Awesome Game Security

Two ways to detect Magisk v23.0 and older. Magisk v24+ users won't be affected. OLD VERSIONS WERE BUGGY, UPGRADE YOUR MAGISK.

A Windows kernel dump C++ parser library with Python 3 bindings.

XEX/XBE loader plugin for IDA 9, and xex1tool, supporting most known Xbox/Xbox360 executable formats.

midgetpack is a multiplatform secure ELF packer

Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants

No description.

SDK for automating Ghidra from Python, Rust, and C++. Decompile, rename, annotate, inspect symbols/types/xrefs, and manage project lifecycle programmatically - treat Ghidra like infrastructure, not just a GUI.

Invoke functions with a spoofed return address. For 32-bit Windows binaries. Supports __fastcall, __thiscall, __stdcall and __cdecl calling conventions. Written in C++17.

Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).

A x86_64 software emulator

Source code for SIGGRAPH Asia 2021 paper "Fast Volume Rendering with Spatiotemporal Reservoir Resampling"

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

sloader is an ELF loader which aims to replace ld-linux.so of glibc.

Data-oriented C++20 game engine with a fiber-based job system and bindless Vulkan 1.3 renderer.

Titan is a VMProtect devirtualizer

Malware Behavior Analyzer

UE4 plugin for live2d model

Android assembly instruction tracing tool

A library for generating C++ compatible SDKs

Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.

Ghidra decompiler in your browser

WinDbg Copilot - Agentic Debugging extension

A zygisk module that dumps so file from process memory

Fully working kernel-mode VAC bypass

A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.

Runtime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.

A C++ REPL for IDA Pro / IDA C++ SDK

DSE & PG bypass via BYOVD attack

IntroVirt is an guest introspection library for KVM

Minimal memory library for Windows / Linux

https://key08.com/index.php/2021/10/19/1375.html

Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.

AI reverse engineering assistant for x64dbg. Embeds a chat panel directly in the debugger with tool-use capabilities.

A Source/CSGO port of CornerCulling

Pe-protector protects executable files.

your ai debugger, vibe hacking tool

This lab guides you through setting up an environment to explore CVE-2019-2215, a critical Android kernel vulnerability in the binder subsystem.

Android arm arm64-v8a ShellCode Generate

Stack spoofing Detection for CET processes by comparing shadow and user stacks.

Dynamic binary translator for x86 binaries

Ursine 3D Engine / Editor

win32/x64 obfuscate framework

LLDB based debugger for Linux Kernel

Fuzzing Framework for Modules in Apache HTTPD Server

No description.

W/RPM Driver and usermode for Linux

No description.

Tool to collect and visualize memory usage of a process tree, mainly for Windows.

libipt - an Intel(R) Processor Trace decoder library

In-progress game engine project