# Wiki Index

Compiled knowledge catalog for awesome-game-security.

> Maintained via `scripts/update-wiki-cli.py`. See [AGENTS](AGENTS.md) for schema.

## Overviews

- [Overview](overviews/overview.md) — project map; 12-skill routing + README cross-category map + [[resource-selection]] provenance + [[repository-navigation]] indexer; compiled-wiki + research-rigor layers; catalog-maintenance refs (coverage roadmap, 2026-09-09 quality review); 41 README sections (NeverC & NeverD — Your Compiler & Decoder for the AI Era placeholder) → skill topics (Cheat ~2807 [[dragonburn]]/[[apexbot]]/[[apexdream]]/[[astronaut00-apex-external]] + [[perfectsmbios]]/[[undervolter]] EFI/HWID + [[discord-dpi-bridge]] Some Tricks + [[glotus-client]]/[[hidemyandroid]]/[[device-reset-spoofer]]/[[zamr]]/[[toastylink]]/[[vmplift]]/[[dragons-vs-vms]]/[[pc-wackywheels-doc]]/[[omikron-tns-omk-engine]] + [[ida-settings]]/[[binarylens]]/[[ida-pro-agent]]/[[sako-restudio]]/[[reverify]]/[[dereferencing]]/[[aetheris]]/[[resim-ghidra-plugins]]/[[dsh-plugins]]/[[disrobe]]/[[scalpel]]/[[msynth]]/[[anti-anti-debugger-driver]]/[[ksword]]/[[defcon-dreamcast-planetweb-research]]/[[appsealing-reversal]]/[[g-presto-anti-cheat-reverse-engineered]]/[[android-security-wizard]]+[[re4f]]+[[hacking-rust]]/[[go-hacking]]/[[embedded-hacking]]/[[intro-to-gamehacking]]/[[android-modding]]+[[dino-printer]]/[[zenware-cc]]/[[root-detection-low-level]]/[[usb-detection-bypass]]/[[xiaomi-usb-security-bypass]]/VirtualMachine Android VM / Anti Cheat (~730) [[crispy-wafer-anti-cheat-assistant-waferaca]]/[[pacc4-0]]/Hyapk [[hawkeye]] [[pe-protector]] [[blc-gamesec-lab]] [[hook-detector]]/[[petal-anti-freecam]]/[[tshock]]/[[linux-anticheat]] [[noimportz]]/[[zeroimport]]/[[free-rasp-community]]/[[obfstr]] + [[anti-cheat-emulator]] + [[sentinel-anti-cheat]]/[[astrox-anticheat]]/[[blarion-anticheat]]/[[inertia]]/[[anticheat-qa]] + [[sentinel-anticheat-neoforge]] + [[amethyst]]/[[bs-anticheat]]/[[larping-anti-cheat]]/[[dead-anticheat]]/[[aeterna-rongroi]] FiveM PC-check/irembo337 Fusion-AntiCheat BONELAB/[[ntcall64]] syscall fuzz/[[void-engine]]/[[dot-server-security]]/[[shinobix]]/[[r6-siege-battleye-launch-bug]]/[[cs2guard]]/[[ff-ace-anticheat-analysis]] MC/FiveM server-side AC; Game Engine ~157 + Mathematics ~7 / Renderer ~17 ReShade; DirectX ~40 shader inject/[[segcap]]/[[dlss-unlocked]] / OpenGL ~3 / Vulkan ~12 kiero2+vocem+[[cyberpunk-better-shaders]]; Game Develop ~188 [[awesome-game-analysis]]/MCP/security; Game Network ~29 lightyear/ds2os/ds3os; console Switch~8 OpenSw/Xbox~8/PS~7 [[bd-un-jb]]+[[psfree-enhanced]] / 3DS~3 [[3beans]] LLE+Luma / GC·Wii~1 gecko / Game Boy ~4 [[openfpga-gbc-cheats-ui]] / IOS Emulator ~5 [[vphone-ws]]/[[darwin-vm]])
- [Anti-Cheat](overviews/anti-cheat.md) — five-role system map + topic-routing table; layered AC; seven-step detection methodology + [[input-provenance]] / [[detector-operations]] / [[network-environment-evidence]] + [[kernel-pool-scanning]] / [[ai-aimbot-detection]] / [[qortroller]] controller attestation; platform trust incl. [[windows-runtime-attestation-report]] GetRuntimeAttestationReport driver/hotpatch reports + [[discord-dpi-bridge]] WinDivert/EAC utility conflict; Detection:* (triggerbot & aimbot/wallhack) + Screenshot (NVIDIA scanout/DWM redirect capture research) + page/CLR protection (~730) + [[hawkeye]] kernel AC research console + [[blc-gamesec-lab]] Analysis Framework + [[hook-detector]] Detection:Hook + [[petal-anti-freecam]] freecam masking + [[tshock]] Terraria Bouncer + [[linux-anticheat]] Linux kernel/eBPF AC + [[shinobix]] browser MMORPG auth/reward-integrity AC + [[cobra-snake]] web Snake score AC + [[rootect]] Android RASP + [[r6-siege-battleye-launch-bug]] R6 Siege BattlEye/Sentinel launch regression; hybrid CS2 judge/honeypot proposals + [[anticheatsystem]] CS2 MetaMod server-side AC + [[rce-shield]] RCE guide + [[minecraft-anticheat-list]] + [[are-we-anti-cheat-yet]] + [[noimportz]]/[[zeroimport]] kernel zero-IAT lazy importers + [[obfstr]] Rust string crypter + [[sentinel-anti-cheat]] usermode daemon + [[ultimate-anti-cheat]] open-source Windows AC framework + [[sentinel-anticheat-neoforge]] NeoForge server-side MC mod + [[amethyst]] Bedrock prediction AC + [[bs-anticheat]] Paper/Folia heuristic AC + [[petal-anti-freecam]] chunk freecam masking + [[larping-anti-cheat]] Paper custom-SMP Hyphon AC + [[ultimate-meteor-anticheat]] Paper 1.21.11 survival AC/anti-dupe + [[faircount]] Fabric mod whitelist AC + [[dead-anticheat]] FiveM server-side Lua AC + [[aeterna-rongroi]] FiveM PC-check + irembo337 Fusion-AntiCheat BONELAB + [[ntcall64]] syscall fuzz + [[void-engine]] Godot WhiteVoid AC + [[dot-server-security]] dedicated-server rule-engine / [[astrox-anticheat]] GeyserMC Bedrock RakNet AC + [[blarion-anticheat]] Bedrock ScriptAPI behavior-pack AC + [[inertia]] version-neutral MC foundation + [[anticheat-qa]] Fabric MC AC QA + [[anti-cheat-emulator]] kernel telemetry simulation + [[are-we-anti-cheat-yet]] Proton/Wine/Linux + AC research index + [[kernel-cve-analysis]] + [[ff-ace-anticheat-analysis]] Tencent ACE Free Fire RE + [[pokealliance-anti-cheat-analysis]] PokeAlliance OTCv8 server-telemetry audit + [[pe-protector]] x86 PE packer + [[crispy-wafer-anti-cheat-assistant-waferaca]] Forge peer-mod detection + [[pacc4-0]] MC client AC + Hyapk Android packer; Game Testing [[uptime-faker]] uptime signals; Game Tools RCE + Windows Emulator [[kdemu]] AC
- [DMA Attack](overviews/dma-attack.md) — five-dimension classification (initiator/transport/privilege/boundary/artifacts) + topic-routing table; [[memory-acquisition-path]] + [[assurance-boundaries]]; PCIe DMA threat model (cheat PC + FPGA + HID); three defense layers; device evidence dimensions; layered detection + TPM attestation; Thunderbolt/USB4; Cheat (~2807) / Detection:DMA (~730) + [[aetheris]]/[[luminary-dma]] MemProcFS forensics + WSF ~10 [[windows-runtime-attestation-report]]
- [Game Engine](overviews/game-engine.md) — topic-routing table + [[engine-trust-boundaries]] baseline + [[engine-artifact-selection]] version-matched picks; Unreal / Unity / Source SDK workflows + [[unreal-object-model]] / [[unreal-engine]] / [[unreal-engine-guide]] / [[ue5-style-guide]] / [[il2cpp]] / [[source-netvars]]; Godot / Lumix (~157; [[void-engine]] WhiteVoid AntiCheat plugin + [[dot-server-security]] dedicated-server rule-engine AC); Unity script/plugin catalogs ([[unity-script-collection]]); MCP + AI gamedev (~188; [[awesome-game-analysis]] + [[zig-gamedev]] + [[image-cockpit-for-codex-workflows]] Codex pixel-art cockpit + [[agent-sprite-forge]] Codex sprite/map forge); Game Network ~29 lightyear/ds2os/ds3os; Game Assets ~11 ([[paksmith]], [[uassetgui]]/[[uassetapi]]/[[uetools]]/[[ue-explorer]]/[[uabe]]/[[asset-ripper]]/[[assetstudio]] + [[awesome-game-file-format-reversing]] index + YAML→GLB/sprite pipelines + [[retro-3d-graphics-collection]] PS1-style CC0 assets + [[retro-game-console-icons]] TrimUI/Miyoo PNG icons); Image Codec ~5 ([[tigr]] framebuffer / [[paintfe]] wgpu/Rhai); Game CI ~3 ([[lore]] Epic VCS)
- [Game Hacking](overviews/game-hacking.md) — topic-routing table + [[cheat-attack-surface]] threat-family taxonomy + attacker-capability framing + [[hwid-spoofing]] / [[driver-communication]] / EFI trust boundaries + [[stack-spoofing]] / [[hardware-input-injection]] / [[world-to-screen]] / [[ai-aimbot-detection]]; Cheat (~2807) + Some Tricks (~118) + [[anticheattoggle]] VirtualBox/ACE driver toggle (QEMU/KVM/PVE/VBOX) + [[undervolter]] EFI + [[discord-dpi-bridge]] Ring3 + [[anti-anti-debugger-driver]] ETW-hook + [[ksword]] ARK; [[dragonburn]] CS2 / [[apexbot]]/[[apexdream]]/[[astronaut00-apex-external]] Apex externals; [[luminary-dma]] COD read-only DMA; Frida VMP/OLLVM boundary-hook (tomhamidi97-arch/frida-vmp-bypass) + [[frida-ide]] web Frida IDE + [[frida-mobile-kit]] Android Frida script toolkit + [[moabille]] multi-device Frida TUI; Android Network Explorer [[rtl8852au-userspace]]; Nai64Patches Morphe root/integrity; [[ghostlock-oneplus]] CVE-2026-43499 locked-bootloader root; [[anywhere]] mock-GPS/LSPosed hide + [[hidemyandroid]] profile identifier spoof + [[device-reset-spoofer]]/[[usb-detection-bypass]]/[[xiaomi-usb-security-bypass]] post-clear identity rotation + [[zamr]] MMRL module catalog; [[hacking-rust]]/[[go-hacking]]/[[embedded-hacking]]/[[intro-to-gamehacking]]/[[android-modding]] RE courses; [[dino-printer]] Meteor Litematica printer + [[zenware-cc]] L4D2 training + [[root-detection-low-level]] Frida root-detection + [[hayday-bot]] Hay Day in-memory automation; browser userscript [[glotus-client]] Moomoo.io; Android Terminal (ADB/root/shell)/File/Memory Explorer ([[butler]] root/Shizuku; [[charlyengine]] CE clone + [[sako-restudio]] mobile RE IDE); [[reverify]] MCP byte-level verification + [[dereferencing]] IDA register/stack views; PS3 SPU IDA [[spu2c]] + indirect xref [[xrefgen]]; [[vmplift]]/[[dragons-vs-vms]] VMP devirt/lift + [[toastylink]] X360 XBDM + [[pc-wackywheels-doc]]/[[omikron-tns-omk-engine]] DOS/Omikron format RE + [[r6-siege-battleye-launch-bug]] R6 BattlEye launch report + [[anticheat-qa]] Fabric MC AC QA client + [[resim-ghidra-plugins]] RESim/Simics Ghidra Debugger; [[disrobe]]/[[scalpel]] Ghidra hex editor; [[perfectsmbios]] UEFI SMBIOS pre-boot HWID spoof; WSA/Android/iOS/Windows Emulator [[kdemu]]/[[darwin-vm]]/[[virtualmachine]] VM Studio lanes; console Switch~8 OpenSw / Xbox~8 X360 patch+SystemOS / PS HV+[[bd-un-jb]]+[[psfree-enhanced]] / WebKit [[cssfontface-exploit]] / 3DS~3 [[3beans]] LLE+Luma / GC·Wii~1 gecko / Game Boy ~4 [[openfpga-gbc-cheats-ui]] / Dreamcast [[defcon-dreamcast-planetweb-research]] / mobile AC RE [[g-presto-anti-cheat-reverse-engineered]] + app shielding [[appsealing-reversal]] + [[android-security-wizard]] Android security corpus
- [Graphics API](overviews/graphics-api.md) — topic-routing table + [[frame-observation-boundary]] baseline (API/driver/compositor/capture path/sync/tool version); rendering/capture threat model + capture-layer contracts; DX/GL/Vulkan hook points; [[present-hook]] / [[draw-call-hook]]; overlays + [[obs-game-capture]] / [[anti-screenshot-capture]]; PresentMon/Tracy/RenderDoc observation tools; Kiero/kiero2; Vulkan (~12) vocem+[[cyberpunk-better-shaders]] Linux SPIR-V layers; DirectX (~41) shader inject/[[segcap]]/[[dlss-unlocked]]/[[dlssg-30s-manager]] AC-aware deploy; Renderer (~17 [[reshade]]) + AI mesh/splat adjacency
- [Mobile Security](overviews/mobile-security.md) — topic-routing table + device/build/ABI/signer/entitlements/privilege/collection-method baseline; [[mobile-trust-boundaries]] package/runtime/platform/server map + SELinux/Play Integrity/App Attest/network-trust evidence; [[mobile-network-trust-evidence]] TLS/pinning capture discipline; Android/iOS; root frameworks (Magisk/KernelSU/APatch), [[zygisk]]/Frida hooking (incl. [[frida-ide]] web IDE, [[grapefruit]] web UI, [[vscode-frida]] VS Code workbench, [[bagbak]] iOS IPA decrypt/dump, [[mast-orchestrator]] MAST dashboard, [[frida-mobile-kit]] Android Frida script toolkit + [[moabille]] multi-device TUI + [[root-detection-low-level]] Frida root-detection analyzer + [[hayday-bot]] Hay Day Promon/Quago bypass automation), [[mobile-anti-cheat]]; Nai64Patches Morphe APK patches; [[ghostlock-oneplus]]/[[ghostlock-app]] CVE-2026-43499 root; [[kasumi]] GKI LKM root-hide; [[anywhere]] mock-GPS/LSPosed hide beside [[locusmimic]]; [[android-faker]] Xposed identifier spoof + [[device-reset-spoofer]]/[[usb-detection-bypass]]/[[xiaomi-usb-security-bypass]] post-clear identity + [[copg]] Zygisk hardware-profile spoof + [[nexus]] root device-identity rotation + [[zamr]] MMRL module catalog; [[g-presto-anti-cheat-reverse-engineered]] G-Presto native AC RE; [[appsealing-reversal]] AppSealing long-form RE + [[android-security-wizard]] integrated Android security corpus; Terminal/File/Memory/Network Explorer ([[butler]] root/Shizuku; [[charlyengine]] Kotlin CE clone + [[sako-restudio]] mobile RE IDE; [[pcapdroid]]; [[rtl8852au-userspace]] no-root Wi-Fi inject) + App/Kernel CVE; WSA (~9), [[droidvm]]/Gunyah emulators, [[zn-toolbox]] no-root Twoyi container VM + LSPosed + [[virtualmachine]] VM Studio guest Android VM, IOS Emulator ~5 [[vphone-ws]]/[[darwin-vm]]
- [Reverse Engineering](overviews/reverse-engineering.md) — topic-routing table + artifact hash/format/architecture/tool-version/environment/address baseline; [[static-runtime-evidence]] static/runtime separation + protection uncertainty; [[binary-evidence]] question/evidence framing; RE workflow + [[research-rigor]]; [[dynamic-binary-instrumentation]] trap-and-emulate/WHP evidence limits; [[mixed-boolean-arithmetic]] / [[control-flow-flattening]] deobfuscation; MCP-assisted RE; [[re4f]] Obsidian RE curriculum; [[binary-diffing]]; anti-debug catalog; tools (Ghidra managers, MBA/DBI, packers, [[awesome-game-file-format-reversing]] asset-format index, [[pc-wackywheels-doc]]/[[omikron-tns-omk-engine]] DOS/Omikron format RE doc, [[binarylens]]/[[ida-pro-agent]]/[[hikarisystem-hexcore]]/[[sako-restudio]]/[[reverify]]/[[dereferencing]]/[[resim-ghidra-plugins]]/[[dsh-plugins]]/[[dragons-vs-vms]]/[[scalpel]]/[[msynth]]/[[ff-ace-anticheat-analysis]]/[[pokealliance-anti-cheat-analysis]]/[[disrobe]]/[[pe-protector]]/Hyapk Android packer/[[appsealing-reversal]]/[[g-presto-anti-cheat-reverse-engineered]]); Windows Emulator [[kdemu]] + console/Switch~8 OpenSw / Xbox~8 [[toastylink]] XBDM / PS [[bd-un-jb]]+[[psfree-enhanced]] / 3DS [[3beans]] LLE / GC·Wii gecko / Game Boy ~4 [[openfpga-gbc-cheats-ui]] RE (~2807 Cheat / ~730 AC lanes)
