mhyprot2.sys]
[Mhyprot2.sys]
[Mhyprot2.sys]
[Mhyprot2.sys]
[Mhyprot2.sys]
[Kaspersky]
[Kaspersky]
[dbutil_2_3.sys]
[dbutil_2_3.sys]
[dbutil_2_3.sys]
[dbutil_2_3.sys]
[AsUpIO.sys]
[Speedfan.sys]
[Speedfan.sys]
[Capcom.sys]
[Capcom.sys]
[Capcom.sys]
[IQVW64.sys]
[AsIO3.sys]
[AsusBiosIoDrv64.sys]
[CVE-2026-13585 bsitf.sys — IOCTL maps kernel contiguous memory to usermode + physical address disclosure]
[OpenHardwareMonitorLib.sys]
[RTCore64.sys]
[RTCore64.sys]
[RTCore64.sys]
[RTCore64.sys]
[amsdk.sys]
[amsdk.sys]
[LenovoDiagnosticsDriver.sys]
[LenovoDiagnosticsDriver.sys]
[LenovoDiagnosticsDriver.sys]
[BYOVD process killer via signed Lenovo BootRepair.sys — IOCTL 0x222014 ZwTerminateProcess, kills PPL-protected EDR/AV]
[wfshbr64.sys]
[AMD's Ryzen Master Driver]
[ProcExp152.sys]
[Afd.sys]
[etdsupp.sys]
[gmer64.sys]
[zam64.sys]
[zam64.sys]
[rzpnk.sys]
[echo_driver.sys]
[echo_driver.sys]
[nvaudio.sys]
[nvaudio.sys]
[AMDCpuProfiler.sys]
[rentdrv2.sys]
[SignalRgbDriver.sys]
[probmon.sys]
[KSecDD.sys]
[KSecDD.sys]
[csc.sys]
[IObitUnlocker.sys]
[viragt64.sys]
[viragt64.sys]
[atdcm64a.sys]
[appid.sys]
[vkrnlintvsp.sys]
[LPE due to integer truncation in vskrnlintvsp.sys]
[eneio64.sys]
[BdApiUtil64.sys]
[wsftprm.sys]
[BYOVD: Use 360netmon_x64.sys_wfp WFP driver to block EDR/XDR network connection]
[BYOVD: DsArk64.sys (Qihoo 360) - WHQL-signed, process kill from ring 0 + kernel R/W]
[An Exercice for Red Team to Reverse & Exploit, that's a valide BYOVD Killer, not HVCI Blocklisted, and not in LOLBIN]
[ampa.sys]
[BYOVD Read Write primitive]
[ThrottleStop.sys]
[NSecKrnl.sys]
[ltmdm64.sys]
[PoC for popping a system shell against the LnvMSRIO.sys driver]
[Non HVCI Block listed - Microsoft signed driver exploited to kill AV/EDR's processes]
[PPL LSASS dump via Defender KslD.sys — legacy on-disk driver, IOCTL 0x222044 + MmCopyMemory read]
[BYOVD Credential Extractor using Microsoft Defender's KslD.sys]
[IMFForceDelete.sys]
[IMFForceDelete.sys]
[PoisonX.sys]
[xhunter64.sys]
[Rust PoCs for Wellbia XIGNCODE3 xhunter1.sys and xhunter2.sys (CVE-2026-15430)]
[Qiomem.sys]
[PdFwKrnl.sys]
[PdFwKrnl.sys]
[AmdPowerProfiler.sys]
[Registry Callback]
[Registry Callback]
[Registry Callback]
[Hijack Beep.sys]
[Hijack IRP Beep.sys]
[Hijack IRP Null]
[Hijack IRP SpeedFan.sys]
[Windows kernel driver that loads Pawn modules for physical/virtual memory I/O, MSR/PCI access, and IOCTL-based user-mode communication]
[Signed WDM driver embedding wasm3 to load unsigned WASM kernel modules with nt/hal FFI, IOCTL control, InfinityHook, and HVCI-compliant execution]
[Double Data Pointer]
[NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
[NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
[NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
[NtQueryAuxiliaryCounterFrequency]
[NtQueryAuxiliaryCounterFrequency]
[NtTokenManagerCreateFlipObjectReturnTokenHandle]
[NtTokenManagerGetAnalogExclusiveTokenEvent]
[FlushFileBuffers]
[NtCompareSigningLevels]
[NtCompareSigningLevels]
[.data Pointer hook in Afd.sys]
[NtUserGetObjectInformation]
[NtMapVisualRelativePoints]
[NtUserGetThreadState]
[KeRegisterBoundCallback]
[NtSetCompositionSurfaceAnalogExclusive]
[NtSetCompositionSurfaceAnalogExclusive]
[NtUserSetSysColors]
[NtUserUpdateWindowTrackingInfo]
[NtGdiPolyPolyDraw]
[NtGdiPolyPolyDraw]
[NtGdiPolyPolyDraw]
[NtGdiDdDDINetDispGetNextChunkInfo]
[NtDxgkGetTrackedWorkloadStatistics]
[NtDxgkGetTrackedWorkloadStatistics]
[NtDCompositionSetChildRootVisual]
[Win32kApiSetTable]
[Shared Memory]
[NtUserGetPointerProprietaryId]
[NtDxgkGetTrackedWorkloadStatistics/NtDxgkGetAvailableTrackedWorkLoadIndex]
[IsWin32KSyscallFiltered]
[NtQueryIntervalProfile]
[NtQueryInformationJobObject]
[NtQueryLicenseValue]
[NtCreateCompositionSurfaceHandle]
[NtOpenCompositionSurfaceSectionInfo]
[FirmwareTableHandler]
[NtUserSetGestureConfig]
[.data ptr swapper for newer win32k versions]
[Windows kernel driver + usermode client: physical/virtual memory R/W, page-table walk, pattern scan, MouClass mouse IOCTL]
[Kernel driver and usermode client using Windows Notification Facility state names for covert UM/KM comm, plus process memory R/W and ObRegisterCallbacks handle stripping]
[UEFI Environment for VisualStudio (MSVC), Extremely easy to setup]
[UEFI SMBIOS serial spoof before bootx64.efi; no ntoskrnl/winload pointers; Linux-capable; C]
[SMM Driver]
[Debug source with clion+clang+gdb]
[Visual Studio template for GNU-EFI]
[EFI Manual Map]
[EFI Manual Map]
[EFI Manual Map]
[EFI Manual Map]
[Custom KiSystemStartup]
[PoC MBR bootkit inspired by Petya ransomware; custom MBR/stage-2; Real→Protected Mode; NTFS MFT Salsa20 encryption; Assembly/C/C++]
[0/68 VirusTotal. NT AUTHORITY\SYSTEM before the logon screen. No disk writes. No kernel driver. No PCR violations in production builds — BitLocker never prompts. In-RAM SYSTEM hive patching via direct gBS->ExitBootServices hook at UEFI level]
[Native NTFS read/write UEFI x64 driver with EFI Commander pre-boot file manager — chkdsk-clean unmount, no EDK2 BaseTools]
[Native UEFI x64 Intel CPU undervolting via MSR/MMIO before OS load; NVRAM Setup patching (CFG/OC Lock), Secure Boot SelfEnroll, Plundervolt-related voltage-interface research]
[Smm cheat]
[Simple mmapper which using UEFI runtime driver]
[Generic UEFI bootkit used to achieve initial usermode execution]
[Hooking MmCopyMemory PG safe]
[A fully scriptable UEFI bootloader]
[UEFI backdoor]
[Simpel usage of graphic in UEFI]
[Changes the boot screen image on a UEFI computer]
[A UEFI application for dumping the contents of RAM]
[NoMoreBugCheck Reloaded]
[Lenovo-X260-Hackintosh-BigSur-OpenCore-0.8.5]
[EDK2 UEFI implementation for writing an Offline Crash Dump]
[A UEFI-based driver for direct memory access and process manipulation, with built-in security features and stealth capabilities]
[Quickly create and run optimized QEMU VMs for Windows/macOS/Linux]
[VirtualBox Git mirror]
[WinForms utility to stop/disable Tencent ACE, Perfect World, and related anti-cheat kernel drivers blocking VirtualBox VM spawn (VERR_INVALID_NAME -104), with one-click restore]
[GPU Passthrough]
[Kernel Debugger]
[VirtualBox with KVM Backend]
[Type-1 hypervisor for ARM64]
[Guest introspection library]
[Bypass CPU Timing]
[Bypass RDTSC]
[Hidden QEMU]
[Hidden QEMU]
[I made my VM think it has a CPU fan]
[Hidden QEMU]
[Hidden QEMU]
[PVE Helper Scripts]
[Intel-PT]
[QEMU Malware Behavior Analyzer]
[UE SDK Dump By QEMU]
[Platform for Architecture-Neutral Dynamic Analysis]
[Framework for game cheat development]
[C++ remake]
[Play original Xbox games]
[QEMU on browser]
[use ptrace to read the TEB of a process on Linux]
[Userspace emulation of Hololive Dreams usrdrv017964 kernel anti-cheat for Wine/Proton]
[Experimental CrossOver patcher to improve compatibility with Windows games protected by anti-cheat]
[Python PE analyzer and Wine launcher that flags kernel anti-cheat/DRM blockers and auto-provisions prefixes and dependencies before running Windows games on Linux]
[Native Rust/Tauri cheat panel for Steam games on Proton: launch Windows trainers in the correct prefix, scan memory natively, and share community address profiles]
[Hide Window]
Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.
