Awesome Game Security

A low-level .NET library for reading and writing Unreal Engine game assets.

Anti-cheat library for Windows C++

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

A project that demonstrates how to screw with CSGO from Kernel Space. (CSGO Kernel Cheat/Hack) All cleaned up, and with updated offsets.

A tool for recognizing function symbol

This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows

Half-Life 2 SDK Mirrors

open-source pen-test [CS:GO/CS2/Apex]

Dump native and .NET assemblies

Full source to the CS:GO cheat

A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.

A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client.

Cross-platform streamproof ESP hack for Counter-Strike: Global Offensive, written in modern C++. Rendering and GUI powered by Dear ImGui + FreeType.

Advanced anti-reverse-engineering library made in C++26

Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)

Scan signatures and netvars. Dumps header files, cheat tables and ReClass files.

Debugger Anti-Detection Benchmark

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Counter-Strike 2 SDK/Base written in C++.

Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.

Fumo Loader - All in one kernel-based DLL injector

KslDump — Why bring your own knife when Defender already left one in the kitchen?

A somewhat wide collection of various kernelmode-usermode communication methods in one repository (mainly just for learning purposes).

Ghidra analyzer for UEFI firmware.

Module extending manual mapper

A basic 2D side scroller blueprint template for Unreal Engine 5

GptHidra is a Ghidra plugin that uses the OpenAI Chat GPT to explain functions. With GptHidra, you can easily understand the purpose and behavior of functions in your codebase. Now with GPT4 Support!

A GameCube/Wii emulator and debugger written in Rust.

ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together

A low-overhead dynamic binary instrumentation and modification tool for ARM (both AArch32 and AArch64 support) and RISC-V (RV64GC).

Incident Response & Digital Forensics Debugging Extension

Venom is a library that meant to perform evasive communication using stolen browser socket

A dnSpy extension to aid reversing of obfuscated assemblies

🕹️ An external CS radar made specifically for observing

Examples for: Learning KVM - implement your own kernel

GhidRust: Rust decompiler plugin for Ghidra

DragonBurn is CS2(Counter-Strike 2 cheat) kernel-mode read-only external cheat. Undetected by all anti-cheats except Faceit.

Unsigned driver loader using CVE-2018-19320

DPI bypass tool - eBPF on Linux, TUN on macOS/Windows.

Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

A Linux framework to enable userspace-defined "Virtual" PCIe card shims to enable in-host PCIe card driver development.

strings2: An improved strings extraction tool.

Modding il2cpp games by classes, methods, fields names on Android.

Lua in kernel-mode because why not.

The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.

symbolic execution plugin for binary ninja

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.

pdb + Rich library

Elden Ring Cheat Engine table maintained by The Grand Archives.

Patching "signtool.exe" to accept expired certificates for code-signing.