- [Windows Kernel](overviews/windows-kernel.md) — topic-routing table + skill preamble (build/symbol match; documented/observed/inferred separation); [[driver-trust-boundaries]] IOCTL/provenance threat model + [[kernel-evidence-baseline]]; VBS/HVCI capability vs running state; hypervisor/WHP + pool forensics limits; callbacks, CET/TPM attestation (~10; [[sewindows]] PCR + [[windows-runtime-attestation-report]]), BYOVD, Segment Heap + [[kernel-pool-scanning]] / [[etw-threat-intelligence]]; symbol walking; Some Tricks Ring0 (~118) + [[discord-dpi-bridge]] Ring3; Windows Emulator (~7) + WSL (~4)

## Concepts

- [AI Aimbot Detection](concepts/ai-aimbot-detection.md) — server-side replay + ML + hardware-input signals for zero-memory visual cheats
- [Anti-Screenshot Capture](concepts/anti-screenshot-capture.md) — capture-layer contracts (PrintWindow/DDA/Present/readback/NVIDIA scanout/DWM redirect); WDA/FindClosestMatchingMode exclusion limits; AC BitBlt vs overlay evasion (DWM, frame suppress)
- [Assurance Boundaries](concepts/assurance-boundaries.md) — mechanism vs deployed policy vs evidence coverage vs attribution; device-label limits; EPT vs IOMMU separation; HVCI/DMA-policy independence; TPM quote scope; PCI containment ownership
- [BattlEye](concepts/battleye.md)
- [Binary Diffing](concepts/binary-diffing.md) — BinDiff/[[diaphora]]/[[ghidriff]]/DarunGrim/[[turbodiff]] patch analysis; AC driver update tracking; similarity scores as candidate evidence; [[static-runtime-evidence]] hash/tool-version baseline; [[overviews/reverse-engineering]] routing cross-link
- [Binary Evidence](concepts/binary-evidence.md) — question classification (interface abuse, integrity, obfuscation, anti-analysis, binary change); offset/RVA/runtime address provenance; imported API vs reachable path vs observed call; decompiler reconstruction limits; [[static-runtime-evidence]] baseline cross-link
- [BYOVD](concepts/byovd.md)
- [Cheat Attack Surface](concepts/cheat-attack-surface.md) — threat-family taxonomy (observation, injection, DMA, graphics, input, protocol abuse); objective/boundary/evidence framing; counterexamples and legitimate-use limits
- [Compiled Wiki](concepts/compiled-wiki.md) — four-layer discovery model (wiki → README → descriptions → archives); discovery aid, not proof; pairs with [[repository-navigation]] indexer
- [Repository Navigation](concepts/repository-navigation.md) — layer selection, path/case lookup, read-only `repository_index.py` helper, archive limits, identity preservation; maintenance vs retrieval separation
- [Control Flow Flattening](concepts/control-flow-flattening.md) — OLLVM-style dispatcher loops; deflatten via symbolic/simulated exec ([[ollvm-unflattener]], [[idadeflat]], [[anti-ollvm]] Arm64), [[d810]]/[[d810-ng]]/[[chernobog]] (Hikari LLVM), OBPO; pairs MBA recovery
- [DMA](concepts/dma.md) — PCIe host R/W; AC detection pipeline (config integrity, latency fingerprinting, IOMMU containment, TPM attestation)
- [Detector Operations](concepts/detector-operations.md) — health/evidence/execution/decision state separation, time domains, shadow/canary rollout, collector health vs misconduct, joint error measurement
- [Draw Call Hook](concepts/draw-call-hook.md) — draw/shader/pipeline intercept for wallhack/chams; output-merger/depth-state evidence limits vs Present-only overlays
- [Driver Communication](concepts/driver-communication.md) — privileged driver/interface abuse lane; kernel–user data channels (IOCTL, data-ptr swap, shared memory, callbacks, unconventional transports); README 40+ method taxonomy; authorization vs signature scope
- [Driver Trust Boundaries](concepts/driver-trust-boundaries.md) — IOCTL authorization, driver provenance, signed-driver threat classes; VBS/HVCI/blocklist scope; [[kernel-evidence-baseline]] cross-link; documented vs observed vs inferred kernel evidence
- [Dynamic Binary Instrumentation](concepts/dynamic-binary-instrumentation.md) — Frida/Pin/DynamoRIO/[[drmemory]]/[[tinyinst]]/[[river]]/[[mambo]]; trap-and-emulate CFT + semantic-fidelity/coverage/cost/scope evidence limits; WHP user-mode hypervisor tracing ([[vmtrace]]) + exit-reason/coverage limits; driver IOCTL tracing; [[static-runtime-evidence]] + [[overviews/reverse-engineering]] routing cross-links
- [Easy Anti-Cheat](concepts/easy-anti-cheat.md)
- [Engine Artifact Selection](concepts/engine-artifact-selection.md) — artifact-type boundary check; README-backed resource table (Unity C# ref, Godot demos, UE plugins, UAssetAPI); untrusted-asset and plugin execution scenarios
- [Engine Trust Boundaries](concepts/engine-trust-boundaries.md) — reflected metadata vs native execution, assets, plugins, replication; baseline dimensions; evidence report fields; README skill-map lanes; route authority/supply-chain/server time to dedicated skills
- [ETW Threat Intelligence](concepts/etw-threat-intelligence.md) — Microsoft-Windows-Threat-Intelligence provider; PPL-gated cross-process memory telemetry; ETW bypass vs EPT hardening; [[etwti-fluctuation-monitor]] tamper alerts
- [Frame Observation Boundary](concepts/frame-observation-boundary.md) — record API/driver/compositor/capture path/sync/tool version before interpreting evidence; render-target→Present→compositor→display→capture layer separation; capability classification; observed capture vs assumed enforcement
- [Frida](concepts/frida.md) — injected/embedded/preloaded observation limits; integration modes vs stealth tiers; mobile instrumentation evidence table; [[overviews/mobile-security]] topic-routing cross-link
- [HVCI](concepts/hvci.md) — VBS VTL0/VTL1 Memory Integrity; capability/config/running-state distinction; W→X via hypervisor EPT/SLAT; hypervisor enforcement-boundary review table; WHP guest-partition limits; [[windows-runtime-attestation-report]]
- [HWID Spoofing](concepts/hwid-spoofing.md) — disk/NIC/SMBIOS/GPU/monitor/volume/TPM identifier masking; filter-driver IOCTL, registry, UEFI pre-boot; ban-evasion limits
- [Hardware Input Injection](concepts/hardware-input-injection.md) — KMBox/Arduino/HID + driver-filter paths for AI visual aim pipelines; USB HID report analysis + [[network-environment-evidence]]; defensive [[qortroller]] controller attestation
- [IL2CPP](concepts/il2cpp.md) — Unity AOT backend; metadata vs native trust boundary (stripping/AOT limits); Il2CppDomain hierarchy; metadata + dumpers (incl. metadata locator + Qiling emulation)
- [Input Provenance](concepts/input-provenance.md) — observation-coverage table, telemetry trust labels, missing-event discipline, coordinate-space/time-base prerequisites for behavioral and replay detectors
- [IOMMU](concepts/iommu.md) — VT-d/AMD-Vi translation; six out-of-domain paths; ACS/ATS-untrusted/RMRR; 16-entry bypass catalog + containment; enforcement vs observation limits via [[assurance-boundaries]]
- [Memory Acquisition Path](concepts/memory-acquisition-path.md) — classify initiator, transport, privilege, isolation boundary, and observable artifacts (PCIe FPGA, host driver, hypervisor, offline image); scope detection to the actual boundary; route certainty claims to [[assurance-boundaries]]
- [Kernel Callbacks](concepts/kernel-callbacks.md) — process/thread/image notify, ObRegisterCallbacks, Cm/Flt; IRQL/APC context + [[kernel-evidence-baseline]] for build-sensitive callback claims; overview routing cross-link
- [Kernel Evidence Baseline](concepts/kernel-evidence-baseline.md) — Windows build/symbol/configuration baseline; documented vs observed vs inferred evidence layers; pairs [[driver-trust-boundaries]] and [[research-rigor]] for version-sensitive kernel conclusions
- [Kernel Pool Scanning](concepts/kernel-pool-scanning.md) — Segment Heap pool walks; Pool2/3 contract limits; pool-tag attribution vs proof; PiDDBCache/MmUnloadedDrivers exact-build evidence; KDP Secure Pool scope; [[kernel-evidence-baseline]] + overview routing cross-links
- [Mixed Boolean-Arithmetic](concepts/mixed-boolean-arithmetic.md) — linear/polynomial MBA obfuscation; CoBRA/mbased/MBA (CUDA)/goomba (Hex-Rays + Z3)/chernobog (Hikari LLVM Hex-Rays)/GAMBA (Python simplifier + benchmark datasets)/mba-wasm (Rust/WASM web UI)/gnn-deobfuscation (GNN ML)/ProMBA/Kong/QSynthesis/DrillAndJoin/msynth/SMT simplification; mixed-boolean-transform / limba compile-time source obfuscation; VMProtect/Themida/LLVM passes
- [Mobile Anti-Cheat](concepts/mobile-anti-cheat.md) — mobile root/Frida/emulator/integrity/USB-ADB detection; ACE/RASP SDKs; G-Presto native AC RE; detection-finding review + [[mobile-trust-boundaries]] boundary attribution; route engine/network lanes to [[il2cpp]]/[[mobile-network-trust-evidence]]; post-clear identity rotation via [[device-reset-spoofer]]; in-app USB/ADB masking via [[usb-detection-bypass]]; MIUI/HyperOS vendor USB gate bypass via [[xiaomi-usb-security-bypass]]; bypass research framing
- [Mobile Network Trust Evidence](concepts/mobile-network-trust-evidence.md) — record networking stack/build variant/observation point before TLS/pinning claims; debug vs release trust anchors; capture vs backend authorization separation
- [Mobile Trust Boundaries](concepts/mobile-trust-boundaries.md) — device/build/ABI/signer/entitlements/privilege/collection-method baseline; package/signing vs runtime vs platform integrity vs server authorization; SELinux/Play Integrity/App Attest/network-trust evidence; privilege/instrumentation limits; evidence-report fields
- [Network Environment Evidence](concepts/network-environment-evidence.md) — outcome vs decision-key table, NAT/IPv6 identity boundaries, shared-network/account association, connection failure vs detection vs enforcement; KMBox Net UDP context; corroboration before attribution
- [OBS Game Capture](concepts/obs-game-capture.md) — OBS Game/Window/Display/Virtual Camera modes; [[frame-observation-boundary]] active-path identification; YOLO training→TensorRT pipeline + AI visual capture + detection signals
- [PatchGuard](concepts/patchguard.md)
- [Present Hook](concepts/present-hook.md) — IDXGISwapChain::Present / wglSwapBuffers / vkQueuePresentKHR overlay path; [[frame-observation-boundary]] baseline before hook attribution; anti-detection/evasion surface; platform constraints ([[swapchain-bottleneck]]); links [[obs-game-capture]], [[draw-call-hook]], [[present-injector]]
- [Research Rigor](concepts/research-rigor.md) — evidence discipline; evidence reconciliation across generated layers; pair with domain overviews
- [Resource Selection](concepts/resource-selection.md) — domain routing, provenance fields, data-layer order, `repository_index.py` lookup, README maintenance convention
- [Source NetVars](concepts/source-netvars.md) — ClientClass/RecvTable offset maps; CreateInterface exports (Source 1/2); SDK license vs shipped-binary ground truth
- [Stack Spoofing](concepts/stack-spoofing.md) — synthetic return stacks vs RtlWalkFrameChain / unwind validation
- [Static–Runtime Evidence](concepts/static-runtime-evidence.md) — artifact baseline (hash/format/arch/tool/environment/addresses); static inference vs runtime observation; protection-induced uncertainty labeling; pairs [[binary-evidence]] question tables
- [Unreal Object Model](concepts/unreal-object-model.md) — UObject hierarchy; reflection vs native layout; GObjects/GNames/GWorld; baseline prerequisites + [[dumper-7]] SDK workflow
- [Vanguard](concepts/vanguard.md)
- [World-to-Screen](concepts/world-to-screen.md) — 3D view-matrix projection for ESP/aim FOV; client-state observation + graphics/composition defensive context
- [Zygisk](concepts/zygisk.md) — Magisk zygote specialization hooks; early inject before Application.onCreate

## Entities

- [0xdea-frida-scripts](entities/0xdea-frida-scripts.md) — Frida JS instrumentation scripts for iOS/Android/Linux dynamic analysis; method tracing, class discovery, bypass-oriented snippets (0xdea; cheat / Frida; slug disambiguated from [[frida-scripts]])
- [SSL-bypass](entities/ssl-bypass.md) — universal Frida JS script; Android root detection + SSL pinning bypass via Java/native library hooks; no per-app customization (0xCD4; cheat / Root Detection & SSL Bypass Script)
- [1.6 C2](entities/1-6-c2.md) — CS1.6 cheat (C++; HL1 client DLL; ESP/aimbot/movement; GoldSrc hook patterns; cheat / game:cs1.6; eversinc33)
- [2048.cpp](entities/2048-cpp.md) — terminal C++ 2048 (console board / merge scoring; Game Develop / source)
- [2Pack](entities/2pack.md) — Rust PE & shellcode packer (EXE/DLL + raw; Anti Cheat → Binary Packer)
- [2k17-club](entities/2k17-club.md) — CS:GO internal C++ cheat framework (Akatsyk; aimbot, anti-aim, autowall, chams, grenade helpers; DirectX9 ImGui + Lua/LuaJIT LuaBridge; cheat development + Source engine RE; cheat / game:csgo)
- [3Beans](entities/3beans.md) — LLE Nintendo 3DS emulator (ARM9/ARM11 + Teak DSP; full OS boot; boot9/boot11/NAND dumps; software/hardware GPU; cross-platform; Nintendo 3DS)
- [360WFP Exploit](entities/360wfp-exploit.md) — BYOVD via Qihoo 360 `360netmon_x64.sys_wfp` (WFP; block EDR/XDR network)
- [3D-Racing-Game](entities/3d-racing-game.md) — OpenGL racing game (M/N scene switch; Game Develop / OpenGL source)