[Another approach to thread stack spoofing]
[a TRUE call stack spoofer]
[header only]
[Custom stack call]
[ROP-based sleep obfuscation]
[Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven]
[Stack spoofing using jmp rdi]
[An easy-to-use and powerful Macro for Stack Spoofing]
[Spoofing the return address of a WinAPI call by modifying the stack]
[BYOUD is a framework for x64 stack spoofing on Windows. It tackles a complete opposite approach from classic stack spoofing, manipulating unwind metadata to hide arbitrary chunks of the call chain in debuggers and EDRs]
[Crystal Palace DLL loader with CET-compatible stack spoofing, EAF-compatible API resolution, heap/image masking]
[CET-compatible Windows x64 shellcode loader — fully backed call stacks via code-cave injection into signed module .text, RtlAddFunctionTable + inverted function table collapse, donor unwind metadata; CRT-free, DJB2 API hash, EAF/ShieldedRead, Zilean sleep obfuscation]
[Hide File]
[Delete File]
[Hide Window]
[Hide Callback]
[Find Codecave]
[Manual Map In Signed Driver]
[Discarded Driver Section Manual Map]
[Manual Map To Large Page Driver]
[Signed Driver Map]
[Hide Driver]
[Hide Driver]
[Windows minifilter abuse PoCs for stealth and concealment]
[Minifilter driver for file/registry hiding, handle access stripping, and cross-process MDL memory via fltmgr comm port]
[Folder and file protection via kernel FSFilter minifilter — pure x64 MASM, zero CRT (~60 KB); hide, lock, read-only or block execution; Win11 GUI with Mica, scriptable CLI, drag-and-drop, per-process trusted bypass]
[Driver Trace Cleaner]
[Driver Trace Cleaner]
[Driver Trace Cleaner]
[Hide Memory By VT]
[Hide Driver By Modify Flink/Blink]
[Hide Driver By MiProcessLoaderEntryk]
[Hide Kernel Thread]
[Hide Kernel Thread]
[Hide Process/File]
[Spoofs Thread Start Address]
[Hide Kernel Thread]
[Session Driver]
[MiMapViewInSystemSpace]
[Hijack Driver]
[Hide Process/Thread/Handle]
[Remap a library for Android]
[Kernel-level path manipulation and hiding framework for Android GKI/Linux]
[BootExecute EDR Bypass]
Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
[Neural Network]
[Neural Network]
[Keyboard Mapper]
[Machine Learning]
[Machine Learning YOLOv5]
[Machine Learning YOLO]
[DXGI + TensorRT + driver-level input]
[Machine Learning YOLOv8]
[YOLOv8 in CS2]
[PUBG yolov4]
[PUBG yolov5]
[PUBG yolo dataset]
[PUBG yolo dataset]
[Camera Triggerbot]
[gptCursorAsync]
[NtUserInjectMouseInput]
[NtUserInjectMouseInput]
[NtUserInjectMouseInput SYSCALL]
[OpenCV + Triggerbot]
[OpenCV + Triggerbot]
(Win) - 即大名鼎鼎的 AHK，优秀开源的自动化软件，时常会在别的地方见到他人分享的 AHK 宏脚本。
[Human-like mouse movement using WindMouse algorithm]
[Simulating keyboard, mouse]
[Kernel-level input automation engine using an Interception driver wrapper to inject HID events with microsecond timing, aimed at bypassing user-mode input restrictions imposed by anti-cheat and game engines]
[logitech]
[MouClass]
[For Android]
[For Android]
[NtUserInjectMouseInput]
[A Rust library for interacting with Logitech virtual driver]
[Intercepting DeviceControl via WPP]
[Abusing Alignment]
[Kernel HWID spoofer source for SMBIOS WMI, disk/volume, GPU, network, EFI, and registry modules]
[Spoofing the NVIDIA GPU UUID by modifying "nvlddmkm.sys"]
[trick of keystore. Android 12 or above is required]
[A trick of keystore. Android 10 or above is required]
[Native C++ mod SDK generator for Windows x64 Unity games (Mono/IL2CPP) with CMake project scaffolding, loaders, hooks, ImGui overlay, and optional MCP dev bridge]
[UE RE]
[Universal Unreal Engine VR Mod (4.8 - 5.4)]
[ShooterGame Demo]
[ShooterGame Demo]
[Game cheat base]
[Unreal Engine address scanner and test suite]
[Unreal Engine reflection data format and extractor]
[SDK Dump for all of UE4 and UE5]
[Runtime UE 4.22–5.7 reflection dumper: C++ SDK, .usmap, IDA/Ghidra/BN types, Frida bindings, and Python stubs from live process, minidump, or disk]
[SDK Dump for UE 4.19 - 5.2]
[UEDumper+MemProcFS 4.19 - 5.2]
[SDK Dump for UE 4.23 - 4.27]
[SDK Dump]
[SDK Dump]
[SDK Dump For Android]
[SDK Dump For Android]
[SDK Dump For Android]
[SDK Dump For Android]
[SDK Dump For Android]
[SDK Dump For IOS]
[TypeScript and Frida UE4dumper]
[SDK View]
[SDK Generator]
[SDK Template]
[FOV Changer]
[Mod Loader]
[UE4 Cheat For Android]
[Universal Cheat development kit]
[Viewing and modifying UE4 game assets]
[Browser and decompiler for UE packages]
[Re-Host of Unreal Engine 4/5 Scripting System]
[Mono Debugger]
[Mono Dump + DMA]
[Il2Cpp Dump]
[Il2CppDumper fork with native Rust PDB generator for x64 PE (GameAssembly.dll) — function names, full struct types and typed prototypes, auto-loaded by IDA]
[Il2Cpp Dump for Genshin Impact]
[Il2Cpp Dump GUI]
[Il2Cpp Dump Runtime]
[Il2Cpp Dump for Android Platform]
[Zygisk module for live IL2CPP metadata dumping, in-process memory editing, method invocation, and Lua scripting on Android Unity games]
[Il2Cpp Dump for Android Platform]
[Unity IL2CPP Disassembler (for apk)]
[Il2Cpp Dump]
[Il2Cpp hack speed]
[Il2Cpp Dump using qiling]
An in-game UI for exploring, debugging and modifying IL2CPP and Mono Unity games.
[Il2Cpp Version]
[Il2Cpp Version]
[IL2CPP resolver]
[IL2CPP resolver]
[External Mono Example]
[Header-only C++17 Unity 2020–2023 external runtime introspection (Mono/IL2CPP GOM scan, IL2CPP metadata, W2S, offline dumpsdk)]
[Il2Cpp SDK generator for Android]
[An unofficial repo of decompiled Unity dll files]
[Dump native and .NET assemblies]
[Extracting assets]
[Extracting assets]
[Extracting assets]
[Extracting assets]
[Extracting assets/2025 updated]
[Il2Cpp Hook Scripts]
[Il2Cpp/Mono Hook Scripts]
[IOS Speed Tools]
[Il2Cpp Finder]
[plugin/modding framework]
[BepInEx in-game plugin for Unity Mono introspection, instrumentation, and controlled runtime modification; runtime half of UnityLudometryMCP]
[Universal BepInEx utility plugins for IL2CPP Unity games — graphics settings, window resize, mute in background, Message Center, ByteFiddler, ProcessAffinityOverride]
[ReMake of Il2cpp internal reflection system in C++]
[Looks for a vulnerable entry point]
[A multi-threaded rust material scanner]
[Frida dump Il2Cpp]
[Unity cheat framwork]
[Modding il2cpp games]
[Unity cheat framwork]
[Unity cheat framwork]
[C# Unity IL2CPP memory trainer/bot for TaskbarHero with ACTk bypass, batch-read automations, and WPF control panel]
[SDK Generator]
[SDK Generator]
[SDK Generator]
[dll injector for uwp apps]
[dll that hooks uwp interfaces]
[User-mode VAC bypass (C) that aborts VAC scans so CE/cheats can attach without VAC Error]
[Injector]
[VAC hook]
[VAC3 module emulator]
[VAC Emulator]
[Technical writeup of VAC/CS2 internals from public reverse-engineering sources]
[Reverse-engineering notes and rebuild tooling for GoldSrc/WON-era VAC1 ModuleC/ModuleS bytecode VM modules (2002–2004)]
[Retrieves VAC module ice encryption key]
[PoC to disable VAC and dump modules with automatic decryption]
[Fully working kernel-mode VAC bypass]
[Integrity Checks]
[Bypass MmCopyMemory]
[Packet Fucker]
[Packet Fucker]
[Reversed Source]
[EAC sdk's memory leak]
[Memflow-based external VM reverse-engineering dossier on a captured EasyAntiCheat_EOS.sys build, documenting kernel callbacks, minifilter policy, and device IPC with reproducible evidence]
[eac.elf VM reconstruction: dlopen/trace harness, dispatch & VMTAIL probes, bytecode recover/IR/CFG, handler ISA, static path replay, MBA reducers; Linux ELF]
[Integrity Checks]
[Simple EasyAntiCheat x64 emulator]
[Extract the DLL that EACs manualmaps into the game process]
[Virtual machine checking]
[Memory sig maker]
[Shellcode]
[Decrypt and Extract the files from the EAC]
[Bypassing self-integrity]
[Bypassing CR3 protection]
[Bypassing integrity check]
[EAC Emulator]
[Extracts eac's driver at runtime without it touching the disk]
[Skip EAC thread detection]
[A simple UM + KM example of how to bypass EAC CR3]
[Elevating Handle By LSASS]
[SetWindowsHookExW]
[BEDaisy.sys RE reference: IOCTL/API/anti-DMA]
[GTA5 Enhanced BE heartbeat bypass: client–driver RE notes, AOB scan, external D3D11 overlay menu]
[PUBG P2C loader RE report: VMProtect, DWM overlay injection, BattlEye bypass, Zakynthos detection]
[Documented R6 Siege Y11S3 BattlEye/Sentinel handshake failure on standard launch paths, with timeline, driver load evidence, and working bypass via RainbowSixHelper.exe]
[Packet Fucker]
[BEClient2.dll Dumper]
[BattlEye shellcodes tester]
[BattlEye RCON UDP connection]
[Emulator]
[Emulator]
[Instrumentation Callback]
[BEDaisy.sys report bypass]
[ZwRaiseException Dump]
[RtlpCallVectoredHandlers Dump]
[Resolve vgk's protected imports]
[Decrypting and intercepting encrypted imports of Vanguards Kernel Driver]
[VGK's illegal PF]
[VGK's SwapContextHk]
[Riot Vanguard streamed module to PE converter. Resolves hashed imports, reconstructs sections, and writes valid DLLs from RITO format binaries]
[Discord bot that polls Riot clientconfig, hashes Vanguard setup files, and alerts on anti-cheat updates]
[Windows tools to check Riot Vanguard/vgk status and toggle auto-start]
[Full-pipeline static reconstruction and security-property analysis of XIGNCODE3 on Black Desert]
[Windows utility that throttles Tencent ACE (SGuard) processes via IDLE priority, last-CPU affinity, and EcoQoS to reduce anti-cheat overhead]