- [3d-asset-factory](entities/3d-asset-factory.md) — CLI YAML→3D pipeline (GPT Image 2.0 → TRELLIS.2 GLB; QA gate; web/Unity/Unreal export; Modal/Replicate/RunPod; AI category)
- [retro-3d-graphics-collection](entities/retro-3d-graphics-collection.md) — PS1-style CC0 retro 3D asset index (models/textures/shaders by theme; Miziziziz; Game Assets)
- [retro-game-console-icons](entities/retro-game-console-icons.md) — multi-size PNG retro console icons; TrimUI/Miyoo themes; editor/emulation content pipeline (KyleBing; Game Assets)
- [3d-game-shaders-for-beginners](entities/3d-game-shaders-for-beginners.md) — GLSL shader tutorial (Panda3D; SSAO/bloom/post-processing; Shader)
- [3d9](entities/3d9.md) — DX11 stereoscopic-fix tooling (developer-oriented; DirectX Tools)
- [3den Enhanced](entities/3den-enhanced.md) — Arma 3 Eden Editor expansion mod (R3voA3; SQF/config/addon modules; editor UI tools, mission attributes, workflow shortcuts; optional at runtime; Mod Editor / mission-maker tooling)
- [7DTD](entities/7dtd.md) — full 7 Days to Die cheat ecosystem (IntelSDM; Unity/Mono loader; C# modules + C++ auth/transport backend; ESP/aimbot/weapon mods/player spoofing; anti-cheat bypass; end-to-end delivery research; cheat / game:7dtd)
- [7DTD AntiCheatMod](entities/7dtd-anticheatmod.md) — server-side 7 Days to Die mod (C# .NET 4.8; cheat command block + fly/teleport/speed/godmode thresholds; admin exemption; warning→kick→ban; non-EAC dedicated hosts; majimaakane)
- [5paceman-nightshade](entities/5paceman-nightshade.md) — Windows internal C++ inject framework (5paceman; D3D hooks, DirectInput interception, pattern scan, memory patch, shellcode remote exec; module manager + keybind toggles; RE + cheat/AC research; cheat / inject tool)
- [94q-valorant-internal](entities/94q-valorant-internal.md) — Valorant internal C++ cheat (94q; basic/memory/silent aim; ESP boxes/chams/glow; FOV/fly/third-person; hotkey menu; RE experimentation; cheat / game:valorant [Internal])
- [BNM-Android](entities/bnm-android.md) — C++20 Android Unity IL2CPP modding library by class/method/field names; runtime access, patching, hook-framework integration; supported Unity versions; mobile game modding / RE foundation; [Modding il2cpp games]; ByNameModding
- [BakaWare4](entities/bakaware4.md) — WIP CS2 cheat (debug unload/unhook; `-insecure`; cheat / game:cs2)
- [BamboozlEDR](entities/bamboozledr.md) — ETW event generator TUI (multi-provider; EDR/detection lab; AC/IS forensics)
- [Babylon.js](entities/babylon-js.md) — TypeScript browser 3D engine (WebGL/WebGPU; scenes/animations/materials/physics/post-processing; SSAO/SSR/TAA; Game Engine / HTML5)
- [Bad-Bugcheck](entities/bad-bugcheck.md) — NSG650; updated kernel BSOD visual hack; Bad Apple frames via crash framebuffer; hooks KeBugCheckEx; display framebuffer mapping (not legacy BOOTVID VGA); stb_image + direct memory copy; bugcheck hooking / crash-screen rendering research
- [Bad-BugCheck Old](entities/bad-bugcheck-old.md) — NSG650; early kernel BSOD visual PoC; Bootvid VidBitBlt VGA-style animated frames on forced crash screen; triggers bugcheck after playback; legacy BOOTVID crash-screen graphics research
- [BadRentdrv2](entities/badrentdrv2.md) — Rentdrv2.sys BYOVD (IOCTL → physmem R/W; driver map / kernel patch / AC bypass; gmh5225)
- [BadEye](entities/badeye.md) — BE handle-access assumption bypass (C++ memory analysis; EPROCESS→MmCopyVirtualMemory; gmh5225; cheat / explore anticheat system:be)
- [bad-io-uring](entities/bad-io-uring.md) — Android io_uring kernel privesc PoC (Markakd; C/NDK; Pixel 6 root; per-device exploit variants; boot-image unpack + kallsyms helper; kernel security research; cheat / Root for Pixel 6)
- [bad-query](entities/bad-query.md) — iOS 26–27 sandbox-escape PoC (Xcode; app/daemon/App Group/system-container path access; container isolation research; forcequitOS)
- [bagbak](entities/bagbak.md) — iOS Frida app decrypt/dump to IPA CLI; Node.js/TypeScript; extensions and embedded frameworks; USB/remote jailbroken devices; deprecated; bagbak@5 needs Frida 17 (ChiChou; cheat / Frida)
- [badlion-logger](entities/badlion-logger.md) — KiFilterFiberContext PoC kernel logger for AC driver observation (IAT hooks on image-load callbacks; VMProtect-virtualized target; C++; driver-level monitoring research)
- [BaiZe](entities/baize.md) — Magisk/KernelSU/APatch graded cache, log, APK-residue, and deep junk cleanup (Kotlin/C; risk tiers, quarantine)
- [bam-extension-table-hook](entities/bam-extension-table-hook.md) — BAM extension-table process-notify hook PoC (Dor00tkit; swaps `bam!BampCreateProcessCallback`; ntoskrnl offset lookup + notify-mask handling; AC/EDR callback bypass research)
- [BanMod](entities/banmod.md) — Among Us BepInEx host-side moderation + AntiCheat (Harmony IL2CPP; synced ban lists; AFK/camera/follow detectors; GiannBart)
- [BareSVM](entities/baresvm.md) — Rust AMD SVM hacked-hypervisor testing (Detection:HV)
- [BattleAnalysis176](entities/battleanalysis176.md) — MapleStory v176 farming-performance estimator (C++ console; pointer/offset memory reads; projected mesos/NX hourly gains; private-server / RE runtime economy metrics; Bratah123; cheat / game:maplestory [Battle Analysis])
- [BattleField-1-Internal](entities/battlefield-1-internal.md) — BF1 internal: DirectX / SDK generation / hooking (C++)
- [BF1-ESP-AND-AIMBOT](entities/bf1-esp-and-aimbot.md) — BF1 ESP/aimbot: DirectX / rendering / hooking (C/C++; gmh5225; cheat / game:battlefield 1)
- [BF4-Internal-overlay](entities/bf4-internal-overlay.md) — BF4 internal overlay: DirectX / rendering / SDK generation (C++; gmh5225; cheat / game:battlefield 4)
- [battlefield-2042-internal-sdk](entities/battlefield-2042-internal-sdk.md) — BF2042 internal SDK scaffold (Skengdo; C++; entity/player/vehicle/weapon structures, rendering, W2S; incomplete; cheat / game:battlefield 2042 [Internal])
- [battlefn-cheat-analysis](entities/battlefn-cheat-analysis.md) — Detected Fortnite cheat post-mortem (0dayatday0; written analysis + sample modules + manual-map / privileged-memory PoCs; batch + C++ usermode→kernel paths; tradecraft + mistake study for AC/RE researchers)
- [Basic-Fortnite-Cheat-Source-Internal](entities/basic-fortnite-cheat-source-internal.md) — Fortnite internal: UE4 SDK / GObject/GNames / hooks (ESP + aimbot; C++)
- [basic-anti-cheat](entities/basic-anti-cheat.md) — Basic C/C++ AC teaching sample (integrity / signature scan / debugger / modules / memory validation; gmh5225)
- [BatteryShark Writeup Archive](entities/batteryshark-github-io.md) — Jekyll GitHub Pages RE writeups (game hacking / classic PC patching / Windows internals / arcade hardware; IDA + Python; Masterpiece consolizing series; QEMU-GDB; cheat / guide)
- [BE-Shellcode](entities/be-shellcode.md) — BattlEye UM shellcode dump/disasm (thread scan / VEH / modules)
- [BE Shellcode Dump](entities/be-shellcode-dump.md) — dump BE runtime shellcode scanning modules for offline RE (gmh5225; Reversed BE Shellcode)
- [BE Shellcode Tester](entities/be-shellcode-tester.md) — C++ sandbox to execute/analyze dumped BE scanning modules; logs memory scans, hash checks, detection routines (es3n1n)
- [BE BattlEye Shellcode](entities/be-battleye-shellcode.md) — reimplement recent BE UM shellcode scan stages as DLL study scaffold (hidden threads, KiUserExceptionDispatcher hooks, integrity/signature/thread scans, VEH-guarded calls; gmh5225; [shellcode])
- [BE Emulator](entities/be-emulator.md) — BattlEye client-side protocol emulator (heartbeat, module load, comm; gmh5225; explore anticheat system:be)
- [BE Forcer Fortnite](entities/be-forcer-fortnite.md) — Fortnite BattlEye init forcer; disables title-specific detection checks for injection/memory access (gmh5225; cheat / explore anticheat system:be / game:fortnite)
- [BEClient](entities/beclient.md) — C++ PoC BattlEye client DLL interface (init, callbacks, run/command/exit; structure headers; Visual Studio; LilPidgey; anti-cheat client integration RE)
- [beservice-intcallbacks](entities/beservice-intcallbacks.md) — BattlEye bypass PoC via Instrumentation Callback behavior (R4YVEN; C++/asm; callback + symbol-handling; exploratory BE service research; Instrumentation Callback)
- [Beatrice.py](entities/beatrice-py.md) — Python x64 opcode-equivalent mutation (AV/AC signature evasion)
- [bemaniutils](entities/bemaniutils.md) — Python Konami BEMANI arcade RE toolkit (eAmusement protocol, packet sniff/MITM/replay, IFS/2DX/AFP asset unpack-repack, hobby server backends for IIDX/DDR/Pop'n/SVDX; DragonMinded; cheat / RE toolkit)
- [Benowin Blanc (bb)](entities/bb.md) — parse Windows SDK/PHNT via libclang; struct layouts, enums, constants (`dt`-like) without WinDbg; CLI + TUI, JSON export (cristeigabriela)
- [bb-viewer](entities/bb-viewer.md) — web explorer for bb output: Windows SDK/PHNT functions, types, constants, IRQL annotations, type graphs; search/filter; user/kernel; amd64/x86/arm/arm64 (cristeigabriela)
- [BD-UN-JB](entities/bd-un-jb.md) — BD-J jailbreak exploit chain (Gezine; xlet payloads + Unsafe; bdj_unpatch BDMV tool; RemoteJarLoader PS5 ≤12.00; network JAR load/logging; PlayStation BD-J sandbox escape)
- [BetaShield](entities/betashield.md) — C++/Boost client-side AC (integrity checking, process monitoring, tamper detection; Boost.Asio networking; cross-platform; open-source protection design reference; JackBro)
- [BEDaisy](entities/bedaisy.md) — BEDaisy.sys kernel interception PoC (image-load callbacks + IAT hook on MmGetSystemRoutineAddress; APC experimentation; Aki2k; RE / bypass-surface study)
- [BEDaisy.sys report bypass](entities/bedaisy-bypass.md) — suppress BEDaisy outbound reports; preserve service responses (gmh5225; cheat / explore anticheat system:be)
- [be-injector](entities/be-injector.md) — Windows COW-bypass injection PoC; physical memory mapping to patch signed module code before copy-on-write split; evades thread/API/signature module checks; AC bypass research (Compiled-Code; cheat / Attack COW)
- [bedaisy-reversal](entities/bedaisy-reversal.md) — BEDaisy.sys comprehensive RE (integrity/callback/HAL/manual-map checks, handle protection, minifilter, physmem scan, CSRSS/graphics verify, thread/image notify; dllcrt0)
- [BepInEx](entities/bepinex.md) — Unity Mono/IL2CPP and .NET plugin/modding framework (C# chainloading, logging, config, Harmony patching; Windows/Linux/macOS; BepInEx)
- [BepInEx Utility IL2CPP](entities/bepinex-utility-il2cpp.md) — BepInEx IL2CPP utility plugins (graphics settings, window resize, mute-in-background, Message Center; runtime QoL; BepInEx)
- [BepInEx-IL2CPPBase](entities/bepinex-il2cppbase.md) — BepInEx Unity IL2CPP mod-menu base (C# rendering/audio/physics hooks; cheat / IL2CPP Menu; gmh5225)
- [BattlEye Handler BYPASS](entities/battleye-handler-bypass.md) — KMDF driver; re-create handles before ~5s BE strip cycle (IOCTL usermode comms)
- [BattlEye User-Mode Bypass](entities/battleye-user-mode-bypass.md) — C++ Visual Studio PoC; CreateFileW hook + file-check masquerade; historical UM BE loading-path bypass (HadockKali; SetWindowsHookExW)
- [Battleye Shellcode Dumper](entities/battleye-shellcode-dumper.md) — intercept BE server-streamed runtime shellcode + keys pre-execution (BEClient2.dll Dumper)
- [Battleye-VAC-EAC-Kernel-Bypass](entities/battleye-vac-eac-kernel-bypass.md) — kernel driver; process hide + IOCTL R/W via FSFilter/registry/process callbacks (BattlEye/VAC/EAC bypass research; FsFilter Testing; daswareinfach)
- [battleye-re](entities/battleye-re.md) — BEDaisy.sys RE reference (IOCTL/API/anti-DMA; PE layout, HAL verify, VM obfuscation; experienceds)
- [battleye-decryption](entities/battleye-decryption.md) — BEService↔BEDaisy named-pipe packet decrypt (XOR multi-layer, hardware-info crypto, key-derived routines; dllcrt0)
- [battleye-region-walking](entities/battleye-region-walking.md) — BE VirtualQuery region walk (MEM_PRIVATE/MAPPED; shellcode/manual-map)
- [battleye-rust](entities/battleye-rust.md) — BattlEye RCON UDP (Rust; packet checksum + socket I/O)
- [battleye-shellcode](entities/battleye-shellcode.md) — decompiled BE UM shellcode modules (AutoHotKey detection, Present hook scan, stack-walking; dllcrt0; [shellcode])
- [battle-cats-complete](entities/battle-cats-complete.md) — Battle Cats Rust desktop toolkit (.pack/APK import, decrypt/extract, animation render/export, mod authoring; omochikaeri15)
- [BattleriteBot](entities/battlerite-bot.md) — Battlerite arena brawler automation bot (memory or screen recognition; ability/targeting/movement; gmh5225)
- [BetterCallStack](entities/better-call-stack.md) — C++ IDA debugger plugin; Windows x64 call-stack reconstruction via DbgHelp + StackWalk64; more reliable frames than default debugger view; auto-loads during debug sessions; protected/complex binary RE (AntonKukoba1; cheat / Improve call stack)
- [better-godot-mcp](entities/better-godot-mcp.md) — Godot 4.x composite MCP (TS; scenes/GDScript; Game Develop / MCP)
- [better-hi3-launcher](entities/better-hi3-launcher.md) — Honkai Impact 3rd enhanced launcher (download/version/server/config; gmh5225)
- [better-string-analyzer](entities/better-string-analyzer.md) — Ghidra string analyzer plugin (Java; modding / Ghidra Plugins; fuzzypickles14)
- [better-timing](entities/better-timing.md) — Linux KVM patch; VM-exit timing + guest TSC offset for bare-metal-like CPU timing; bypass timing-based anti-VM checks (SamuelTulach; cheat / Bypass CPU Timing)
- [bethesda-modding-starter](entities/bethesda-modding-starter.md) — Bethesda F4SE/SFSE plugin bootstrap + Ghidra/x64dbg MCP RE (Fallout 4/Skyrim/Starfield; CommonLib; CMake/vcpkg; rollingrock)
- [bevy](entities/bevy.md) — Rust data-driven ECS game engine (free OSS; Game Engine / source)
- [bevy-personal-test](entities/bevy-personal-test.md) — Rust/Bevy multiplayer security testbed (rollback netcode, shadow-VM Wasm checks, Rhai sandbox VM, server replay validation; XX-Batsu)
- [big5-decode-ida](entities/big5-decode-ida.md) — IDA plugin: decode bytes as Big5 (Python; cheat / IDA Plugins)
- [BigBaseV2](entities/bigbasev2.md) — GTA V C++/Lua mod-menu base (rendering / modding / hooking; cheat / game:gta5; gmh5225)
- [BigWhiteTool](entities/bigwhite-tool.md) — Android native UE memory/SDK utility (C/C++ NDK; GName/GObject metadata traversal, process R/W, SDK dump; ImGui Vulkan/OpenGL overlay; offset finding + runtime inspection; BigWhite666; cheat / [SDK Dump For Android])
- [abyss](entities/abyss.md) — Android system call hook (C/C++; asset pipelines, SDK generation, hooking; cheat / RE tools)
- [abyss-engine](entities/abyss-engine.md) — clean-room classic ARPG engine reimplementation (AbyssEngine; C; SDL2/FFmpeg/zlib/libarchive; rendering, audio, scene management, MPQ assets; cross-platform; modding/legacy-behavior research; Game Engine / source; `[ARPG]`)
- [adbg](entities/adbg.md) — Linux anti-debugging techniques (C/C++; Anti Debugging)
- [adbi](entities/adbi.md) — Android Dynamic Binary Instrumentation (ARM/Thumb hijack injector + inline entry hooking; NDK; mobile RE / security research; WaterlooBridge fork, crmulliner lineage)
- [And64InlineHook](entities/and64-inline-hook.md) — Android ARM64 inline hooking library (C++; instruction patch + branch relocation + trampolines; executable-memory + I-cache flush; mobile RE / instrumentation; Rprop)
- [And UE4Dumper](entities/andue4dumper.md) — Android Unreal Engine dumping toolkit (C++ NDK; external executable or injectable shared library; engine offsets/classes/structs/enums/functions + symbol JSON for IDA/Ghidra; MJx0; cheat / [SDK Dump For Android])
- [adaptive-boss-arena](entities/adaptive-boss-arena.md) — Unity 6 boss-arena demo; compile-time assembly firewalls block AI from player input; delayed perception; adaptive counters + edit/play-mode tests (Shadow-46; Game Develop / anti-cheat design)
- [advanced-efi-driver-with-gdi-and-kernel-mouse-input](entities/advanced-efi-driver-with-gdi-and-kernel-mouse-input.md) — UEFI memory/process framework; GDI overlay + kernel mouse input; encrypted comms + anti-detection (Twobot7; cheat / EFI driver)
- [Aeonix CS2](entities/aeonix-cs2.md) — external CS2 cheat framework (Fr0go1; C++; derivative external base; overlay + ESP/aimbot+RCS/triggerbot/radar/config; memory access + offset handling; cheat / game:cs2 [External])
- [aho-corasick](entities/aho-corasick.md) — Aho-Corasick multi-pattern string matcher (ISM; mmap automata; C API; signature/YARA-style scan backend)
- [a-pasted-rust-script](entities/a-pasted-rust-script.md) — Rust/C++ ImGui cheat loader (anti-debug + feature modules)
- [a53-code-exec](entities/a53-code-exec.md) — PS5 Cortex-A53 code-execution PoC (fw 02.00; kernel / SDK generation; PlayStation)
- [aarch64-sysreg-ida](entities/aarch64-sysreg-ida.md) — IDA Pro plugin: AArch64 MSR/SYS → register names; ARMv8 DB + Apple JSON; ARM OS/kernel RE (TrungNguyen1909; cheat / IDA Plugins)
- [AfdIrpCallDispatch](entities/afd-irp-call-dispatch.md) — Afd.sys .data pointer hook on AfdIrpCallDispatch (driver communication)
- [ActionRoguelike](entities/action-roguelike.md) — UE Roguelike sample (gameplay systems; Game Develop / Unreal source)
- [AERoot](entities/aeroot.md) — Quarkslab Android Emulator runtime root (debug pipe/ADB; custom su; no system-image rewrite)
- [AiDA](entities/aida.md) — AI-powered IDA 9.0+ assistant for C++ game RE (cheat / IDA Plugins)
- [AICommand](entities/ai-command.md) — ChatGPT integration with Unity Editor (API key in UserSettings; Game Engine Plugins:Unity)
- [AI-Aimbot](entities/ai-aimbot.md) — RootKit-Org YOLOv5 screen-capture aimbot (Conda; Fortnite/Rust custom models; detection sensitivity + aim tuning; cheat / Machine Learning YOLOv5)
- [AI-FPS-b00m-h3adsh0t](entities/ai-fps-b00m-h3adsh0t.md) — AI-powered FPS aimbot (Python/C++; external screen capture + YOLO player detection + mouse aim; cheat / Neural Network; gmh5225)
- [AIMachDec](entities/aimachdec.md) — IDA LLM ARM64→C/ObjC/Swift for Mach-O (apps/kernelcache/DSC; cheat / IDA Plugins)
- [AimStar](entities/aimstar.md) — M3351AN external CS2 cheat framework (C++; bone-based aimbot, entity tracking, ESP, triggerbot, offset management, menu config; multi-language docs; external cheat architecture + CS2 memory reading research; cheat / game:cs2 [External])
- [aimbot-detection-prototype](entities/aimbot-detection-prototype.md) — deep-learning aimbot/triggerbot detection prototype (clips + live window; Detection:Aimbot)
- [aimtux](entities/aimtux.md) — Linux CS:GO internal cheat framework (AimTuxOfficial; C++; CMake, GDB injection, config dirs; build scripts + injection helpers; cheat / game:csgo [Linux])
- [airtest](entities/airtest.md) — cross-platform UI automation for games/mobile (Python; image recognition without process injection; Android/iOS/desktop; device farms, CLI/Python, HTML reports; UI Automation Framework / Game Testing)
- [agent-sprite-forge](entities/agent-sprite-forge.md) — Codex skills for game-ready 2D sprites and layered maps (0x0funky; AI imagegen + local clean/split/validate/export; Godot/Unity/raw 2D; Game Develop / AI Agents)
- [al-khaser](entities/al-khaser.md) — Windows C++ anti-analysis PoC test suite (LordNoteworthy; anti-debug/anti-VM/anti-dump/anti-disassembly/timing CLI checks; VirtualBox/VMware/QEMU/Wine; sandbox/EDR/anti-malware visibility validation)
- [alt-V Anticheat Guide](entities/alt-v-anticheat-guide.md) — alt:V Multiplayer server AC guide (cheat detection, client integrity, behavior monitoring, server-side logic; Anti Cheat / guide; gmh5225; GTA5 MP servers) — alt:V Multiplayer server AC guide (cheat detection, client integrity, behavior monitoring, server-side logic; Anti Cheat / guide; gmh5225; GTA5 MP servers)
- [AMD IBS Toolkit](entities/amd-ibs-toolkit.md) — AMD Instruction-Based Sampling toolkit (hardware instruction subset sampling; cheat / Windows kernel explorer / AMD Sampling)
- [AMD-SP-Loader](entities/amd-sp-loader.md) — Binary Ninja loader for AMD SP/PSP firmware (ABL + PSP bootloader load addresses; PSP syscall annotation; PSPTool workflow; dayzerosec; AMD-SP or PSP firmware)
- [amd-ryzen-master-driver-v17-exploit](entities/amd-ryzen-master-driver-v17-exploit.md) — AMD Ryzen Master v17 driver BYOVD (IOCTL → physmem R/W; kernel exploitation / driver map / AC bypass; gmh5225)
- [amice](entities/amice.md) — Rust LLVM pass plugin for compile-time native obfuscation (fuqiuluo; clang -fpass-plugin; string encrypt, CFF, bogus CFG, MBA, indirect calls/branches, BB split/shuffle, instruction-level VMP; llvm-plugin-rs + inkwell; LLVM 11–22; Android NDK; C/C++/Rust IR; Obfuscation Engine)
- [ANGRYORCHARD](entities/angryorchard.md) — win32k NtUserHardErrorControl kernel exploit (thread→KernelMode elevation; arbitrary kernel R/W; Some Tricks; gmh5225)
- [Advanced Root Checker](entities/advanced-root-checker.md) — offline Android root/hook detector (Java; su/Magisk/KernelSU/APatch/Zygisk/Xposed/LSPosed, Frida anti-tamper, risk score; Laert-Android; cheat / Android root)
- [Advanced-Anticheat](entities/advanced-anticheat.md) — open-source Roblox Luau client-server AC (movement/executor/GUI/ESP; ProfileStore flags/bans; honeypots)
- [AdvancedAntiCheat](entities/cklsit-advanced-anticheat.md) — Spigot/Paper/Purpur Minecraft plugin (1.8.x–1.21.x; fly/speed/KillAura/reach/scaffold/ESP; client checks, reports, bounty sandbox; multi-DB cross-server ban sync; cklsit)
- [ac](entities/ac.md) — open-source Windows kernel AC driver (NMI/APC/DPC stack walks, `.text` integrity, ObCallbacks handle strip, chained data-ptr detect; donnaskiez)
- [access](entities/access.md) — BTBD kernel syscall wrapper (`.data` hook; handleless `PROCESS_ALL_ACCESS` on protected processes; usermode DLL redirect; no SEH; Fortnite-tested; cheat / access)
- [access-updated](entities/access-updated.md) — bromoket fork of btbd/access (Zydis pattern scan; `xKdEnumerateDebuggingDevices` `.data` hook; handleless KM process ops; Win10 1607+–Win11 24H2; cheat / access)
- [ACEPatcher](entities/acepatcher.md) — BataBo GUI .NET assembly patcher (C#; dnlib + Harmony; method-map patching; import/export password-protected patch sets; packed/obfuscated managed binaries; repeatable .NET patch automation; [.NET Patcher])
- [AceTheGame](entities/ace-the-game.md) — open-source Android memory editing platform (C++ scan engine + Kotlin/Java client; process inspection, value edit/freeze, modding/injection; rooted/non-rooted; KuhakuPixel; cheat / Game Hacking Tools)
- [AcDrv](entities/acdrv.md) — Windows kernel AC research driver (process/module callbacks, memory intercept, syscall monitoring; ETW Hook; gmh5225)
- [aclist.github.io](entities/aclist-github-io.md) — static site: anti-cheat compatibility list + Linux gaming docs (HTML/CSS/JS; conservative manual verification; Anti-cheat compatibility list)
- [aegledll](entities/aegledll.md) — AnarchDevelopment Aegleseeker internal Minecraft DX11 DLL client (C++; MinHook + ImGui overlay + HLSL shaders; pattern scan; modular combat/movement/visual HUD; config + array-list + optional IRC; cheat / game:minecraft [Internal])
- [Aeterna-rongroi](entities/aeterna-rongroi.md) — offline read-only FiveM PC-check tool (aeterna; Rust/Tauri 2 + React UI + CLI; YAML rules engine; Found/NotFound/Unmeasured cheat-trace evidence without clean/guilty verdicts; screenshare self-check with path redaction; Anti Cheat)
- [AetherVisor](entities/aether-visor.md) — AMD SVM hacked-hypervisor testing (feature implementation walkthrough; Detection: Hacked Hypervisor Testing AMD; gmh5225)
- [AETHER](entities/aether.md) — CSIT-SG IDA Pro LLM copilot (Python; AI decompilation, chatbot with tool-calling, function annotation, vulnerability analysis, RAG from binary DB; multi-provider; prompt templates + custom viewer; malware analysis)
- [Aetheris](entities/aetheris.md) — Dray973 PyQt6 Windows forensics suite (MemProcFS + PCILeech-FPGA guarded DMA R/W; process autopsy, MFT/network/registry; hash-chained audit log; Omega Rollback; live instrumentation; Cheat DMA lane)
- [AdbFileManager](entities/adb-file-manager.md) — Windows ADB file manager (C#/.NET dual-pane Explorer UI; faster than MTP; Cheat Android File Explorer; gmh5225)
- [ADB Debug Detect Checker](entities/adb-debug-detect-checker.md) — Android Java ADB/debug-state detection app (reference for ADB debugging probes; Anti Debugging; fiord)
- [Agafi](entities/agafi.md) — x86 ROP gadget finder + ROP chainer (programs/modules/live processes; Cheat / ROP Finder)
- [angrop](entities/angrop.md) — automatic angr ROP gadget finder + chain builder (symbolic execution, constraint solving; CLI + API; architecture-agnostic; Cheat / ROP Generation)
- [angry-ghidra](entities/angry-ghidra.md) — Ghidra extension embedding angr symbolic execution (Java + Python/claripy; start/find/avoid addresses; patched-byte apply; CTF/malware/game RE; Nalen98; Use angr in Ghidra)
- [Anbox](entities/anbox.md) — container-based full Android on Linux (LXC + host daemon; OpenGL ES; C++/CMake; archived reference; Android Emulator)
- [Akebi Cheat 3.3](entities/akebi-cheat-3.3.md) — Akebi-framework Genshin Impact cheat (3.3 branch; cheat / game:genshin impact; gmh5225)
- [Akebi Packet Sniffer](entities/akebi-packet-sniffer.md) — Akebi-framework packet sniffer (C++/C; driver development; DirectX/OpenGL; cheat / Packet Sniffer&Filter; gmh5225)
- [AkHeartbeat-BE](entities/akheartbeat-be.md) — GTA5 Enhanced external C++ tool (D3D11 overlay; RPM/WPM + AOB scan; stat/script editors; BE heartbeat bypass + client–BEDaisy RE notes; cheat / game:gta5 [External]; AkitaYui)
- [Alaa-8ball-pool-source-exposed](entities/alaa-8ball-pool-source-exposed.md) — exposed 8 Ball Pool mobile cheat source (physics reads; aim assist / trajectory / shot power; guideline overlay; gmh5225)
- [Alibi](entities/alibi.md) — read-only Windows forensic attestation kit (PowerShell; PC cheat/DMA/HWID-spoofer + console-rig capture-card/vision-aimbot/XIM·Cronus·ReaSnow scan; verdict-tier text/HTML reports; accused-player evidence; Sutaigne)
- [Alcatraz](entities/alcatraz.md) — x64 PE obfuscator (mutation / CFF / IAT; Zydis + AsmJit; ImGui; AC/obfuscation-engine research)
- [Allocating individual pages](entities/allocating-individual-pages.md) — `MmAllocateIndependentPagesEx` isolated kernel page alloc (stealth manual-map; pool-tag evasion; gmh5225)
- [Alternative Shellcode Exec](entities/alternative-shellcode-exec.md) — Windows callback-API shellcode execution PoCs (Visual Studio samples; position-independent code without CreateThread; user-mode evasion / shellcode engine & tricks; aahmad097)
- [AmalgamEngine](entities/amalgam-engine.md) — C++ CMake isometric sprite-based online virtual-world engine (client/server, networking, chat, accounts, live in-world editing; Game Engine / source)