[Coordinate Decryption (Android ARM64)]
[Honor of Kings mobile RE: KernelPatch KPM reads, Tencent ACE analysis, IL2CPP/native notes]
[Stealth kdmapper kernel driver and virtualized UE memory scanner for Tencent ACE evasion research]
[Byte-level RE post-mortem on Tencent ACE (libanogs/libanort) in Free Fire, with IDA tooling and detection catalog]
[IDA-Plugin]
[Private Server-CMS-027]
[Private Server-CMS-079]
[Private Server-CMS-079]
[Private Server-CMS-143]
[Private Server-CMS-079]
[Private Server-GMS-083 C++]
[Private Server-GMS-083 C#]
[Private Server-KMS-316]
[Private Server-TMS-113]
[v83 edits for creating a custom resolution client]
[Battle Analysis]
[Heaven Client]
[Unity reimplementation of MapleStory v83 client; TDD + clean architecture; C#; NX assets]
[Unity MapleStory emulator (WIP); target TMS v245; C#; WZ maps/footholds/physics; no server yet]
[Unity framework for MapleStory-style MMORPGs; C#; WZ via UnityWzLib; GPL-3.0]
[TMS Old Hack]
[GMS Old Hack 128-140]
[GMS Bot]
[Private Server-GMS-095 C#]
[Private Server-TMS-196]
[GMS-095 Client Analysis]
[CMS-095 Client Analysis]
[Private Server-Rust]
[Maplestory online Extractor]
[Offline MapleStory Client Emulator]
[MapleStory Wolrds .mod file packing/unpacking tools]
[JMS v186]
[HeavenMS Client]
[HeavenMS Server]
[LibreMaple Client]
[GMS 083 server on Android]
[Private Server-KMS-316]
[MapleStory Client Emulator]
[Experience gain & HP/MP cost lab for MapleStory Worlds Artale]
[An auto level up script for Maple Story Artale]
[YOLOv8 training project for MapleStory object detection using Apple MPS acceleration]
[YOLO for MapleStory Worlds (Artale)]
[Internal Minecraft DX11 DLL client with ImGui overlay and MinHook hooks]
[Lunar Client 1.8.9 internal DLL with JNI/JVMTI, wglSwapBuffers OpenGL hook, and ImGui overlay modules]
[Open-source 1.8.9 MCP hacked client with Watchdog/Polar/Grim bypass modules and bundled Java 8 runtime]
[Minecraft Bedrock/PE MITM cheat client with protocol relay, combat/movement modules, and ESP]
[Mineflayer elytra autopilot with vanilla physics, FSM navigation, and anti-cheat-aware Bézier flight paths]
[Fabric mod for automated elytra/fall clutch saves with configurable anti-cheat-aware timing]
[Open-source NeoForge and Fabric Minecraft utility client with modular addon system and custom Lumin/PrismRHI rendering stack]
[Open-source Fabric utility/cheat client for Minecraft 26.2 with modular combat, movement, render, and HUD modules]
[Open-source Fabric 1.21.11 Minecraft utility client with HUD, ESP, waypoints, combat helpers, and in-game preset configuration]
[Meteor Client addon that prints Litematica schematics with BlockState simulation, raytracing, and anti-cheat-aware placement settings]
[Android Fall Guys mod menu using Frida and frida-il2cpp-bridge]
[Python based scripting platform]
[Nodejs based scripting platform]
[Hypervisor-assisted]
[C++ internal with orbwalker, zoomhack, skin changer, and injector]
[External]
[Offset dumper]
[An open-source hack for World of Warcraft]
[Wow Lua Unlocker]
[Auto Fishing]
[CS 1.6 Fastcup Full Kernel Driver Cheat]
[External]
[Linux External]
[External]
[Auto Dump]
Cross-platform game hack for Counter-Strike 2 with Panorama-based GUI.
[Cross-platform]
[SDK for Rust]
[Win SDK]
[Linux SDK]
[Model Changer]
[Sound ESP]
[Internal]
[Backtrack Patch]
[Internal]
[Crosshair Generator]
[obs-studio plugin for csgo]
[Running from kernelmode]
[Cheat Compiler]
[Internal]
[Internal]
[Kernel-mode]
[Tiny csgo client for connecting dedicated server]
[CSGO animation code]
[Internal]
[Imgui Menu]
[Internal]
[aw-v5.1.13]
[External modular C++ framework with memory reading, hazedumper offsets, W2S, and DX11 ImGui overlay]
[External]
[Internal]
[Internal]
[External]
[External C#]
[External]
[Generate CS2 signatures via Agent SKILLS with ida-pro-mcp]
[Runtime schema + RTTI extraction for Source 2 (Deadlock, CS2, Dota 2); no source2gen required]
[Educational CS2/Source 2 internals guide covering schemas, offsets, entities, networking, Panorama, and verification labs]
[External CS2 overlay in C++/DirectX 11 with ESP, aimbot, radar, and inventory/Panorama bridge via cs2-dumper offsets]
[Open-source external CS2 cheat in C++23 with DX11 overlay ESP/chams, aim/trigger tools, grenade helper, Lua API, and optional Web Radar]
[FOV changer]
[undetected counter strike 2 browser based radar cheat]
[DMA Radar]
[Browser based radar cheat]
[DMA External]
[Educational CS2 external ESP (SDL2 + ImGui) with auto-updating offsets via cs2-dumper]
[GPLv3 external CS2 cheat in C# with ESP, aimbot, radar, and minimal memory writes]
[External CS2 cheat with aimbot, ESP, spinbot, and pluggable driver interface]
[C++20 external CS2 suite with aimbot, ESP, triggerbot, overlay, and optional kernel driver/mapper]
[External]
[External]
[External]
[External]
[External]
[External]
[External]
[External]
[External]
[External]
[Open-source external CS2 cheat written in Rust; ESP/RCS/Aimbot/Triggerbot/Crosshair/Radar/Bomb Timer/Spectator List]
[Linux External]
[Internal]
[Internal]
[Internal]
[Internal]
[Rust-based internal]
[Open-source CS2 DMA external (FPGA/LeechCore) with ESP, radar, and grenade helper on a second machine]
[External Ring3/Ring0]
[Python External]
[Python external with triggerbot, ESP, bunnyhop, and auto offset dump via cs2-dumper]
[Internal]
[Open-source internal Counter-Strike 2 cheat in C++ (TempleWare-based) with Visual Studio build and DLL injection workflow]
[Internal CS2 cheat with skin/glove changer, DirectX hooks, and Source 2 SDK headers]
[CS2 internal research framework with direct syscalls, optional kernel driver IPC, DX11 hooks, and ImGui menu]
[CS2 security-research P2C templates: VMProtect FVA reconstruction, kernel drivers, and user-mode injectors]
[Educational AssaultCube external: DX11 ImGui overlay, ESP, tracers, aimbot via ReadProcessMemory]
[Walkthrough of an ESP and aimbot cheat from scratch]
[Educational C++20 AssaultCube internal: hooks, ESP, aimbot, ImGui overlay]
[External]
[Crosshair Setting]
[Internal]
[External]
[External Valorant cheat with reversed UE SDK headers, kernel driver I/O, and aimbot/lineups]
[Decrypt]
[100% accurate Black Ops 2 FastFile linker]
[Reverse engineering and analysis]
[Custom Call of Duty: WWII client; modding and client-side improvements; offline MP/zombies/campaign, Steam/Demonware emulation]
[C++ MW2 injected DLL with D3D12 Present hook (Kiero), ESP, and aimbot]
[il2cpp dump]
[Research archive: VMProtect unpacking, license-protocol reversal, and anti-cheat bypass analysis of a commercial CODM loader]
[External Apex Legends cheat in Rust (aim assist, triggerbot, ESP); embeddable API]
[Item glow]
[External]
[Internal]
[External Apex Legends cheat with driver-backed memory access and DX11 ImGui overlay]
[Offset & Dump]
[Virtual Table Offsets]
[Signature]
[Signature]
[BE forcer for fortnite]
[External Exploits]
[External]
[Internal]
[Fortnite external cheat source with aimbot, ESP, and ImGui overlay]
[Fortnite external cheat source with aimbot, overlay, and driver comms]
[Fortnite external base with IOCTL RPM, CR3 bypass stub, offsets, and ImGui DX11 overlay]
[External Fortnite cheat base with kernel driver comms, DirectX 11 overlay, and ImGui menu]
[External]
[External read-only kernel-based gameplay enhancer in Rust; requires Zenith driver; radar/ESP/health/distance]
[pak extracting tool]
[Offsets Generator]
[Vmread + Radar]
[Internal Escape from Tarkov cheat with ESP, direct syscalls, pattern scanning, and injector]
[DMA Radar]
[Open-source DMA EFT radar and companion toolkit (C++/ImGui, fuser support, leechcore/vmm)]
[Duckov Market Mod]
[GPU check bypass]
[Shows Players through walls]
[Emulate OW2 AC]
[Disable battleye]
[Auto Dump]
[Auto Dump]
[Static RE of RustSecure client anti-cheat with loader/core analysis, detection-module docs, and bypass notes]
[Rust external cheat with custom kernel driver (DriverRW) and usermode ESP/aim GUI]
[Internal]
[Mod Editor]
[BattlEye Tool]
[Server on Windows]
[Server on Linux]
[Server based on Linux and Docker]
[Mod Patcher]
[A modding kit for Palworld]
[Setting Generator]
[Anti Cheat]
[Anti Cheat]
[Palworld dedicated-server ops workbench with PalDefender anti-cheat integration (config, bans, whitelist, REST/RCON)]
[Decode CFG]
[Private Server]
[A sweet genshin impact script]
[Anti-Debug Bypass]
[Bypass tool]
[External]
[difficulty changer & bot]
[ANTI ANTI CHEAT]
[Debug tool for Elden Ring modding]
[Scripts I use to play and reverse-engineer the DualShock 4]
[GTA V Source Code Build Tutorial]
[Viewer/Editor]
[Mod Menu]
[Extending functionality of the gameplay camera]
[DMA-based GTA5 / GTA5 Enhanced control tool using MemProcFS and ImGui]
[Chess Engine]
[Chess Engine]
[Open-source L4D2 internal + external training framework (x86, C++17, MinHook) with loader, DLL, and documented architecture for educational/local-server use]
[Structured research index covering anti-cheat architecture, Windows kernel security, VT-x/EPT virtualization, graphics integrity, and reverse engineering references]
[Defensive write-ups on publicly disclosed Windows kernel CVEs from an anti-cheat/EDR telemetry and mitigation perspective]
[Executable File Packing]
[Anti Debug]
[A list of games using anti-cheats]
[Crowd-sourced source repo for tracking game anti-cheat support on GNU/Linux, Wine, and Proton]
[Vendor-agnostic feasibility study on hosting kernel anti-cheat components on Linux without virtualization, covering LSM, signing, isolation, and ABI constraints]
[Curated catalog of public Minecraft Java/Bedrock anticheats across platforms and versions]
[GTA5 MP servers]
[Senior Design: Anit-Cheat Detection system]
[CS2 hybrid anti-cheat proposal: Glicko-2 judge ratings, honeypot entities, and shadow monitoring with Python PoC]
[Public researchings of the Google's Android apps protection]
[RCE hardening toolkit for PC gamers]
[Read-only PC forensics check for Call of Duty / Warzone screen-share vetting. Reads execution and existence traces that survive deletion of the binary and reboots (Prefetch, BAM/DAM, UserAssist, Shimcache, PCA, raw USN journal), plus DMA/PCIe hardware, HWID spoof indicators, kernel driver…
[Testing Framework]
[Testing Framework]
[Minimal Python Minecraft Java protocol client for authorized anti-bot/anti-cheat stress testing]
[Fabric 1.21 client mod for anti-cheat QA—observes, visualizes, logs, and simulates server-side detections without enabling cheats]
[Behavioral anti-cheat test bench simulating a lane-change mobile skill game with attacker ladder, detector ensemble, ROC calibration, and economy analysis]
[Known Driver Mappers]
[Injection Testing]
[Injection Testing]
[Injection Testing]
[Injection Testing]
[Injection Testing]
[Injection Testing]
[Map + APC]
[Injection Testing]
[Injection Testing]
[Several code injection techniques]
[RtlCreateProcessReflection]
[Injection Testing]
[Injection Testing:SetWindowsHookExW]
[Injection Testing:SetWindowsHookExW]
[Injection/Shellcode Testing]
[Injection/ Testing]
[Elevating Handle]
[Elevating Handle By LSASS]
[Elevating Handle By LSASS]
[Elevating Handle By LSASS]
[Elevating Handle By Timing Attack]
[DuplicateHandle]
[Reuse opened handles By LSASS]
[Driver + DLL which allows us to open handles to callback-protected processes]
[Manual mapper from LSASS]
[Call undocumented DPAPI RPC interface directly via NdrClientCall3 to lsass protected_storage; no CryptUnprotectData]
[Hide Driver]
[Hide Driver By Modify Flink/Blink]
[Hide Driver By MiProcessLoaderEntryk]
[Driver Trace Cleaner]
[ETW Testing]
[ETW Testing]
[FsFilter Testing]
[Windows minifilter abuse PoCs for stealth and concealment]
[User APC + File Mapping Testing]
[Debug Testing]
[Hearbeat Testing]
[MmCopyVirtualMemory Testing]
[Hacked Hypervisor Testing]
[VT debuger]
[Hacked Hypervisor Testing]
[Stealth Intel VT-x Type-2 hypervisor: passes common HV detection, works with EAC/BE/AVs; CPUID cache, CR4.VMXE hide, TSC compensation, private host CR3]
[Experimental Intel VT-x type-2 hypervisor with EPT hooking for stealth memory interception and integrity-check bypass research]
[Hacked Hypervisor Testing AMD]
[Hacked Hypervisor Testing AMD]
[memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V]
[Runtime Hyper-V Hijacking with DDMA]
[NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks]
[Lock File]
[Cheat Driver]
A PoC malware with good intentions that aimes to stress anti-malware systems.
[Win32 practice app with common anti-debug checks for bypass training]
[Windows Kernel]
[Fully syscalled C/C++ userland anti-debugging library and CLI for Windows with stealth-focused anti-RE protections]
[Anti Debugging]
[C++/CLI]
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
[Reveal anti-debugging and anti-VM tricks]
[C++ macro for x64 programs that breaks ida hex-rays decompiler tool]
[A 25-year-old architectural blind spot affecting modern reverse engineering tools]
A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC
An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents
[VEH + PAGE_GUARD]
[VEH + PAGE_GUARD]
[VEH + PAGE_GUARD]
[VEH + PAGE_GUARD]
[VEH + PAGE_GUARD]
[VEH + PAGE_NOACCESS]
[VEH + PAGE_NOACCESS]
[VEH + PAGE_NOACCESS]
[VEH-based function call obfuscation: guard page and INT3, byte switching without memory or assembly allocation]
Open-Source Shellcode & PE Packer.
[Simple Windows PE packer/crypter: compress and encrypt via custom VM into a self-extracting stub]
[Open-source .NET/native PE crypter with AES256, startup/injection options, and AntiVM/AntiCRACK features]
[Strip Debug Info]
Encrypted PE Loader Generator
[Hint/Name Table]
[Android APK/game protection packer with per-method VMP (HyVm), dex2c, smali renaming, resource encryption, and anti-tamper/anti-debug/anti-Frida/anti-root checks]
Position-independent(reflective) PE loader that enables in-memory execution of native PE files(EXE, DLL, SYS).
Simple PE Packer Which Encrypts .text Section I release a simple PE file packer which encrypts the .text section and adds a decryption stub to the end of the last section.
[Compressing .net assemblies]
[ARM64 Linux ELF Packer/Loader]
[Linking multiple PE\PE + files to one]
Simple implementation of an ELF packer that creates stealthy droppers for loading malicious ELFs in-memory.
Simple packer working with all PE files which cipher your exe with a XOR implementation.
Silent Packer is an ELF / PE packer written in pure C.
[ELF loader which aims to replace ld-linux.so of glibc]
[ELF Loader for ps5-jar-loader]
[IAT Obfuscation]
[Reducing entropy]
[Polymorphic Encryptor]
[Evasive PE packer for CTF and Windows low-level security education; in-memory execution and layered obfuscation]
[Rust Based PE & Shellcode Packer]
[ELF X64 loader]
[Written by Rust]
[A Windows PE packer with full TLS (Thread Local Storage) support]
[Modifying the jmprel_entry->r_offset]
[Stealthily inject shellcode into an executable]
[Modify machine code in binaries with alternative x64 assembly opcodes for AV evasion]
[Qt/CLI PE unpacker-emulator using XEmulUnpacker to single-step packer stubs to OEP; UPX, ASPack, MPRESS, and 18+ other packers]
[Modular PE/ELF packer detection and unpacking pipeline for UPX, ASPack, Themida, and VMProtect]
[Header-only compile-time variables obfuscation library for C++20 and later. Compiler Support: MSVC (+WDM), LLVM, GCC. Architecture Support: x86-64, ARM]
[An advanced library for protecting/obfuscating kernel drivers using the C++ 17 standard]
[Rust no_std hash-based WinAPI resolution via PEB walk, LdrLoadDll, and compile-time string obfuscation]
[Kernel zero-IAT header: LSTAR→ntoskrnl walk, PsLoadedModuleList + PE export resolve; C++17]
[Safely manage the unloading of DLLs that have been hooked into a process. Context]
[Godot 4 tower defense prototype with published in-game placement-abuse rejection codes and deterministic 30 Hz sim]
[Unity 6 boss-arena demo with assembly-enforced anti-cheat firewall that blocks AI from reading player input, plus edit-mode tests]
[Live browser MMORPG with server-authoritative combat and documented auth/reward-integrity anti-cheat patterns]
[Production web snake game with server-side HMAC game sessions, score plausibility checks, and rate-limited leaderboard submission anti-cheat]
[Server-authoritative mobile puzzle backend with move-replay anti-cheat, exactly-once rewards, and LiveOps tooling]
[Using c++23 compile-time magic to produce obfuscated PIC strings and arrays]
[A library for hiding and retrieving imports in ELF binaries]
[Obfusheader.h is a portable header file for C++14 compile-time obfuscation]
[obfusheader.h for windows driver]
[Automatic Rust Obfuscator and Macro Library]
[A C++17 framework designed to enable obfuscation of constants, variables, and strings]
[Compile-Time Calls Obfuscator for C++14]
[Inline syscalls made easy for windows on clang]
[A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs]
[A modern C++20 header-only library for advanced direct system call invocation]
[Header-only ARM64 Windows direct syscall library that extracts SVC immediates from ntdll exports to bypass hooked user-mode APIs]
[Compile-time conversion library, from IDA-style string to array]
[Compile time random implementation using C++11]
[compile-time control flow obfuscation using mba]
[Prototype runtime C++ polymorphic type engine]
[constexpr implementation of SHA-2 and SHA-3 family of hashes]
[Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules]
[Compile Time Regular Expression in C++]
[String Crypter for rust]
[String Crypter for golang]
[String Crypter for Zig]
[String Crypter for Swift]
[String Crypter]
[String Crypter]
[String Crypter]
[String Crypter]
[C++17 header-only compile-time string/integer encryption with SIMD decrypt and junk-code decompiler-breaking tricks]
[String Crypter]
[API Hammering with C++20 by folding (avoiding loops)]
[obfuscated any constant encryption in compile time on any platform]
[Macro-header for compile-time C obfuscation (tcc, win x86/x64)]
[Obfusk8: C++17-Based Obfuscation Library]
[Compile-time AES-128 string obfuscation for C++: constexpr blocks, no delimiters, binary-safe; spin-off from Obfusk8]
[Header only C++20 compile time string obfuscator]
[Rust: compile-time IRQL safety for Windows kernel drivers]
[Async BOF: monitor USB connect/disconnect, report device info, and act on USB storage volumes; Conquest; optional NetNTLM coerce via .url]
[shellcode compiler]
[Generate polymorphic position-independent virtual machines (PIVMs) from arbitrary x86/x64 shellcode]
[hide the payload inside the gpu memory]
[D3D11 GPU payload transport + compute shader decode, GPU-assisted process hollowing (research)]
[A stealthy loader for shellcode staged over HTTP/HTTPS, similar to Sliver]