- [Amber](entities/amber.md) — EgeBalci reflective PE loader + payload generator (Go + ASM; EXE/DLL/SYS in-memory execution; payload encoding, API obfuscation, staged delivery, memory cleanup; reflective loading / scanner-evasion research)
- [Ambient](entities/ambient.md) — Rust cross-platform multiplayer runtime + game engine (AmbientRun/Ambient; ECS data model; automatic network sync; package workflows + asset pipelines; WebAssembly + WebGPU web/desktop; Game Engine / source)
- [Amethyst](entities/amethyst.md) — PowerNukkitX Bedrock prediction AC plugin (Java; per-tick physics replay from player input; simulated vs client position delta; movement/vehicle simulation, world-state acknowledgment gating, combat entity rewind; fly/reach/kill aura/scaffold/inventory/backtrack/packet checks; movement correction + violation alerts; NaySurGithub; Anti Cheat / game:minecraft)
- [AMSI-ETW-Patch](entities/amsi-etw-patch.md) — minimal byte-patch PoC bypassing AMSI + ETW (C/PowerShell/C#; branch patches + telemetry short-circuit; red-team / defensive in-memory tampering validation; Mr-Un1k0d3r; README [ETW Testing])
- [AlphaGolang](entities/alphagolang.md) — SentineLabs IDAPython Go binary analysis workflow (pclntab recovery, function discovery, strings, types; YARA for PE/ELF/Mach-O; stripped Go malware RE; cheat / Analyzing Golang Binaries) — SentineLabs IDAPython Go binary analysis workflow (pclntab recovery, function discovery, strings, types; YARA for PE/ELF/Mach-O; stripped Go malware RE; cheat / Analyzing Golang Binaries)
- [APatch](entities/apatch.md) — Android kernel/system patch root (KernelPatch boot.img; SuperKey above root; stock GKI; Cheat / Android root)
- [APatch KPM](entities/apatch-kpm.md) — APatch KernelPatch Module collection (C/C++; kernel modding/debug; Cheat / Android root)
- [ape-ex-abominations](entities/ape-ex-abominations.md) — Apex Legends DMA-oriented cheat: C++ feature modules + shell gdb inject/extract/reload; interface discovery + pattern scan; QEMU/VFIO workflows; evdev-mirror kernel input (LWSS; cheat / game:apex legends [Apex])
- [apple-lite-fortnite-cheat](entities/apple-lite-fortnite-cheat.md) — Apple Lite Fortnite Cheat leak + Police remake (C/C++; kernel + shader + modding; gmh5225; cheat / game:fortnite)
- [apex_full_cheat](entities/apex-full-cheat.md) — Apex Legends full cheat: rendering / SDK generation / hooking (C/C++; cheat / game:apex legends)
- [apex_legends_sdk](entities/apex-legends-sdk.md) — Apex Legends SDK: rendering / SDK generation (C++; gmh5225; cheat / game:apex legends)
- [Apex-Legends-Offset-Dumper](entities/apex-legends-offset-dumper.md) — Apex Legends live-process offset dumper: pattern scan + netvar enumeration; interfaces and SwapChain pointers (dhanax26; cheat / game:apex legends [Offset])
- [Apex-Legends-SDK-Remaster](entities/apex-legends-sdk-remaster.md) — Apex Legends SDK remaster: simplified open-source cheat (ease of use; avoids Python-binding friction; dword64; cheat / game:apex legends)
- [Apex-ApexCheat](entities/apex-apex-cheat.md) — Apex Legends cheat: hooking / memory analysis (C/C++; gmh5225; cheat / game:apex legends)
- [Apex-ApexCheeseTest](entities/apex-apex-cheese-test.md) — Apex Legends KM↔UM communication: kernel–usermode channel (C/C++; gmh5225; cheat / game:apex legends)
- [Apex-CHEAT-FIXED](entities/apex-cheat-fixed.md) — Apex Legends fixed cheat: driver development / modding / hooking (C/C++; gmh5225; cheat / game:apex legends)
- [apex-cheating](entities/apex-cheating.md) — Apex Legends bundled cheat resources: C# HWID spoofer, seasonal offset dumps, EAC bypass scripts, SVG asset extraction (cheatingwitdacode; cheat / game:apex legends)
- [apex-external](entities/apex-external.md) — Apex Legends external framework: OpenGL/GLFW + ImGui overlay, driver-style memory access; ESP/glow/aim/recoil/bhop (C++; NekoRem; cheat / game:apex legends [External])
- [apex-external-cheat](entities/apex-external-cheat.md) — Apex Legends external (Echo_Apex): kernel-driver memory reads + DX11 ImGui overlay; offsets/hitboxes/string encryption (C++17; bootmgfw; cheat / game:apex legends [External])
- [astronaut00-apex-external](entities/astronaut00-apex-external.md) — Apex Legends external cheat/SDK (ApexCheat): C++ ImGui overlay + glow/aimbot/entity modules; Rust offset dumper; cheat prototyping + RE experiments; outdated notes (Astronaut00; cheat / game:apex legends [External])
- [apexbot](entities/apexbot.md) — Apex Legends Rust external framework: backend-embeddable; PID aim assist, triggerbot, recoil, ESP/radar/highlights, observer tracking, automation; gamedata from dumped offsets (CasualX; cheat / game:apex legends [External])
- [apexdream](entities/apexdream.md) — Apex Legends Rust external: live-memory aim assist, ESP/radar, recoil, prediction; embeddable API; pelite PE offset dumper (`apexdumper` → gamedata.ini; CasualX; cheat / game:apex legends [External])
- [apex-legends-cheat](entities/apex-legends-cheat.md) — Apex Legends external: kernel driver + loader + client DLL; ESP/chams + input-assisted aim; syscall-hooking + kernel-thread execution bypass (NMan1; kernel-mediated cheat pipeline RE; cheat / game:apex legends [External])
- [apex-legends-driver-cheat](entities/apex-legends-driver-cheat.md) — Apex Legends kernel-assisted external: BYOVD-mapped driver R/W + C++ usermode + transparent ESP/aim overlay (TheCruZ; cheat / game:apex legends [External])
- [apex-legends-esp](entities/apex-legends-esp.md) — Apex Legends external ESP learner template: kernel driver + kdmapper loader + GDI overlay (RavenOfTime; C++ Visual Studio; memory-read pipeline / entity visualization; cheat / game:apex legends [External])
- [Apex-ItemGlow](entities/apex-item-glow.md) — Apex Legends minimal item-glow PoC: C++ entity-slot iteration + highlight memory writes; wall-highlight visual hack (Neurosisccc; cheat / game:apex legends [Item glow])
- [Apex-Legends-External-Esp-Aimbot-Skinchanger](entities/apex-legends-external-esp-aimbot-skinchanger.md) — Apex Legends external ESP/aimbot/skinchanger: rendering / SDK generation / overlays (C/C++; gmh5225; cheat / game:apex legends [External])
- [apex_linux](entities/apex-linux.md) — Linux-native Apex Legends cheat research (C++; ekknod; cheat / game:apex legends [Linux])
- [apex-mizu-base](entities/apex-mizu-base.md) — Apex Legends internal cheat base: C++ Visual Studio hooking scaffold, game/entity abstractions, math utilities, ImGui + DirectX menu; feature-development starter (NaiJii; cheat / game:apex legends [Internal])
- [nullptr-apex-external](entities/nullptr-apex-external.md) — Apex Legends external tutorial codebase: C++ kernel hijacking + game memory R/W + SDK entity handling; user-mode visualization/control; educational external cheat architecture + AC detection research (M1fisto; cheat / game:apex legends [External])
- [project-branthium](entities/project-branthium.md) — Apex Legends hybrid UM+KM cheat framework: C++ Visual Studio user-mode client + kernel driver; aimbot, ESP, entity caching, weapon prediction; ImGui + DirectX 9 menu/overlay (KaylinOwO; cheat / game:apex legends)
- [project-tanya](entities/project-tanya.md) — Apex Legends service-oriented external automation: C#/.NET modular memory access, driver abstraction, game-state modeling, Aim/Sense layers; Linux daemon build/install; process isolation + ptrace hardening (XRadius; cheat / game:apex legends [Linux])
- [Apex-SIMPLE-AIMBOT-GLOW-APEX](entities/apex-simple-aimbot-glow-apex.md) — Apex Legends aimbot + glow: driver development / hooking / memory analysis (C/C++; gmh5225; cheat / game:apex legends)
- [Apex_ESP_Old_Project](entities/apex-esp-old-project.md) — Legacy Apex Legends ESP: rendering / SDK generation / overlays (C/C++; gmh5225; cheat / game:apex legends)
- [Apex-Spoofer](entities/apex-spoofer.md) — Apex Legends HWID spoofer: kernel-level ban evasion (gmh5225; cheat / HWID; game:apex legends under EAC)
- [ApexSU](entities/apex-su.md) — Hardened KernelSU fork: Rust userspace, stealth IOCTL, GKI 2.0 boot patch (Android 12+; cheat / Android root)
- [ApexD3D_External](entities/apexd3d-external.md) — Apex Legends external: D3D hooking / driver / SDK generation (C/C++; cheat / game:apex legends)
- [ApexDmaCheatUpdated](entities/apex-dma-cheat-updated.md) — Apex Legends DMA external: PCILeech/MemProcFS FPGA reads; aimbot/recoil/ESP/camera math (C++; cheat / game:apex legends [DMA]; boowampp)
- [apex-dma-kvm-pub](entities/apex-dma-kvm-pub.md) — Apex Legends QEMU/KVM external: C++ gameplay + Rust memflow + C FFI; virtualization connectors; ESP/aim/prediction; Linux build scripts (MisterY52; cheat / game:apex legends [KVM/DMA])
- [ArcEngine](entities/arc-engine.md) — custom C++ game engine + editor (rendering, scene, physics, audio, input; C# script core; premake; sandbox; engine architecture prototyping; Game Engine / source)
- [ArcRaidersRadar-dma-Radar](entities/arc-raiders-radar-dma-radar.md) — Arc Raiders DMA radar/ESP: FPGA + MemProcFS; Unicorn Engine pointer-decryption emulation; player/actor iteration (C++; cheat / game:arc raiders [DMA]; a0yark)
- [ArchMod](entities/archmod.md) — native Linux Proton cheat panel (BlaMacfly; Rust/Tauri 2 + React; Steam library scan, trainer vault, protontricks Windows-trainer launch; `process_vm_readv` memory R/W, AOB/pointer chains/value freeze/code hooks, CE table parsing; community profiles; single-player focus)
- [Arrow Anti-Cheat](entities/arrow-anticheat.md) — Bukkit/Spigot Minecraft packet AC (Java; PacketEvents; combat/movement/misc checks; statistical analysis + movement prediction; Java + Bedrock; AGPLv3; StelGR; Anti Cheat / game:minecraft)
- [Are We Anti-Cheat Yet](entities/are-we-anti-cheat-yet.md) — crowd-sourced GNU/Linux/Proton/Wine AC compatibility tracker (JSON catalog; Next.js static site; readiness statuses; EAC/BattlEye listing; table/card/game pages + RSS; TypeScript/React/Mantine; Steam Deck reference)
- [ayypex](entities/ayypex.md) — Linux Apex Legends internal: Vulkan layer in-game overlay (MangoHud-style; cheat / game:apex legends [Linux])
- [ayaya-league-external](entities/ayaya-league-external.md) — Node.js LoL external script platform (AyayaLeague; custom user scripts; gmh5225; cheat / game:lol)
- [Auto-Android App Modding Tool](entities/auto-android-app-modding-tool.md) — Termux Python TUI for APK patch/rebuild/sign; Frida Gadget + native `.so` inject; patchelf/APKEditor auto-select; no root (UAMT; VarshaWanjari0)
- [auto-enum](entities/auto-enum.md) — IDA plugin: auto-identify/set enums for standard functions (Python/C; cheat / IDA Plugins)
- [Auto_aim](entities/auto-aim.md) — Fragmentaim C++ real-time AI aiming assistant (DXGI Desktop Duplication + YOLO ONNX Runtime/TensorRT + OpenCV; driver-level mouse simulation; CV game-automation research; DXGI + TensorRT + driver-level input)
- [AutoRE](entities/auto-re.md) — Python IDA Pro plugin: auto-rename dummy functions from API imports/jump targets; behavioral tagging (networking, injection, crypto, file I/O) with tag view (a1ext; cheat / IDA Plugins)
- [AutoRename](entities/autorename.md) — Python IDA plugin: auto rename symbol (crifan; cheat / IDA Plugins)
- [auto-simulated-universe](entities/auto-simulated-universe.md) — Honkai: Star Rail Simulated Universe automation bot (screen recognition + input; pathfinding, combat rotation, blessing selection; cheat / game:honkai star rail [Script]; gmh5225)
- [autohotkey-l](entities/autohotkey-l.md) — AutoHotkey Windows macro/hotkey scripting platform (Lexikos; C/C++ interpreter + script runtime; experimental DLL embed; task automation + game-adjacent macro experimentation / script-behavior analysis)
- [android-kernel-driver-template](entities/android-kernel-driver-template.md) — GKI AArch64 Android kernel driver template (product/OEM kernel; cheat / Android kernel driver development; gmh5225)
- [android-drivesignity](entities/android-drivesignity.md) — Android kernel ARMv8.3 driver signature verification bypass (unofficial/modified LKM load; cheat / Android kernel driver development; gmh5225)
- [android-kernel-cve-pocs](entities/android-kernel-cve-pocs.md) — Android kernel CVE PoC collection (C; ioctl/race/vendor-driver triggers; reproduce bugs, validate mitigations; ScottyBauer; cheat / List)
- [android-kernel-exploitation](entities/android-kernel-exploitation.md) — Android kernel exploitation guide/lab (ARM/AArch64 debug, UAF/heap/race, KASLR/PAN/PXN bypass, exploit chains; cheat / Android Kernel Exploitation)
- [android-kernel-exploitation-lab](entities/android-kernel-exploitation-lab.md) — CVE-2019-2215 Binder UAF reproduction lab (env setup, kernel source prep/patching, emulator, privesc analysis, GDB/syzkaller/AFL++; 0xbinder; cheat / CVE-2019-2215)
- [android-kernel-gki-common-5-10](entities/android-kernel-gki-common-5-10.md) — Custom Android GKI common 5.10 kernel (multi-vendor ABI; ZenX build; Redmi Note 11T Pro(+)/POCO X4 GT; ExWhyZed9; cheat / Android Kernel Source)
- [android-kernel-hacking-toolkit](entities/android-kernel-hacking-toolkit.md) — Android aarch64 LKM toolkit (filecopy / hideproc / propedit / syscall_hijack)
- [android-kernel-huawei-mt6761](entities/android-kernel-huawei-mt6761.md) — Huawei MT6761 (Helio P22) Android kernel source (cheat / Android Kernel Source)