[A QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods]
[Academic lab project with Caesar-cipher and encoding-based shellcode obfuscation (C loader + Python tooling) and AV bypass rate measurements]
[Payload Obfuscation for Red Teams workshop materials]
[Shellcode bad-byte banisher with preserved functionalities]
[A cross-platform C++ framework for building Windows shellcode]
[Minimal position-independent C shellcode framework for Windows x64 with PEB/EAT resolution, FNV-1a API hashing, and indirect NT syscalls; builds flat .bin on Linux via mingw-w64/nasm]
[Android arm arm64-v8a ShellCode Generate]
[Curated index of binary, compile-time, and LLVM/GCC obfuscation tools]
[LLVM pass plugin for CFG/string obfuscation, anti-tamper, and anti-debug across mobile/desktop/Wasm]
[Rust LLVM pass plugin for compile-time obfuscation and instruction-level VM virtualization on C/C++/Rust (LLVM 11–22; Android NDK supported)]
[Hassle-free LLVM pass-plugin obfuscator for C/C++/ObjC/Swift]
[Attack Reloc]
[Call Obfuscation]
[JavaScript/Node.js obfuscator]
[Go build-time obfuscator]
[Python script obfuscator with machine-binding and expiry options]
[AST-based Python obfuscator with reverse stack-trace mapping and MCP server]
[Swift identifier obfuscator for iOS apps against RE]
[Luau/Lua VM-based obfuscator for Roblox script protection]
[Godot 4.x export plugin that obfuscates GDScript to raise reverse-engineering cost for shipped games]
[Java/Kotlin]
[Java bytecode virtualizing obfuscator — pure-Java VM interprets mutated bytecode of protected methods; cross-platform, no native code]
[Reduce Entropy]
[Open-source .NET assembly obfuscator]
[C#/.NET assembly obfuscation technique demos using dnlib]
[X86: Rewrite and obfuscate code in compiled binaries]
[Polymorphic PE rewriter for Windows x64; semantically identical but byte-different binary variants]
[C++23 educational in-memory polymorphic payload mutation demo with VirtualProtect/mprotect and secure wiping]
[X86 PE BIN2BIN]
[A high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation]
[ARM64 ELF Virtual Machine Protection System]
[x86-64 virtualizing obfuscator written in Rust]
[x64 PE bin2bin obfuscator which doesn't add a section to the binary]
[bin2bin x86-64 PE code virtualizer and binary rewriter — SDK markers, 30+ VM handlers, junk obfuscation]
[Windows x86-64/.NET binary protector with obfuscation, code virtualization, and anti-tamper (PE/DLL/SYS)]
[Capture Desktop]
[NVIDIA Scanout]
[DWM Redirect]
An Integrated Encryption & Protection Scheme for Unity Project(Mono & IL2CPP)
[Unity freeRASP plugin for mobile root/jailbreak, Frida, tamper, and integrity detection]
[Unity UPM anti-cheat: server-verified GameTime plus root/jailbreak/emulator/debugger checks]
[NoMercy]
[Kernel Anticheat]
[Educational Windows anti-cheat: kernel minifilter, ObCallbacks, APC injection, MinHook API hooks, ETW-TI, YARA, Tauri GUI, cheat test suite]
[Open Anti-Cheat: x64 Windows kernel driver plus user-mode scanner reference implementation with ObCallbacks handle filtering and cross-view integrity checks]
[Server-authoritative open-source anti-cheat framework with Godot/Unity/Unreal adapters]
[Godot 4.x plugin with WhiteVoid AntiCheat: debugger/process/window detection, honeypot integrity checks, and HWID ban enforcement]
[Godot 4 dedicated-server security addon with movement/shot validation, configurable rule-engine escalation, ban feeds, and dry-run auditing]
[Node.js server-side cheat detection: clients report movement/actions, server validates against world limits; TCP/HTTP protocol, admin API, and engine SDKs (C#, GDScript, JS, Luau)]
[Rust self-hostable game platform with magnetite-anticheat: server-authoritative deterministic replay verification and composable cheat validators]
[Rust server-side anti-cheat for multiplayer chess: risk scoring, device fingerprinting, match integrity, captcha, and ban escalation]
[Chess integrity platform with seven-layer statistical engine-assistance detection, explainable risk tiers, arbiter case management, and hash-chained audit logging]
[Rust Bevy multiplayer framework with sandboxed Rhai script VM, rollback netcode, and shadow-VM anti-cheat verification]
[Browser-based NES FF3 MMO with server-authoritative PvE/PvP/economy arbiters, inventory mirror anti-dup, wire validation, and moderation tooling]
[Browser twin-stick shooter with server-side HMAC session tokens, replay protection, and score/wave plausibility checks for leaderboard anti-cheat]
[Open-source behavior risk-control and evidence-review platform for private game servers (Rust agent, C ABI SDK, read-only DB analysis, rule scoring, plugin events)]
[Cryptographic console anti-cheat proving human controller presence via attested inputs and verifiable match receipts]
[Open-source anti-cheat protocol stack with thin client, TEE attestation, ZK-SNARK human-input proofs, and Hedera HCS + XRPL dual-anchored match receipts]
[Educational Windows kernel anti-cheat PoC: process blacklist plus ObCallbacks handle shield]
[Educational Windows kernel anti-cheat graduation project with WDM driver (ObCallbacks, IOCTL) and usermode client]
[Educational usermode anti-cheat daemon with remote debugger checks, hardware-breakpoint scanning, PEB-based memory reads, and configurable threat response policies]
[Open-source anti-cheat skeleton with usermode SDK, ObRegisterCallbacks kernel stub, overlay isolation, and stack-walk injection detection]
[Windows client-server anti-cheat with C++ core scanner, Rust agent, and self-hosted studio control plane for injection detection and enforcement]
[Rust engine-agnostic anti-cheat scanner: JSON signature ruleset, loaded-module enumeration, and deterministic 0–100 risk scoring with CLEAN/SUSPICIOUS/MALICIOUS verdicts]
[User-mode Deadlock anti-cheat client: process logging, game-window screenshots, key input, cheat-process matching, and Discord webhook upload]
[Anti Virus in fact but also Anti Cheat]
[Anti Virus in fact but also Anti Cheat]
[Reversed VAC]
[Reversed EAC]
[C++ Easy Anti-Cheat middleware plugin integrating Epic Online Services EAC callbacks, P2P auth, and integrity-violation handling for game servers]
[Reversed BE Shellcode]
[Reversed BE Shellcode]
[Android Platform]
[Android Platform]
[Minecraft]
[Open-source Minecraft anti-cheat foundation with version-neutral movement/packet modeling, evidence accumulation, and testable detection core]
[Client-side Forge 1.8.9 mod that passively flags local/remote cheat signals from observed packet flow in local chat without server reports]
[Injectable Windows C++/Java runtime that rebuilds the Rain 1.8.9 client-side cheat observer for Forge and Badlion, with JNI bootstrap, detection research docs, and local-only evidence review]
[Paper 1.8.9 Minecraft anti-cheat plugin with 19 combat/movement/protocol checks, auth, DDoS protection, and admin GUI]
[Open-source anti-cheat plugin for Minecraft (Bukkit/Spigot)]
[Open-source Paper/Spigot/Folia plugin that streams movement, combat, and world-interaction telemetry to the Thorium engine for server-side anti-cheat enforcement]
[Starfish Minecraft-style cheater detector with NoSlow/scaffold/combat heuristics]
[AI-assisted open-source Minecraft anti-cheat plugin for Spigot/Paper/Folia]
[AI-powered open-source Minecraft Paper/Folia anti-cheat plugin]
[Self-contained Paper/Purpur Minecraft anti-cheat plugin with Fly/Speed/Reach/KillAura checks, embedded SQLite storage, and built-in web dashboard plus REST API]
[Lightweight Paper/Folia Minecraft anti-cheat with movement, combat, world, inventory, and packet checks plus SQLite logging]
[DeepGuard: Paper Minecraft anti-cheat with ONNX scaffold AI detection, behavior recorder, and training pipeline]
[Paper Minecraft anti-cheat that trains per-server ML models on combat/aim behavior with shadow mode and PacketEvents integration]
[Paper/Folia Minecraft aim-assist anti-cheat using rotation heuristics and optional AI verdict server]
[Paper Minecraft plugin that detects X-Ray ore mining, records player sessions, and lets admins replay suspicious activity]
[Paper plugin that masks underground blocks in outgoing chunk packets to mitigate Minecraft freecam/wallhack cheats]
[Vintage Story server mod that conceals enclosed ore, filters occluded entities, and injects ore/creature decoys before chunk data reaches clients]
[Minecraft Fabric packet-based anti-cheat with combat/movement checks and Geyser/Bedrock compatibility]
[Fabric server/client anti-cheat suite with mod blacklist scanning, encrypted auth, progressive punishments, and Discord alerts]
[Fabric server-side Minecraft mod with player reporting, /cheatcheck spectate moderation, safemode, and tempban toolkit for vanilla clients]
[Fabric server-side-only Minecraft anti-cheat that logs flight, speed, and reach violations to console and ops without kicks or rubber-banding]
[Open-source Minecraft Spigot/Paper/Folia packet-based anti-cheat with combat/movement/inventory checks]
[NeoForge 1.21.1 client/server Minecraft mod enforcing SHA-256 checksums on client mods and resource packs with live whitelist management]
[Minecraft Forge 1.20.1 client anti-cheat mod that detects other players' installed client mods and alerts when known cheat mods (e.g., Gun Tracker) are present]
[NeoForge server-side Minecraft anti-cheat mod with movement, combat, and x-ray checks plus a Discord violation bot]
[Fabric server/client mod that hashes and whitelists client mods and resource packs, with gray-list warnings, Discord alerts, and mid-session pack-change detection for Minecraft 1.21.11]
[Minecraft Fabric 1.21.11 server-side security suite: BastionAuth (offline auth), BastionClaims (land protection), and BastionAC (38-check anti-cheat with lag compensation)]
[Fabric client/server anti-cheat pipeline that reports loaded mod and resource-pack inventory over an authenticated channel, correlates server-side signals, and applies signed per-connection policy for Minecraft]
[Fabric server/client mod that whitelists loaded mods (including nested JARs) and kicks clients with unauthorized mods or without FairCount installed]
[Context-aware PaperMC 1.21 anti-cheat plugin with check framework, confidence/evidence model, exemptions, and staff bypass visibility]
[Paper 1.21 server-side Minecraft anti-cheat plugin with modular combat/movement checks, latency-compensated reach raytracing, and asynchronous violation logging]
[Paper 1.21+ Minecraft anti-cheat plugin (Hyphon) with combat/movement/world checks, honeypot ESP decoys, and custom-enchant/modifier capability analysis]
[Paper 1.21.11 Minecraft server plugin with combat, movement, world, anti-dupe, and packet-desync checks plus violation logging and punishment management]
[Paper 1.21 server-side anti-cheat plugin with movement, combat, and block checks, violation levels, and configurable warn/setback/kick actions]
[Paper 1.21.x Minecraft server plugin combining synchronous movement analysis with PacketEvents checks to detect fly hackers]
[Open-source bilingual Paper/Folia server-side rule enforcement for commands, items/NBT, effects, and end-crystal combat]
[Open-source Minecraft Java/Bedrock packet-based anti-cheat with combat and movement checks]
[Cross-platform Minecraft Bedrock/Java client-side anti-cheat (PACC) with local memory/process/HID detection, AI behavior scoring, encrypted persistence, and separate PTV admin backend]
[Open-source Minecraft Spigot/Paper anti-cheat with combat/movement detections and confidence scoring]
[Minecraft Spigot/Paper anti-cheat plugin with flight/speed checks, client inspection, and ban sync]
[Minecraft Bukkit/Spigot anti-cheat plugin with movement, combat, autoclick, and packet checks]
[Spigot/Paper Minecraft anti-cheat plugin with combat, movement, and inventory checks using ProtocolLib and Citizens2]
[Open-source anti-cheat for Minecraft Bedrock (Realms/BDS)]
[Minecraft Bedrock MiTM anti-cheat proxy with server-authoritative movement and combat]
[Prediction-based movement anti-cheat for Minecraft Bedrock Edition with packet, offset, and ping checks]
[Prediction-based movement anti-cheat plugin for PowerNukkitX that replays Bedrock physics to flag unexplained client positions]
[Minecraft Bedrock behavior-pack anti-cheat on ScriptAPI with 40+ combat/movement/inventory detection modules]
[GeyserMC extension anti-cheat for Minecraft Bedrock intercepting raw RakNet packets before Java translation]
[Server-side 7 Days to Die mod blocking cheat commands and detecting fly, teleport, speedhack, and godmode]
[Server-side LabFusion/BONELAB anti-cheat with avatar allowlist enforcement and in-game settings panel]
[Mature open-source Terraria server framework with built-in server-side anti-cheat, permissions, and community moderation tools]
[Terraria 1.4.5.8 TShock server anti-cheat plugin source with observe-only detections for butcher damage, map brushes, item abuse, and health locks]
[Community-maintained TF2 cheater and suspicious-player JSON lists for surepy/tf2_bot_detector]
[Among Us host-side BepInEx anti-cheat for RPC abuse, crashers, spam, and lobby cheats]
[Among Us BepInEx mod with host-side AntiCheat module for RPC/task abuse, crashers, and lobby integrity]
[Among Us client-side BepInEx 6 / IL2CPP anti-cheat (ACE) with rule-based detections, in-game settings UI, AI review, and RPC flood protection]
[Server-authoritative Luau anti-cheat for Roblox with movement, remote, fly/noclip, fire-rate, and combat guards plus Studio demo]
[Open-source Roblox server anti-cheat detecting movement exploits, unauthorized remotes, and environment tampering]
[Server-first Roblox Luau anti-cheat with movement, remote spam, fly/noclip, and client watchdog detectors]
[Open-source Roblox Luau server anti-cheat with speed, fly, noclip, and seated-state movement validation plus lag-back enforcement]
[Roblox Luau telemetry SDK for passive speed, noclip, and remote-spam detection with webhook incident reporting]
[Rust Roblox desktop launcher with TheWatcher client-side watchdog that scans cheat processes, suspicious memory, and injection while Roblox runs]
[Roblox server-side anti-cheat with trust scoring, honeypots, Supabase ingest, Discord alerts, and React staff dashboard]
[Windows rootkit and cheat scanner (hooks, handles, drivers, modules)]
[Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust]
[Native open.mp C++ component that detects client mods via self-memory reads vs known cheat signatures]
[Multi-layered FiveM anti-cheat client with tray agent, manual-map loader, and runtime guards]
[FiveM server-side Lua anti-cheat detecting noclip, spectate abuse, fake chat, and blacklisted prop spawns with Discord webhook logging]
[Malicious code detection and obfuscation]
[Sample implementation of anti-cheat in android]
[Server-side CS2 CounterStrikeSharp heuristic anti-cheat (spinbot/aimbot/triggerbot/wallhack detectors, log-only)]
[Open-source server-side CS2 anti-cheat Metamod:Source plugin with aimbot/aimlock/silentaim and related detections]
[CS2 MetaMod server-side anti-cheat with C++ aim/movement/statistics analyzers, suspicion scoring, and AdminPlugin ban integration]
[Server-side CS2 anti-cheat plugin for Metamod:Source and CounterStrikeSharp with 17 algorithmic detection modules, in-game reporting, and progressive enforcement]
[Server-side CS2 CounterStrikeSharp anti-cheat with heuristic detectors for aim snap/jerk, DMA subpixel, HvH anti-aim/spinbot, grid-snap triggerbot, and prefire; JSON ban-list and Discord webhooks]
[ModSharp CS2 server plugin for in-game cheater reports with admin claim/resolve workflow and optional Discord notifications]
[Open-source CS2 kernel-mode anti-cheat companion (KMDF driver + usermode service) for client-side integrity signals alongside CS2AC/CS2FOW]
[ML behavioral cheat detection for CS2 from demo parsing and feature engineering toward real-time server-side anti-cheat]
[IW4X server-side suspicion telemetry, IW4MAdmin review dashboard, GSC aim/visibility checks, and Discord case workflow]
[Designed with Rust]
[ETW Hook]
[For Assault Cube]
[For Source Games]
[Kernel anti-cheat for protecting software]
[WIP kernel-level Linux console anti-cheat using LSM BPF, a thin kernel module, and BitVisor hypervisor EPT write-protection]
[Open-source Linux-native anti-cheat powered by eBPF]
[Linux user-space anti-cheat with eBPF, signature scanning, HWID bans, and AI anomaly detection]
[Modular malware-behavior emulator for safe evasion testing, telemetry generation, and detection engineering]
[Authorized game-security validation pipeline with BLCReverseLab intake, evidence graphs, build diffing, and incremental anti-cheat regression planning]
[CS2 stats tracker with local FastAPI, Game State Integration live match feed, and explainable heuristic anti-cheat suspicion scoring]
[CS2 anti-cheat research pipeline that parses HLTV demos with demoparser2, extracts spatiotemporal aim telemetry, and benchmarks heuristic plus ML aimbot classifiers]
[Offline CS2 demo review pipeline with aim/behavior models, ray-cast visibility checks, calibrated suspicion scoring, and optional local LLM evidence summaries]
[FPS anti-cheat research lab with cheat taxonomy docs, Python aim-kinematics detectors, match-integrity SQL, YARA loader rules, and PowerShell host driver/PCIe surveys]
[Behavioral anti-cheat research bench for Minecraft Paper: mining telemetry, typed LLM evaluation, and offline X-Ray heuristic benchmarking in shadow mode]
[Rainbow Six Siege player stat analyzer with explainable heuristic suspicion scoring via R6Data API]
[Anti-cheat-safe Mistfall Hunter companion that derives game state only from logs, saves, and passive screen capture—no process memory, injection, or hooks]
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
[Windows usermode inline and IAT hook detector using remote PE parsing and manual PEB traversal]
[Instrumentation Callback]
[device-control-hooks-scanner]
[Replace the .txt section of the current loaded modules from \KnownDlls]
[demo unhooking functions in ntdll]
[PoC: correlate kernel notifications (process/thread/image load) with missing ETW events to detect ETW patching; EtwDriver + etw_exe; CMake/MSVC, krabs]
[header only]
[Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe]
[Kernel integrity monitor for detecting syscall hooking]
[Deep Learning]
[Deep Learning]
[Deep Learning]
[Keyboard]
[Detect RegisterHotKey API]
[Deep learning to distinguish human and bot from mouse movements]
[Educational kernel-mode keylogger rootkit — intercepts keyboard IRPs for UDP logging; demonstrates stealth persistence, privilege escalation and IRP hooking for offensive security research and defensive analysis]