- [android-kernel-huawei-hi6250-8-exp](entities/android-kernel-huawei-hi6250-8-exp.md) — Huawei hi6250 Android kernel + KernelSU (cheat / Android Kernel Source)
- [android-kernel-inline-hook-framework](entities/android-kernel-inline-hook-framework.md) — ChwnWang0 ARM64 Android kernel inline hook framework (instruction relocation B/BL/ADRP/LDR literal/CBZ/TBZ; 64-bit trampoline long jumps; automatic WP/memory-permission bypass; kernel RE / hook research)
- [kernel-su-huawei-nova2](entities/kernel-su-huawei-nova2.md) — Huawei Nova 2 ARM64 kernel + KernelSU (device tree + vendor BSP; cheat / KernelSU for huawei)
- [android-kernel-motorola-dubai](entities/android-kernel-motorola-dubai.md) — Motorola Dubai (Moto Edge 30) SM7325 Snapdragon 778G GKI Android kernel source (cheat / Android Kernel Source)
- [android-kernel-oneplus-sm8250](entities/android-kernel-oneplus-sm8250.md) — OnePlus 8/8T/8Pro/(9R?) SM8250 Android kernel source (cheat / Android Kernel Source)
- [android-kernel-oneplus-sm7250-wksu](entities/android-kernel-oneplus-sm7250-wksu.md) — OnePlus Nord SM7250 Android kernel + KernelSU (cheat / Android Kernel Source)
- [OPPO/OnePlus/Realme SM8750 kernel builder](entities/oppo-oplus-realme-sm8750.md) — OPPO/OnePlus/Realme SM8750 + MT6991 automated kernel build scripts (OKI/GKI, f2fs patches, KernelSU; Andrea-lyz; cheat / Android Kernel Source)

- [android-kernel-samsung-universal5433](entities/android-kernel-samsung-universal5433.md) — Samsung Exynos 5433 Android kernel (Note 4 / Alpha; cheat / Android Kernel Source)
- [android-kernel-samsung-sm7150](entities/android-kernel-samsung-sm7150.md) — Samsung SM7150 Android kernel source (cheat / Android Kernel Source)
- [A146B-KSU](entities/a146b-ksu.md) — Samsung Galaxy A14 5G (A146B / a14x) Android kernel + KernelSU (cheat / Android Kernel Source; gmh5225)
- [android-kernel-xiaomi-pipa](entities/android-kernel-xiaomi-pipa.md) — Xiaomi Pad 6 (pipa) Android kernel source (cheat / Android Kernel Source)
- [android-kernel-xiaomi-sweet](entities/android-kernel-xiaomi-sweet.md) — Redmi Note 10 Pro (sweet) Android kernel + KernelSU (Qualcomm; cheat / Android Kernel Source)
- [android-kernel-xiaomi-sm8475](entities/android-kernel-xiaomi-sm8475.md) — Redmi K60 / POCO F5 Pro (mondrian) SM8475 Snapdragon 8+ Gen 1 GKI Android kernel source (Pixel Experience Plus; cheat / Android Kernel Source)
- [kernel-xiaomi-sm8250](entities/kernel-xiaomi-sm8250.md) — POCO F3/F4 SM8250 custom Xiaomi Android kernel (AnyKernel3, defconfigs, GitLab CI, GKI ABI; Snapdragon 870/888; cheat / xiaomi kernel for POCO F3/F4)

- [Android-Emulator-Detection](entities/android-emulator-detection.md) — Android Anti-Emulator (gmh5225 Java/Kotlin scoring library; reveny Java/C++ fork; Detection:Virtual Environments)
- [android-classyshark](entities/android-classyshark.md) — Google ClassyShark APK/DEX/AAR/class bytecode viewer (hierarchies, dependencies, multidex triage)
- [android-emulator](entities/android-emulator.md) — Android emulator (emulation focus; mobile-platform / emulator research)
- [android-emulator-hypervisor-driver](entities/android-emulator-hypervisor-driver.md) — Google KVM-on-Windows hypervisor (Android Studio Emulator acceleration; Win8.1+ x64)
- [android-ebpf](entities/android-ebpf.md) — Android eBPF tracing examples (syscalls, network, process, perf; cheat / EBPF)
- [android-faker](entities/android-faker.md) — Xposed/LSPosed device-identifier spoofing (IMEI, Android ID, MAC, SIM; randomization + manual edit; privacy / fingerprint testing; Android1500; cheat / Android)
- [android-anti-cheat](entities/android-anti-cheat.md) — Open-source Android anti-cheat research (C/C++; anti-cheat, modding, hooking; codetronik; Anti Cheat / Open Source Anti Cheat System)
- [android-boot-image-editor](entities/android-boot-image-editor.md) — Gradle boot/recovery/vendor_boot unpack-repack (AVB, LZ4/XZ/GZIP, EROFS/sparse; boot v0–4; JDK 11+; cfig)
- [android-bootable-recovery-OFRP](entities/android-bootable-recovery-ofrp.md) — full OrangeFox Recovery (OFRP) custom recovery codebase (recovery UI, partition management, flashing; C/C++, build scripts, XML, Java; firmware dev / power users; cheat / OrangeFox Recovery)
- [android-bpf-sys](entities/android-bpf-sys.md) — Minimal Android eBPF syscall monitor (`raw_syscalls/sys_enter` tracepoint → BPF map; C++ userland via Android bpf libs; PShocker; cheat / EBPF)
- [android-hardware-attestation-demo](entities/android-hardware-attestation-demo.md) — Quarkslab attestation relay PoC (Frida Keystore hook + clean-device oracle; genuine TEE/StrongBox chain; no crypto forgery)
- [AndroidHiddenApiBypass](entities/android-hidden-api-bypass.md) — LSPosed pure-Java hidden non-SDK API bypass (HiddenApiBypass + LSPass; invoke restricted methods/constructors, read hidden fields, exemption prefixes; no native code; instrumentation / compatibility / security research)
- [Android Inline Hook ARM64](entities/android-inline-hook-arm64.md) — GToad native ARM64 inline hooking framework (C/C++/ARM64 asm; NDK build; pure inline trampolines + register-level handler examples; mobile RE / game security experimentation; Android ARMv8 inline hook framework)
- [Android-Library-Remap-Hide](entities/android-library-remap-hide.md) — Android lib remap-hide (two-lib; cheat / hide)
- [android-imgui-menu](entities/android-imgui-menu.md) — Rust ARM64 Android ImGui cdylib (EGL/Vulkan hooks; cheat / render-draw)
- [android-native-app-imgui](entities/android-native-app-imgui.md) — Android ImGui native app (Java/C++; cheat / render-draw)
- [Android Native Surface](entities/android-native-surface.md) — native C/C++ overlay surface library (ANativeWindow / SurfaceFlinger; Android 10–14 AOSP draw + screen record; no app-level permissions; gmh5225 + SsageParuders)
- [Android OpenGL ES Chams](entities/android-opengl-es-chams.md) — OpenGL ES chams sample (GLES draw/shader hooks; annotated headers; cheat / render-draw [Chams]; gmh5225)
- [Android Overlay Malware Example](entities/android-overlay-malware-example.md) — Android overlay credential-phishing PoC (foreground-app monitor; `WindowManager.addView` / `startActivity`; banking-trojan pattern; geeksonsecurity)
- [Android Overlay Protection](entities/android-overlay-protection.md) — Java overlay/tapjacking detection library (`TYPE_APPLICATION_OVERLAY`; `filterTouchesWhenObscured`; callback alerts; geeksonsecurity)
- [Android-Native-Root-Detector](entities/android-native-root-detector.md) — Kotlin Android root detector (Detection:Android root)
- [Android-Native-Import-Hide](entities/android-native-import-hide.md) — ELF import hide/retrieve lib (C++; AC Compile Time)
- [android-privilege-cve-2022-20452-leakvalue](entities/android-privilege-cve-2022-20452-leakvalue.md) — CVE-2022-20452 LazyValue deserialization LPE (unprivileged app → system; Java/Kotlin PoC; gmh5225)

- [android-mod-games-by-inject-zygote](entities/android-mod-games-by-inject-zygote.md) — Android game modding via zygote injection (C/C++; kernel/OpenGL/networking; cheat / injection:android; gmh5225)
- [android-mod-loader](entities/android-mod-loader.md) — native Android mod loader framework (C++ NDK; inject/manage mods; patching, memory write, function hook, interface-based mod APIs; ARM hooking, IL2CPP utilities, mod templates; cheat / Android Mod Loader)
- [Android-Mod-Menu](entities/android-mod-menu.md) — Java + native C/C++ floating mod-menu framework for IL2CPP/native Android (KittyMemory, MSHook, And64InlineHook; ARMv7/ARM64; cheat / Floating mod menu for Android; LGLTeam)
- [android-modmenu-semijni](entities/android-modmenu-semijni.md) — Android Java WindowManager + semi-JNI mod menu (native hooks; cheat / Menu for imgui)
- [Android-Mod-Menu-Kotlin](entities/android-mod-menu-kotlin.md) — Android Kotlin floating-view + C++/JNI IL2CPP mod menu (cheat / IL2CPP Menu)
- [Android-Mod-Menu-ImGui](entities/android-mod-menu-imgui.md) — Android native C++ ImGui mod-menu template (OpenGL ES + touch/JNI hooks; configurable layouts; README `[Imgui For Unity]`; gmh5225)
- [AndroidCheatTemplate](entities/android-cheat-template.md) — Android cheat template (Unity/OpenGL/hooking + kernel/memory-analysis forks; sanqiuu + gmh5225)
- [android-il2cpp-modspeed](entities/android-il2cpp-modspeed.md) — Android IL2CPP Unity Time speed hack (deltaTime/timeScale; C++)
- [android-modding](entities/android-modding.md) — curated Android game modding repo collection (IL2CPP YuanShen dump fork; cheat/guide RE)
- [android-proxy-mcp](entities/android-proxy-mcp.md) — Android HTTP/HTTPS capture MCP (mitmdump + SQLite + NL query)
- [android-rom-list](entities/android-rom-list.md) — curated Android custom ROM reference list (cheat / Android ROM)
- [android-security-wizard](entities/android-security-wizard.md) — integrated Android security research corpus (savagedamage; SKILL.md + 20 companions; APK/DEX/native RE, Frida/Objection/Shizuku/Ghidra, DexGuard/Bangcle protector bypass, ARM64 kernel exploit methodology, malware/C2 triage, Android 14–18 deltas; cheat / Guide)
- [AndroidSuperInject](entities/android-super-inject.md) — Android native `.so` injection (ptrace or Zygote hook; SELinux-protected system services; optional no-root; cheat / injection:android; cs1ime)
- [Android Terminal Emulator](entities/android-terminal-emulator.md) — VT-100 terminal emulator for built-in Android shell (jackpal; Cheat Terminal Emulator)
- [android-unpacker](entities/android-unpacker.md) — Android packed-sample unpacker (malware RE; Anti Cheat → Sample Unpacker)
- [Android-DLL-Injector](entities/android-dll-injector.md) — Android native `.so` injector (Android Studio build; arch-matched payload; cheat / injection:android; gmh5225)
- [Android-LD-Preload-Injector](entities/android-ld-preload-injector.md) — Android LD_PRELOAD inject (dead; cheat / injection:android)
- [Android-Mem-Edit](entities/android-mem-edit.md) — C++ Android process memory editor (cheat / Android Memory Explorer)
- [Android-MemoryTool](entities/android-memory-tool.md) — single-header C/C++ `/proc/pid/mem` read/write library (minimal API; no ptrace attach; cheat / RPM; gmh5225)
- [Android-Ptrace-Injector](entities/android-ptrace-injector.md) — Android ptrace injector (C/C++; cheat / injection:android)
- [Android-Virtual-Inject](entities/android-virtual-inject.md) — no-root Virtual Space inject (not for AC games; cheat / injection:android)
- [Android-VirtualCam-Manager](entities/android-virtualcam-manager.md) — Magisk/Zygisk virtual camera (ArtHook Camera1 NV21/surface injection; no LSPosed; camera spoofing / liveness AC research)
- [VirtualApp](entities/virtual-app.md) — Android app virtualization framework (cloned apps in isolated container; Xposed + SandHook; virtual package/process/component management; mobile RE / multi-instance sandbox; ServenScorpion)
- [VirtualMachine](entities/virtualmachine.md) — VM Studio full guest Android VM on ARM64 host (native C isolation + Kotlin UI; chrooted rootfs, syscall translation, Vulkan/OpenGL ES; Magisk root toggle, Xposed, Google Play, camera/sensor/VPN passthrough; wumingzhinu; Cheat Android Emulator)
- [android-touch](entities/android-touch.md) — C/C++ Android touch-input driver (triggerbot & aimbot; driver development; gmh5225)
- [android_virtualTouch](entities/android-virtual-touch.md) — ARM64 NDK uinput virtual touch (tap/swipe/multi-touch; rooted; game automation)
- [android-vuln](entities/android-vuln.md) — Android Kernel CVE reference list (cheat / Android Kernel CVE)
- [android-vuln-poc-exp](entities/android-vuln-poc-exp.md) — Android kernel CVE PoC/exploit reference list (cheat / Android Kernel CVE)
- [android-wuwa](entities/android-wuwa.md) — Android ARM64 LKM rootkit (stealthy process memory; CFI/kprobe bypass, PTE injection, phys R/W, IOCTL/socket IPC; cheat / Android aarch64 rootkit)
- [android-vulkan-tutorials](entities/android-vulkan-tutorials.md) — Google Android Vulkan tutorial samples (Vulkan / guide; NDK/mobile fundamentals)
- [Anti-AntiDebuggerDriver](entities/anti-anti-debugger-driver.md) — AyinSama; C++ WDK tutorial kernel driver; hooks native process/thread/handle/system-information syscall paths; hook utilities + disassembly helpers neutralize common anti-debug probes; RE education / protected software analysis (README [ETW Hook])
- [AntiCheat-chrysalis](entities/anti-cheat-chrysalis.md) — C/C++ reference AC / chrysalis guide (kernel driver comm, OpenGL; process integrity, module scan, debugger/overlay detection; gmh5225; Anti Cheat / guide)
- [AntiCheat](entities/anticheat.md) — C/C++ reference AC implementation (process integrity, module scan, memory patterns, debugger/overlay detection, driver comm; gmh5225; alias of anti-cheat-chrysalis)
- [anticheat-android-cheap-engine](entities/anticheat-android-cheap-engine.md) — Sample Android anti-cheat implementation (C/C++; open-source AC system; gmh5225)
- [anticheat-poc](entities/anticheat-poc.md) — Windows AC PoC (debugger / integrity / signature scan / process enum; Instrumentation Callback)
- [AntiCheat QA](entities/anticheat-qa.md) — Fabric 1.21 MC AC QA client mod (observe/visualize/log/simulate detections; reach/movement HUD; Y-Level Probe; Stress Testing; u8012146108-bit; Anti Cheat / game:minecraft)
- [AntiCheat Scanner](entities/anticheat-scanner.md) — read-only Windows forensic AC inventory scanner (Python 3.10+; drivers/processes/services/registry/tasks/FS + BAM/Prefetch/MUICache; O(1) sig index + rapidfuzz + PE/Authenticode; ACE/EAC/BattlEye/EA AC/HoYoProtect; PickAngE)