[Python anti-cheat detection engine with statistical aimbot, wallhack, macro, memory-tamper, and exploit detectors plus CI-tested harness]
[DayZ server-side ML anti-cheat: mission telemetry logging, feature extraction, and RandomForest aimbot/movement anomaly detection]
[PMI Callback]
[Mapped Driver]
[Mapped Dll]
[Mapped Driver by NMI Callback]
[Mapped Driver by NMI Callback]
[Find hidden Linux kernel modules]
[Detect hidden threads]
[Detect hidden threads]
[Using NMI/APC to detect mapped drivers]
[Using CsrRootProcess to detect hidden process]
[Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times]
[Memory scanner]
[Read-only Windows driver inventory and risk scanner correlating installed kernel drivers with LOLDrivers, Microsoft blocklists, and BYOVD profiles]
[NMI Callback]
[Detect EPT]
[REP MOV based EPT detection]
[REP MOV based EPT detection]
[Detect VMMs with faulty handling of STR exit]
[Hypervisor IDT Detections (SIDT / LIDT)]
[Various novel EPT/NPT hook detection mechanisms]
[A curated list of awesome resources related to anti virtualization techniques]
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do (archived)
[Android Anti-Emulator]
[Android Anti-Emulator]
[Android Anti-Emulator]
[Windows Sandbox ("WSB")]
[VM detection library]
[Android library for detecting Android virtual containers]
[Collection of hypervisor detections]
[T-1 is a shellcode loader that leverages ML techniques to detect VM environments]
[Detecting AnyRun sandbox]
[CPUID leaf is explicitly defined for hypervisors to expose their presence and vendor ID; any honest vm stack should set this up]
[Windows Filtering Platform driver example capturing L2 NIC/gateway MAC data and DNS queries; WDK required]
[GPU name for windows]
[CPU temperature for OSX]
[CPU temperature for windows]
[cross platform C++ library for hardware information (CPU, RAM, GPU)]
[A PoC for requesting HWIDs directly from hardware]
[Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key]
[Kernel driver: detect TPM 2.0 EK spoofing by comparing TPM2_ReadPublic via IOCTL vs TPM.sys cached buffer (bypass DeviceIoControl hooks)]
[Gather original disk serials hidden behind RAID0]
[Windows driver to get RAPL metrics from a bare metal machine]
[Usermode PoC detecting manual-map/shellcode via working-set page-fault monitoring]
[Rust process injection detector for RWX regions, shellcode, API hooks, hollowing, and thread hijacking with CLI/TUI]
[ImageNotify+Stack Trace]
[A demo app to detect (Zygisk) library injections]
[PoC: detect stack spoofing in CET-enabled processes by comparing shadow stack vs user stack for missing frames; usermode, Clang/CMake]
[Server-side ESP/wallhack detection for The Isle: Evrima via read-only RCON position polling, movement heuristics, and admin alerting]
[Reverse of MSI MAG X670E TOMAHAWK BIOS v1KB anti-cheat update — Bds strips EFI_PCI_IO_ATTRIBUTE_EMBEDDED_ROM pre-boot, DxeCore NX policy retune]
[VT-d/AMD-Vi IOMMU]
[The sample DXE runtime driver demonstrating how to program DMA remapping]
[Scanner]
[Config Space]
[Collection of scripts to pinpoint obfuscated code]
[Static C CLI packer/loader fingerprinter for UPX, ASPack, Themida, VMProtect, and others; entropy scoring with YARA and SARIF output]
[Collection of Various Root Detection Apps for Android]
[Bootloader]
[Bootloader]
[A tool for detecting root on android]
[Offline Android root/hook detector (Magisk/KernelSU/APatch, Frida, Xposed) with anti-tamper checks]
[Open-source Android app auditing Magisk/KernelSU modifications and Play Integrity API attestation with device fingerprint and security-patch reporting]
[Kotlin + NDK Android library for root, emulator, hooking, custom ROM, and bootloader integrity checks with configurable risk scoring]
[Zero-dependency mobile RASP CLI that scores root/jailbreak, emulator, hook, and tamper evidence into TRUSTED→CRITICAL posture verdicts]
[Zero-dependency Android RASP library that reports root, Frida, Xposed, repackaging, and emulator evidence with native syscall checks and hardware attestation]
[Android JNI sample app with layered runtime-risk detection for root, Frida, hooks, debugger attachment, suspicious memory mappings, ART/Zygote side effects, and isolated-process comparison]
[Calculate the CRC of libc.so and libart.so in memory and compare it with the file]
[Small POC code that detects known root-related apps by attempting to launch their activities and monitoring security exception]
[Prove of concept of detecting meowna module]
[Android risk-control SDK and management platform: device fingerprinting and runtime detection (root/hook/emulator/debug/sandbox)]
[Android RASP SDK with root/debugger/hook/emulator/tamper checks and polymorphic per-build ordering]
[React Native root/jailbreak, Frida, debugger, emulator, and hook-framework detection]
[Community hub for the freeRASP mobile RASP SDK (root/Magisk, Frida, hook, emulator, tamper, and integrity detection)]
[Native Android freeRASP SDK for root/Magisk, Frida, hook, emulator, tamper, and integrity detection]
[React Native freeRASP plugin for root/jailbreak, Frida, tamper, and integrity detection]
[React Native Nitro Modules RASP SDK for root/jailbreak, Frida/Xposed hook, tamper/integrity, VPN/proxy, and device risk scoring]
[Capacitor freeRASP plugin for mobile root/jailbreak, Frida, tamper, and integrity detection]
[Cordova freeRASP plugin for mobile root/jailbreak, Frida, tamper, and integrity detection]
[Flutter freeRASP plugin for mobile root/jailbreak, Frida, hook, emulator, tamper, and integrity detection]
[Native iOS freeRASP SDK for jailbreak, Frida, hook, emulator, tamper, and repackaging detection]
[Kotlin Multiplatform freeRASP SDK for mobile root/jailbreak, Frida, hook, emulator, tamper, and integrity detection]
[React Native device-intel TurboModule: root/jailbreak, emulator, Frida, and tamper signals without vendor backend]
[Cordova plugin detecting Android root (Magisk/KernelSU/APatch), Frida, and iOS jailbreak/Frida]
[Detect userspace su solutions via SELinux access checks from the App Zygote process]
[exploit]
[A POC to detect zygisk]
通过内存特征检测frida
[Some Of Anti-Frida Stuff]
[Detect simple top most windows]
[Detecting window hijacking via ETW and GDI table scanning]
Binary analysis and reverse engineering framework with function fingerprinting and similarity matching.
[collection of C2 frameworks that leverage legitimate services to evade detection]
An open source application used to retrieve lots of passwords stored on a local computer.
Forensics tool for NTFS (parser, mft, bitlocker, deleted files)
[Professional file recovery for Windows — NTFS/FAT32/exFAT via MFT scanning, USN Journal analysis and file carving; pure Win32 C++, zero dependencies, multi-threaded GUI, direct disk access]
Python based memory extraction and analysis framework.
The volatile memory extraction framework (successor of Volatility)
[Linux memory forensics]
[Decrypt VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram from VM password — pure-Python encobj AES-256-CBC; vmem_flatten.py to Volatility 3-ready image; Win11 partial VM encryption]
[Extract Windows credentials directly from VM memory snapshots and virtual disks (LSASS, SAM/LSA, cached creds, NTDS.dit) in-place]
[Windows/Linux LSA credential extractor for lsass.dmp minidumps — Win11 24H2/25H2/26H1 and Server 2025; pure Win32, no DbgHelp; MSV, WDigest, Kerberos, CredMan, DPAPI via BCrypt (AES-CFB128, 3DES-CBC)]
Netview enumerates systems using WinAPI calls
[Delete File]
[Windows Forensics Training]
[For exporting and decrypting useful data from target computer]
[Guide to the various Windows forensic artifacts]
[Windows kernel exploration and tracing]
[remote live forensics]
[Forensics Tools For MAC OS X]
[DumpIt for windows]
[DumpIt for linux]
[An open-source digital image forensic toolset]
[A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes]
[Simple parser for Telegram chats and channels with lemmatizer. Writes data in JSON, CSV and MongoDB]
[Read-only Windows forensic kit for game-cheat/DMA/BYOVD and console-rig aimbot evidence]
[Offline, open-source FiveM PC-check tool that surfaces cheat traces and risky machine posture as evidence without issuing clean/guilty verdicts]
[Windows forensic scanner for ACE, EAC, BattlEye, EA AC, and HoYoProtect via drivers, services, BAM, Prefetch, and PE metadata]
[Windows Rust/WPF tool to audit installed kernel anti-cheats (EAC, BE, Vanguard, ACE), export reports, uninstall orphaned drivers/services, and sweep leftover registry and filesystem residue]
[Windows hardware and forensic integrity scanner for game-server anti-cheat with DMA/PCIe/USB watchlists and explainable integrity reports]
[Official GitHub Pages site for Hawkeye — Windows kernel security and anti-cheat research console with live probing, ETW, and automated detection reports (GPL source in hawkeye-community)]
[Windows Minecraft screenshare cheat forensics scanner — MFT-walks disks, scans JAR constant pools against blacklists, flags obfuscated archives, exports evidence reports]
[Open-source consensual Minecraft Java screenshare workflow: signed C# client agent, staff web panel, and Supabase backend for live forensic scans and severity-ranked cheat evidence reports]
Lua in kernel-mode because why not.
A VM That is Dynamic and Fast
Q3VM - Single file (vm.c) bytecode virtual machine/interpreter for C-language input
[Kernel-Mode Winsock library]
[Rust WinDbg extension that dumps CPU register state and VM physical memory for snapshot-based kernel fuzzing (companion to wtf)]
[Go workbench for Windows/anti-cheat project analysis, fuzzing, and evidence-backed verification]
[Application Verifier DynFault provider for stack-aware Windows fault injection and targeted API fuzzing]
[Windows NT x64 syscall fuzzer for ntoskrnl and win32k service tables on Windows 7+; configurable passes, blacklists, and logging for kernel stability/vulnerability research]
Alternative Shellcode Execution Via Callbacks
[A collection of PoCs to do common things in unconventional ways]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback]
[Instrumentation Callback to handle unaligned access exceptions]
[Register VEH by directly manipulating LdrpVectorHandlerList instead of RtlAddVectoredExceptionHandler]
[ReadDirectoryChangesW]
[DllNotification]
[Hooking the Windows usermode exception handler]
[Callback List]
Windows Object Explorer 64-bit
[Hooking KPRCB IdlePreselect]
[bam!BampCreateProcessCallback]
[DIY Dump Type]
[Python 3 bindings]
[Multiplatform MEMORY.DMP analysis tool with a WinDbg flavor]
[Emulating code in minidump files]
[Execution trace symbolizer]
[Minidump]
[Minidump]
OpenSSL based Authenticode signing for PE/MSI/Java CAB files
[Decrypt p7b]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Generates Backup Copies]
[Backup & restrore the Windows-Drivers]
[Convert Microsoft's blocklist to a hash list]
[Page Table Manipulation]
[PTE Hook]
[PF Hook]
[Attack COW]
[Bypass MmCopyMemory]
[MmAllocateIndependentPagesEx]
[HvcallCodeVa]
[HvcallCodeVa]
[HvcallCodeVa]
[Load your driver like win32k.sys]
[Leveraging PTT to defeat DSE]
[Kernel Berkeley socket]
[Writing Windows kernel drivers in Rust]
[Smm cheat]
[Parsing PDB in Driver]
[Parsing PDB in Driver]
[A poc that abuses Enclave]
[A POC about how to prevent windbg break]
[Hijack PspCreateThreadNotifyRoutine]
[Hook KdTrap]
[Hook KdTrap]
[ETW Hook]
[Global exception/KdpDebugRoutineSelect]
[SwapContext hook]
[Extracting cert information]
[Use ci.dll API for validating Authenticode signature of files]
[Calculating the authenticode digest]
[HVCI/kCET-aware bugcheck suppressor PoC via data-only HAL dispatch hook + RtlUnwindEx recovery]
[PiDqSerializationWrite]
[Find real dirbase]
[A POC for monitoring Tb]
[Hijack ROP]
[Create process from KernelMode via APC]
[MiMapViewInSystemSpace]
[Using Windows' own bootloader as a shim to bypass Secure Boot]
[Hooking KPRCB IdlePreselect]
[IoCreateDriver Implementation]
[Create stealthy, inline, EPT-like hooks using SMAP and SMEP]
[Various techniques used to bypass SMEP in the Windows Kernel]
[Creating covert system threads on Windows by leveraging the page tables and IDT]
[Anti Debug]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Sign Leaked Cert]
[Stealing signatures from pe files]
[Stealing signatures from pe files]
[Stealing signatures from pe files]
[Fake Cert]
[Fake Cert]
[Fake Cert]
[ETW Syscall]
[Skip Hook]
[Using SetWindowHookEx for preinjected DLL's]
SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
[Authenticode signature manipulation toolkit: signature stealing, metadata cloning, SIP hijacking (19 file types), WinVerifyTrust FinalPolicy bypass, PKCS#7 payload embedding (SigStash), SIPExec lateral movement, Smart App Control bypass, FormatGhost OID persistence; Python + C++; YARA/Sigma…
[Direct System Calls]
[Indirect syscalls: dynamic SSN and syscall-instruction resolve; return-address spoof via ntdll gadgets; userland hook / RIP-return evasion research]
[Comprehensive Windows syscall extraction and analysis framework]
[Lock File]
[Dump locked files by stealing memory-mapped section handle]
[Tiny x86/x64 asm TrustedInstaller launcher: token duplication, privilege enablement, Sticky Keys IFEO, Defender exclusions]
[Fully disables & removes Windows Defender]
[Disable Windows Defender]
[CLI utility to halt, disable and neutralize Windows Defender and Tamper Protection on Windows 11 (26H1) — bypasses forced UAC/GUI, invisible execution, automatic privilege handling]
[Abuse Xwizard.exe for DLL Side-Loading]
[Hiding shellcode in plain sight within a large memory region]
[Clone process]
[Elevate arbitrary MSR writes to kernel execution]
[RtlCreateProcessReflection]
[Shim Cache parser]
[Real-time collection of PMCs via ETW]
[Leaking kernel addresses from ETW consumers. Requires Administrator privileges]
[POC game using VBS enclaves to protect itself from cheating]
[User-space ByeDPI SOCKS5 relay and DoH setup to reach Discord without loading WinDivert kernel drivers that break EAC/Denuvo games]
[find dll base addresses without PEB WALK]
[Hooking the Windows usermode exception handler]
[Mounting the system partition on Windows]
[A way to delete a locked file, or current running executable, on disk]
[BootExecute EDR Bypass]
[A command-line tool for Windows that automates adding drivers to the HVCI (HvciDisallowedImages) custom blocklist]
[This is the loader that supports running a program with Protected Process Light (PPL) protection functionality]
[Usermode exploit to bypass any AC using a 0day shatter attack]
[Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed]
[Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls]
[DPI bypass research tool: fake TLS ClientHello desync + built-in DoH; eBPF sock_ops on Linux, TUN proxy on macOS/Windows]
[Lightweight Linux tool to spawn decoy processes with arbitrary names to evade process-based anti-cheat and tracker checks]
[Omarchy plugin for sbctl Secure Boot enrollment, Limine Windows chainloading, and reboot controls so Vanguard/EAC/FACEIT titles work on Windows+Linux dual-boot]
[End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]
[Bypass hidden api restriction]
[Bypass hidden api restriction]
[Apk Signature Crack Tool]
[USB serial number changer (root only)]
[Hide active VPN from selected Android apps via system_server LSPosed hooks and kernel/Zygisk native filtering]
[Privilege Escalation]
[KernelSU modified for debugging]
[KernelSU for huawei]
[KernelSU for huawei]
新一代SKRoot，挑战全网root检测手段，跟面具完全不同思路，摆脱面具被检测的弱点，完美隐藏root功能，全程不需要暂停SELinux，实现真正的SELinux 0%触碰，通用性强，通杀所有内核，不需要内核源码，直接patch内核，兼容安卓APP直接JNI调用，稳定、流畅、不闪退。
[Run Zygisk on KernelSU]
[TPM-based verifier for CPU virtualization, IOMMU, Secure Boot, VBS/HVCI, DSE, and vulnerable driver blocklist — local PCR replay and remote attestation]
[C++ sample calling GetRuntimeAttestationReport to dump signed driver and kernel hotpatch attestation reports (VBS/HVCI)]
[Shadow Stack]
[Shadow Stack]
For reporting issues with WSL.
The source for the Linux kernel used in Windows Subsystem for Linux 2 (WSL2)
[Stable Kernel for WSL2]
[Build WSA Kernel with Docker]
[Make WSA run on Windows 10]
Run Windows Subsystem For Android on your Windows 10 and Windows 11 PC using prebuilt binaries with Google Play Store (MindTheGapps) and/or Magisk or KernelSU (root solutions) built in.
[WSA with KernelSU]
[Android application for running Windows applications with Wine and Box86/Box64]
[A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API]
[Windows Hypervisor Platform (WHP) C++ library for trap-driven guest execution: host-backed memory, page-level traps, CPUID/syscall interception]
[Windows User Space Emulator]
[Windows User Space Emulator]
[A x86 environment emulator for Windows user and kernel binaries]
[A hybrid semi-emulated, semi-native Windows kernel driver emulator designed for advanced rootkit and anti-cheat analysis, addressing the limitations of existing emulation solutions]
[Windows kernel driver and usermode app emulator for x86-64 and ARM64 with WHP and Unicorn backends]
[Run x86-64 programs on RISC-V Linux]
Anbox is a container-based approach to boot a full Android system on a regular GNU/Linux system (archived)
[Android VM manager on Snapdragon: Gunyah hypervisor; crosvm/QEMU; UEFI Linux/Windows; VirGL/GfxStream GPU, VNC, VirtFS; root required]
[Boot virtual iPhone (iOS) on macOS via Virtualization.framework using PCC research VM; SIP/AMFI disabled, DFU/restore/ramdisk/CFW]
[Native macOS SwiftUI front-end for vphone-cli: browse, create, and boot iOS research VMs from a single window]
[1 script run the vphone]
[QEMU Darwin VM: boot iOS/macOS to root shell; virtual iPhone 17–12 (A19–A14) and M5–M1 Apple Silicon Macs; kernel/SPTM/TXM debug; no GUI/SpringBoard]
[Emulator]
[Emulator]
[Desktop cheat picker for Analogue Pocket Game Boy/GBC openFPGA cores with libretro cheat DB sync]
[A cross-platform GameCube/Wii emulator and debugger written in Rust]
[Low-level (LLE) 3DS emulator: full OS boot, boot9/boot11/nand dumps, software/hardware GPU rendering]
[Raw .3gx overlay/cheat plugin engine for Luma3DS with self-rendered UI and cheat-search template]
[OoT3D cheat/tools overlay on CTRComposer with memory search, hex editor, and RAM dump]
[Yuzu based repository]
[Open-source Android ARM64 Switch emulator (Eden-based) with Vulkan rendering, per-game profiles, and live cheat support]
[A GUI based Nintendo Switch Bootloader]
[Customized firmware]
[Nintendo Switch]
[General purpose read/extract tool]
[Xbox Emulator for Windows]
[Xbox 360 Emulator Research Project]
[MacOS Port of the Xbox 360 Emulator]
[Porting Xbox360 executables to Windows]
[Native D3D12 renderer rebuild for Midnight Club: LA via Xbox 360 PPC static recompilation, Xenos shader translation, and PSO cache]
[WIP static recompilation of Jet Set Radio Future (Xbox XBE) to native macOS, built on sp00nznet/xboxrecomp]
[Xbox 360/OG Xbox all-in-one XEX/XBE/XISO/PKG/GOD patching tool for RGH/JTAG and Bad Update]
[Kernel exploit for Xbox SystemOS using CVE-2024-30088]
[Dumps files & data required to use the Xenon Xbox 360 Low Level Emulator]
[A xbox 360 emulator]
[Research and instructions for cloning PS4 and PS5 internal storage drives]
[PS5 Hypervisor exploit]
[Linux payload implementing HV exploits to run a custom bootloader]
[PoC for code execution on a53 used by PS5 on fw 02.00]
[BD-JB RemoteJarLoader for already-jailbroken PS5 (≤12.00); unpatch BD-J, ISO, network JAR load / logging]
[WebKit CSSFontFace UAF for PS4/PS5; PS4 6.00-11.02 (kernel chain 7.00-11.02); PS5 needs separate ASLR/vtable defeat; writeup: linearfox.com]
[Feature-rich PS4 WebKit jailbreak exploit host — chains PSFree/Bad Hoist/CSSFontFace userland with Lapse/NetCtrl/sleirsgoevy kernel exploits (FW 6.00-11.02), auto fw/console detection, GoldHEN/HEN selector, payload loader on port 9020]
jaywcjlove/awesome-mac
This project is dedicated to collecting high-quality macOS software and organizing them systematically by different categories for easy search and use.
serhii-londar/open-source-mac-os-apps
🚀 Awesome list of open source applications for macOS. https://t.me/s/opensourcemacosapps
ramitsurana/awesome-kubernetes
A curated list for awesome kubernetes sources :ship::tada:
sindresorhus/awesome-nodejs
:zap: Delightful Node.js packages and resources [BECAUSE OF TOO MUCH SPAM AND LOW-QUALITY SUBMISSIONS, SUBMISSIONS ARE PAUSED TEMPORARILY]
frenck/awesome-home-assistant
A curated list of amazingly awesome Home Assistant resources.
vsouza/awesome-ios
A curated list of awesome iOS ecosystem, including Objective-C and Swift Projects