- [AntiCheatToggle](entities/anticheattoggle.md) — WinForms utility to stop/disable Tencent ACE, Perfect World Arena, and Reason CyberSecurity kernel drivers blocking VirtualBox VM spawn (VERR_INVALID_NAME -104); CLI + one-click restore (lsxll666; Cheat / QEMU/KVM/PVE/VBOX)
- [AntiCheatSystem](entities/anticheatsystem.md) — CS2 MetaMod:Source 2 Linux server-side AC (pavelinbs-afk; C++17; aim/movement/wallhack/stats/integrity analyzers; JSON suspicion scoring; AdminPlugin ban integration; Docker HL2SDK-CS2; Open Source Anti Cheat System)
- [anti-cheat-research-index](entities/anti-cheat-research-index.md) — structured AC/kernel/VT-x/graphics/RE research index (defensive engineering map; guide lane)
- [anti-cheat](entities/anti-cheat.md) — C/C++ open-source anti-cheat system (jnastarot; Anti Cheat → Open Source Anti Cheat System)
- [AntiCheat-Testing-Framework](entities/anti-cheat-testing-framework.md) — modular Windows AC detection test harness (mem R/W / inject / overlay / input / KM; Testing Framework)
- [Anti-Cheat-TestBench (ekknod)](entities/anti-cheat-testbench.md) — AC testBench harness (C++/C; AC research + driver development + hooking; Open Source Anti Cheat System; README [TestBench])
- [UAC (c4kef)](entities/uac.md) — anti-cheat development platform (Visual Studio kernel driver; common cheat-technique detection; C++ kernel detection test framework; Cheat developer platform)
- [UAGC (UltimateAntiGamingChair)](entities/uagc.md) — PaperMC **1.21** context-aware anti-cheat plugin (Java 21 Gradle; modular movement/combat/interaction/protocol checks; confidence/evidence model; exemptions, staff bypass visibility, punishments, freeze, integration API; no1qq; Anti Cheat / game:minecraft)
- [UltimateMeteorAntiCheat](entities/ultimate-meteor-anticheat.md) — Paper **1.21.11** Minecraft survival AC + anti-dupe plugin (Java; combat reach/autoclicker/aim-modulo; movement fly/speed/nofall/jesus; world fastplace/scaffold; inventory transaction auditing, nested-container restrictions, packet desync mitigation; violation escalation, whitelisting, Discord webhooks; EpicLizard05013; Anti Cheat / game:minecraft)
- [Anti-Cheat-Amateur](entities/anti-cheat-amateur.md) — MemRE memory editor + GothGirlFeet kdmapper KMDF driver (NUL IOCTL; DBVM shims; UE scan; Tencent ACE research)
- [anti-cheat-emulator](entities/anti-cheat-emulator.md) — Windows kernel AC simulation driver (C++; system-thread/stack/BigPool/PiDDB/dispatch-table/physical-memory-handle scans + hypervisor/mapping checks; researcher telemetry-pipeline testing; ApexLegendsUC)
- [anti-crack-system](entities/anti-crack-system.md) — Windows C++ anti-tamper / anti-crack framework prototype (anti-debug/anti-dump/anti-attach, integrity checks, process-kill, self-remapping code, string obfuscation; ReFo0)
- [anticrack-dotnet](entities/anticrack-dotnet.md) — .NET protection toolkit (AdvDebug; C#; anti-debug/anti-VM/anti-injection/hook detection; PEB/thread flags, sandbox heuristics, syscall probes, integrity hardening; anti-anti-debug hook detection; software hardening and AC component building; [CSharp])
- [Anti-Debugger-Protector-Loader](entities/anti-debugger-protector-loader.md) — Windows C++ anti-debug protector/loader (debugger process/window/driver scans; optional termination; VMProtect SDK; YouNeverKnow00)
- [Anti-Debug](entities/anti-debug.md) — Windows C++ PoC; ResumeThread suspend-count debugger detection (minimal single-signal anti-debug sample; Metick; Anti Debugging)
- [AntiDebugging](entities/anti-debugging.md) — C++ anti-debugging techniques (Anti Cheat → Anti Debugging)
- [AntiDebugandMemoryDump](entities/antidebugandmemorydump.md) — Android anti-debug + memory analysis / emulation / debugging (Java + C/C++; gmh5225)
- [AntiDebug-AntiVM](entities/antidebug-antivm.md) — anti-debug + VirtualBox anti-VM technique examples (reference snippets; Vbox; gmh5225)
- [antidbg](entities/antidbg.md) — Windows C/C++ fully syscalled userland anti-debug library + CLI (API/timing/process-env/HWBP/exception checks + direct-syscall evasion; stealth anti-RE; NotRequiem)
- [AntiDBG (HackOvert)](entities/antidbg-hackovert.md) — Windows curated anti-debug technique collection (C/C++ + asm; memory/CPU/timing/exception checks; gauntlet test app; RE education + software protection research; HackOvert)
- [AntiDbg-AmogusPlugin](entities/antidbg-amogus-plugin.md) — Windows C/C++ anti-debug plugin (hooking / plugin development / debugging integration; Anti Debugging; gmh5225)
- [AntiKernelDebug-POC](entities/anti-kernel-debug-poc.md) — C driver PoC; detect/prevent kernel-mode debugging (debug port / KdDebuggerEnabled / KUSER_SHARED_DATA / interrupt checks; Windows Kernel; gmh5225)
- [Anti miHoYo JCC Obfuscate](entities/anti-mihoyo-jcc-obfuscate.md) — x64dbg plugin: runtime JCC/jump-based control-flow deobfuscation for protected Unity/miHoYo code paths (monitors decryption ranges, dynamic jump tracking, in-session instruction patches; build-offset-specific; unmaintained; DNLINYJ)
- [Baka (antidbg-Baka)](entities/antidbg-baka.md) — Windows C/C++ anti-debug library (PEB/NtQueryInformationProcess/HWBP/timing/exception/parent; ScyllaHide/HyperHide/TitanHide detection; Anti Debugging)
- [AntiFrida](entities/antifrida.md) — Java/C++ Detection:Frida sample (Anti Cheat → Detection:Frida)
- [AntiFrida Bypass](entities/anti-frida-bypass.md) — Frida JS scripts to bypass common anti-Frida checks (libc/procfs hooks; multiple variants; apkunpacker)
- [AntiGuard](entities/antiguard.md) — Paper/Purpur Minecraft AC plugin (Java; fly/speed/reach/kill aura/auto-click/no-swing/no-fall/fast-break; SQLite/LuckPerms storage; web dashboard + REST API; TheMille-Dev; Anti Cheat / game:minecraft)
- [AntiXrayViewer](entities/antixrayviewer.md) — Paper Minecraft X-ray investigation plugin (Java 21 Gradle; ore-breaking pattern alerts; ~3-minute session capture + first-person replay; admin review commands; RiseShieldDev; Anti Cheat / game:minecraft)
- [Anti-Frida](entities/anti-frida.md) — Android Frida detection write-ups (libc prologue hook checks; JS examples; apkunpacker)
- [anti-emulator](entities/anti-emulator.md) — Android emulator detection (QEMU props / fingerprints / sensors; Java)
- [anti-ollvm](entities/anti-ollvm.md) — Arm64 simulated execution CFF deflatten (IIIImmmyyy; C# fake runtime; dispatcher pattern ID + if-else CFG rebuild; Python IDA CFG extract + Keystone codegen; Fix OLLVM)
- [AntiHook](entities/antihook.md) — Windows kernel hook enum + remove (driver / graphics; cheat / RE tools)
- [Anti-xorstr](entities/anti-xorstr.md) — Python IDA anti-Xorstr plugin (cheat / IDA Plugins)
- [Anti-Forensics](entities/anti-forensics.md) — curated anti-forensic technique knowledge base (data hiding, log tampering, registry/FS artifacts, virtualization evasion; DFIR tradecraft study)
- [ANTfs](entities/antfs.md) — NTFS anti-forensics (user-mode MFT recovery + WDK kernel secure wipe; Delete File)

- [anticuckoo](entities/anticuckoo.md) — Cuckoo sandbox / VE detection demos (Detection:Virtual Environments)
- [anti-sandbox](entities/anti-sandbox.md) — Windows C++ PoC; Any.Run-style sandbox detection via host artifact checks (folders, processes, user profile, services/drivers; layered multi-indicator scoring; SaadAhla)
- [anubis](entities/anubis.md) — Linux CS:GO internal cheat (danielkrupinski; C++; process injection; ESP/aimbot via Source SDK hooks on client rendering and game events; cheat / game:csgo [Linux])
- [anything-about-game](entities/anything-about-game.md) — curated game-development resources (engine/rendering/physics/networking/AI; Game Development resources)
- [ampa-sys-exp](entities/ampa-sys-exp.md) — ampa.sys BYOVD exploit (IOCTL → kernel R/W or code exec; unsigned load / LPE / AC bypass; gmh5225)
- [apc-research](entities/apc-research.md) — APC internals research samples + lib (cheat / windows kernel explorer)
- [Api Breakpoint](entities/api-breakpoint.md) — x64dbg GUI plugin: visual API breakpoint configure/manage workflow (C++; x86/x64; Windows API tracing; Kwansy98; Cheat x64dbg Plugins / Api Breakpoint)
- [AppInitHook](entities/appinithook.md) — AppInit_DLLs registry startup inject + MinHook hooking (INI dispatch; CMake/cmkr; cheat / hook)
- [Apprentice](entities/apprentice.md) — open-source Windows game trainer and memory editor (Electron + React/TS + C++ N-API; offline attach; value cheats, code patches, Lua, CE `.CT` import/export; Mono JIT introspection; bundled read-only MCP for AI agents; Valheim/Elden Ring profiles; digital-dev)
- [apic](entities/apic.md) — local APIC R/W + xAPIC/x2APIC IPI (KM; timing/detection research)
- [APICallProxy](entities/apicallproxy.md) — Windows API call obfuscation via kernel-driver IOCTL proxy (C/C++; file/process/memory/registry/network; APC injection + driver-load samples; API monitoring evasion research; MahmoudZohdy)
- [APKiD](entities/apkid.md) — Android APK/DEX packer·obfuscator·anti-analysis ID (YARA; PEiD for Android)
- [apk.sh](entities/apk-sh.md) — Bash APK RE workflow (pull/decode/rebuild/patch, Frida gadget, split merge, apksigner; no root)
- [apksigcopier](entities/apksigcopier.md) — copy/extract/patch Android APK v1/v2/v3 signatures (Python; Signing Block)
- [apksigner](entities/apksigner.md) — standalone Android APK signing tool (re-sign after mod/repack)
- [apktool](entities/apktool.md) — Java APK decode/rebuild (smali, resources, manifest; `[Apk]`)
- [apktool-mcp-server](entities/apktool-mcp-server.md) — MCP server wrapping apktool (Android RE suite)
- [apktoolgui](entities/apktoolgui.md) — Windows GUI for apktool, signapk, zipalign, baksmali (C#/.NET; drag-and-drop APK workflows; `[Apk]`)
- [apklab](entities/apklab.md) — VS Code Android RE workbench (Apktool, JADX, signing, HTTPS patch; decode/rebuild/sign/install; TypeScript; cross-platform; APKLab; `[Apk]`)
- [app-manager](entities/app-manager.md) — Full-featured Android package manager and viewer (component/permission/app-op control, APK analysis/sign/edit, backup, logcat, tracker scan; root/ADB; MuntashirAkon; Cheat Android File Explorer)
- [Apatchy](entities/apatchy.md) — Apache HTTPD fuzzing framework (Python; custom I/O filters replace socket layer; raw-byte injection into real request pipeline; CVE reproducers + Apache internals docs; server-side HTTP parsing attack-surface research; 0xbigshaq)
- [ApplistDetector](entities/applist-detector.md) — Android detection library + demo (Kotlin + native C++; package/FS/syscall/Xposed/work-profile probes; Magisk/root env; Dr-TSNG; mobile anti-cheat / root-detection research)
- [ApplyCalleeTypeEx](entities/apply-callee-type-ex.md) — IDA Pro plugin: apply function prototype to indirect CALL sites (Dump-GUY; Python; enhanced callee type propagation; IDA 8.x–9.3+; cheat / IDA Plugins)
- [apppealing-new](entities/apppealing-new.md) — Android LSPosed Xposed module; disables Inka AppSealing; root/cheat-detection bypass + decrypted-DEX dump; Java hooks + native Dobby; Magisk workflow (NPC2000; mobile AC / packer RE)
- [appsealing-reversal](entities/appsealing-reversal.md) — long-form AppSealing reversal report (ARandomPerson7; Java/native components, detection logic, telemetry, dex-loading, anti-debug/process-kill, hook-based bypass validation; mobile app/game shielding-quality research)
- [Apwil](entities/apwil.md) — Rust Windows game-hacking library (hooks / memory / PE / overlay; internal & external)
- [Ares Framework](entities/ares-framework.md) — C++/C# modding, hooking, and debugging framework (Anti Cheat → Binary Packer; craids)
- [Ark](entities/ark.md) — distributed-GPU deep learning framework (game security / cheat ML training; gmh5225)
- [arkdecompiler](entities/arkdecompiler.md) — HarmonyOS NEXT ArkCompiler `.abc` decompiler (ArkTS/ArkJS → JS/TS; mobile RE)
- [Ark-tools](entities/ark-tools.md) — Windows kernel research tool collection (C/C++ Visual Studio; debug-register/IDT/GDT hooks, kernel APC injection, shadow SSDT inline hooking, registry driver ops, WOW64 cross-arch injection; rootkit / defensive detection study; ChengChengCC; Some kernel research)
- [Arknights](entities/arknights.md) — Unity-style Arknights gameplay reimplementation (C#; character/monster/dungeon/UI/event/state managers; resource/audio/shop + Lua hooks; no bundled assets; tower-defense RPG architecture study; Game Engine / source; Saukiya)
- [Ariadne](entities/ariadne.md) — Binary Ninja graph analysis (call graph + block coverage; Cheat Binary Ninja Plugins)
- [arma3-external-variable-manager](entities/arma3-external-variable-manager.md) — Arma 3 external mission-variable editor (Skengdo; C++; dump/read/edit active mission vars + economy fields; BE-disabled servers; cheat / game:arma3 [External])
- [arma3beclient](entities/arma3beclient.md) — Arma 3 BattlEye Tool (C# / PowerShell; cheat / game:arma3)
- [armageddon](entities/armageddon.md) — ARM mobile cache side-channel toolkit (IAIK; C + Python; Prime+Probe, Flush+Reload, Evict+Reload, Flush+Flush, cache template attacks; mobile privacy, crypto side channels, TrustZone observation; README Cache attacks on ARM)
- [arm64-silent-syscall-hook](entities/arm64-silent-syscall-hook.md) — 3intermute ARM64 Linux silent syscall hook PoC (C; SVC/exception-handler path patching; manual function splicing + trampoline patches bypassing direct sys_call_table edits; stealth rootkit + hook-detection research; README ARM64 Patching exception handler)
- [armcall](entities/armcall.md) — header-only C++20 ARM64 Windows direct syscall library (noahware; ntdll export parse + SVC immediate extraction; dynamic executable stubs bypass hooked import thunks; AC_SYSCALL macros; WoA game security / AC evasion / low-level RE)
- [ArmShellCode](entities/armshellcode.md) — ARM64 Android shellcode framework (IIIImmmyyy; position-independent arm64-v8a payloads; Dobby symbol resolution; ELF/proc-maps parsing, syscall wrappers, modular loader + linker scripts; exploit / runtime code injection research; cheat / Android arm arm64-v8a ShellCode Generate)
- [ASCTool](entities/asctool.md) — Kotlin APK Signature Crack Tool (Some Tricks / Android; [Apk])
- [aShell You](entities/ashellyou.md) — Material You on-device Android ADB/root/shell utility (Kotlin + Compose; Shizuku/root, OTG/wireless debugging, push/pull explorer, logcat, bookmarks; DP-Hridayan; Cheat Android Terminal)
- [Asphyxia CS2](entities/asphyxia-cs2.md) — open-source internal CS2 cheat (C++; ESP / aimbot / triggerbot; Source 2 SDK; cheat / game:cs2)
- [Asdf Overlay](entities/asdf-overlay.md) — Rust cross-API overlay library (D3D9/11/12, OpenGL, Vulkan; Detours; named-pipe IPC; Rust/Node.js clients)
- [AssaultCube](entities/assaultcube.md) — open-source CUBE-engine multiplayer FPS (C/C++; maps, bots, demos; engine study / modding / AC experimentation; assaultcube/AC)
- [Assault Cube Cheat](entities/assault-cube-cheat.md) — C++ AssaultCube cheat (modding / memory analysis; cheat / game:assault cube; gmh5225)
- [AssaultCube Cheat (201580ag)](entities/assaultcube-cheat.md) — multi-version AssaultCube cheat practice (internal/external; aimbot, ESP, overlays, memory utilities, offset handling; C/C++/C#; ImGui, OpenGL hooks; 201580ag)
- [artemis](entities/artemis.md) — R6 Siege Shadow Legacy internal mod framework (ArtemisDevGroup; C++; injection/hooking + ImGui/MinHook; event/keybind/draw/game managers; modular user extensions; cheat / game:r6 [Internal])
- [AssetRipper](entities/asset-ripper.md) — .NET Unity serialized-file/AssetBundle extractor (AssetRipper; parsers/converters → native Unity-style outputs; broad Unity version coverage; recovery/reconstruction; modding / Unity RE / content analysis; Extracting assets)
- [AssetStudio](entities/assetstudio.md) — canonical C# Unity asset/AssetBundle extractor (Perfare; explore/extract/export; wide Unity version + asset types; bundle decompression, scene hierarchy, OBJ/JSON/FBX export; modding / bundle RE; Extracting assets)
- [AssetStudio (Razviar)](entities/assetstudio-razviar.md) — C# multi-threaded Unity asset extractor fork (Unity 2.x–6; GUI/CLI; parallel bundle load/export; modding / bundle RE; Extracting assets)
- [Astra](entities/astra.md) — external CS:GO cheat (C/C++; rendering / modding / overlays; cheat / game:csgo [External]; gmh5225)
- [AstroX AntiCheat](entities/astrox-anticheat.md) — GeyserMC extension Bedrock AC (Java Maven; raw RakNet/UDP Netty intercept before Java translation; sub-ms off-tick heuristics—reach/hitbox backtracking/flight/autoclicker/device spoof/crash-packet firewall; input-mode reach + leaky-bucket FP reduction; Discord alerts; Anti Cheat / game:minecraft)
- [atmosphere](entities/atmosphere.md) — Nintendo Switch custom firmware platform (Atmosphere-NX; C/C++; Fusee/Exosphere/Stratosphere; boot/runtime patches, TrustZone, sysmodules, emuMMC; console security research + homebrew; README [Customized firmware])
- [Aurora](entities/aurora.md) — internal CS2 cheat (ESP / aimbot / visual mods; Source 2 schema + entity enumeration; cheat / game:cs2 [Internal]; gmh5225)
- [AutoAttach](entities/auto-attach.md) — x64dbg plugin: auto-attach to named process with optional delay (`AutoAttachProcess` / `AutoAttachSleep` / `AutoAttachStatus`; Cheat x64dbg Plugins)
- [AutoOffsets](entities/auto-offsets.md) — Fortnite offset fetcher via remote API (C++; WinINet; `[Offset]`)
- [AutoOpenCAK](entities/auto-open-cak.md) — CAK compressed-archive open/extract automation (decompression + file organization; modding/asset RE; gmh5225; Bypass tool)
- [Automation Examples](entities/automation-examples.md) — UE4 editor automation sample (Blutility + EditorScriptingUtilities; C++ Editor Utility classes + Blueprint dashboard widgets; asset rename/duplicate, unused-content cleanup; RomanceTheHeart; Game Engine / Unreal editor tooling)
- [AutoResolv](entities/autoresolv.md) — IDA plugin: ELF external library call resolution (IDAPython; PyQt5 + pyelftools; wrapper→implementation mapping; call-site annotation; signature import; multi-arch; cheat / IDA Plugins; airbus-seclab)
- [AutoGunfireReborn](entities/autogunfire-reborn.md) — Gunfire Reborn Unity IL2CPP runtime module injection (C#; modding / IL2CPP analysis; cheat / game:gunfire reborn; gmh5225)
- [Auto-generate Frida Bypass Scripts](entities/auto-generate-frida-bypass-scripts-for-ssl-pinning-root-detection-on-android-ios.md) — static-analysis Frida script generator for Android/iOS SSL pinning and root/jailbreak bypass
- [AutomataMP](entities/automatamp.md) — NieR Automata multiplayer / RE tooling (praydog; Game Develop / source)
- [asus-bsitf-0-day-poc](entities/asus-bsitf-0-day-poc.md) — ASUS `bsitf.sys` BYOVD PoC (CVE-2026-13585; IOCTL maps contiguous kernel pool to usermode + physaddr leak; gmh5225)
- [AsIO-Exploit](entities/asio-exploit.md) — ASUS `AsIO3.sys` LPE PoC (MSR IOCTLs + `ASIO_ADDPID` parent-PID trust bypass; native-syscall shellcode; gmh5225)
- [asset-tutorial-plugin](entities/asset-tutorial-plugin.md) — UE C++ plugin tutorial: custom NormalDistribution asset type + dedicated editor; runtime/editor modules; reflection-enabled UObject classes (JanKXSKI; Game Engine / Unreal plugin development)
- [AsusDrv](entities/asusdrv.md) — ASUS `AsusBiosIoDrv64.sys` physmem IOCTL wrapper (hardware-monitoring BYOVD; kernel exploitation research; gmh5225)
- [ATDCM64a-LPE](entities/atdcm64a-lpe.md) — AMD `atdcm64a.sys` arbitrary-pointer-dereference LPE PoC (C++ VS + deploy scripts; lab kernel exploit template; MrAle98; [atdcm64a.sys])
- [ATPMiniDump](entities/atpminidump.md) — C/C++ aTPMiniDump callback (Ring3 minidump instrumentation; memory analysis; AC / Windows callback lane; b4rtik)
- [autismware](entities/autismware.md) — CS:GO internal cheat (C++; interface capture + VMT hooks; ESP/aimbot/backtrack/skin changer + ImGui menu; gmh5225 [HvH])
- [augur](entities/augur.md) — headless IDA Pro string→pseudocode extractor (Rust/idalib; Hex-Rays; per-string decompiled xref dirs; static triage pipelines; 0xdea; cheat / IDA Plugins)
- [augur-riot](entities/augur-riot.md) — Vanguard RITO streamed-module → PE converter (hashed imports, section rebuild; kernel RE; gmh5225)
- [aurum-re](entities/aurum-re.md) — Aurum RE Ricochet anti-cheat research (RE + driver development; explore anticheat:ricochet; gmh5225)
- [AwaitFuscator](entities/awaitfuscator.md) — .NET bin2bin obfuscator; rewrites method bodies into long await chains via custom awaiters (GetAwaiter/GetResult); decompiler-resistant control-flow PoC CLI (Washi1337; Obfuscation Engine / `.NET`)
- [AV-EDR-Killer](entities/av-edr-killer.md) — BYOVD via wsftprm.sys (IOCTL 0x22201C; PID kill)
- [AVA-Hack](entities/ava-hack.md) — AVA (Alliance of Valiant Arms) C/C++ cheat (DirectX/OpenGL/Vulkan; cheat / game:ava; boylin0)
- [AvAAntiCheat](entities/avaanticheat.md) — Minecraft Bukkit/Spigot AC (fly/combat/autoclick/packet; Geyser leniency)
- [AvastHV](entities/avasthv.md) — Avast signed hypervisor driver abuse for kernel-level ops; hypervisor-context code exec; DSE/AC bypass via trusted AV driver (gmh5225; README `[Avast]`)
- [Avanguard](entities/avanguard.md) — Win32 anti-intrusion library (GravitLauncher; C/C++; anti-debug, anti-injection, memory/call-stack analysis, integrity checks, callback filtering, module checks; game-client hardening; Anti Debugging)
- [avdebugger](entities/avdebugger.md) — AV signature recovery (Cheat → Anti Signature Scanning)
- [avhook](entities/avhook.md) — CS:GO training software (Windows; joke features; gmh5225; cheat / game:csgo)
- [awesome-anti-virtualization](entities/awesome-anti-virtualization.md) — curated anti-virtualization resources (Detection:Virtual Environments)
- [awesome-android-root](entities/awesome-android-root.md) — curated Android root resources (Magisk/KernelSU/APatch; Play Integrity Android 14/15 notes; cheat / Android root)
- [awesome-android-security](entities/awesome-android-security.md) — curated Android security learning index (theory/tools/write-ups/PoCs/CVEs; kernel exploitation, app testing, Frida; Samsung research references)
- [awesome-android-aosp](entities/awesome-android-aosp.md) — curated AOSP/custom-ROM platform index (build systems, kernels, device trees, Treble, SELinux, debugging, vendor workflows; low-level platform engineering; Akipe; cheat / Guide)
- [awesome-educational-games](entities/awesome-educational-games.md) — curated educational games (editors / languages / programming; Game Develop Guide)
- [awesome-executable-packing](entities/awesome-executable-packing.md) — curated executable packing/unpacking resources (PE/ELF/Mach-O; packers, protectors, unpackers, analysis tools; Executable File Packing)
- [awesome-gamedev](entities/awesome-gamedev.md) — curated free/open gamedev resources (tools, engines, libraries, learning, assets; openly licensed focus; Game Develop / guide)
- [awesome-gamedev-agent-skills](entities/awesome-gamedev-agent-skills.md) — ~66 version-pinned game-dev Agent Skills + engine router (Godot/Unity/Unreal/Phaser/Bevy/etc.; Game Develop / AI Agents)
- [Everything Game Dev Code](entities/everything-game-dev-code.md) — multi-engine AI agent scaffold; rules/agents/skills/phase contexts for Unity/Unreal/Godot/HTML; Claude/Codex/Cursor/OpenCode/Kiro harnesses; security/performance/console review roles (MRCalderon3D; Game Develop / AI Agents)
- [awesome-game-analysis](entities/awesome-game-analysis.md) — curated game technology analysis resources (by game/engine/developer/year/topic; engine internals + production techniques; Game Develop / guide)
- [awesome-game-engine-dev](entities/awesome-game-engine-dev.md) — curated game-engine-dev resources (DirectX/OpenGL; Game Engine / guide)
- [awesome-game-file-format-reversing](entities/awesome-game-file-format-reversing.md) — curated game file-format/asset reversing resources (models/textures/archives; Unity/Unreal/Source/CryEngine; cheat / RE Tools)
- [awesome-ghidra](entities/awesome-ghidra.md) — curated Ghidra ecosystem index (scripts, plugins, extensions, automation, malware analysis, diffing, workflow; Java and Python; headless and interactive; AllsafeCyberSecurity; cheat / List)
- [awesome-ida-x64-olly-plugin](entities/awesome-ida-x64-olly-plugin.md) — curated IDA/Ghidra/x64dbg/OllyDbg/GDB plugin index (patching, diffing, deobfuscation, emulation, YARA, anti-anti-debug; fr0gger)
- [awesome-injection](entities/awesome-injection.md) — curated injection resources (Cheat / injection:windows)
- [awesome-mcp-servers](entities/awesome-mcp-servers.md) — large curated MCP server index (AI, security, gaming, infrastructure; category Markdown navigation; Awesome MCP)
- [awesome-obfuscations](entities/awesome-obfuscations.md) — curated binary, compile-time, and LLVM/GCC obfuscation tools (C/C++/Go/Rust/x86 assembly + VM protectors; anti-RE / native binary protection; killvxk)
- [awesome-open-source-games](entities/awesome-open-source-games.md) — curated open-source games by platform/genre (Godot/Unity/custom; Collection of Games / Game Develop Guide)
- [awesome-unity](entities/awesome-unity.md) — curated Unity assets, libraries, tutorials, and dev resources (AI, networking, UI, tweening, editor tooling, project examples; Game Engine / Unity)
- [awesome-windbg-extensions](entities/awesome-windbg-extensions.md) — curated WinDbg extension index (kernel analysis, IR, rootkit hunting, memory inspection, debugger automation; WinDbg)
- [awesome-wow-rust](entities/awesome-wow-rust.md) — curated Rust WoW private-server resources (server implementations / protocol + file-format libs / renderers; cheat / game:wow)
- [axhunter](entities/axhunter.md) — Rust XIGNCODE3 xhunter1/xhunter2 driver PoCs (CVE-2026-15430; WriteFile frames; PPL-bypass handles, process R/W, LSA credential extraction; BlackSnufkin)
- [blackhat2012](entities/blackhat2012.md) — BH2012 anti-debug / anti-disasm / obfuscation / Anti-VM PoCs (C/C++ + FASM)
- [BlackObfuscator](entities/black-obfuscator.md) — DEX control-flow obfuscator (CodingGay; Java; modified dex2jar pipeline; configurable depth, package targeting, rule-based processing; GUI + Android Studio plugin; mobile app protection / anti-RE; `[Dex]`)
- [Blackbone](entities/blackbone.md) — Windows memory hacking library (DarthTon; x86/x64; alloc/R/W/protect, module enum, manual PE map, WOW64 thread control; user+kernel APIs; RE / game-security / AC tooling)
- [BlackBox](entities/blackbox.md) — deprecated FBlackBox Android virtualization project (README-only removal notice; historical context; cheat / Android)
- [blacksun-framework](entities/blacksun-framework.md) — modular C++ game cheat framework (user-mode/kernel/DMA access backends; pattern scan, hooking, overlays, comm layers; cs1ime)
- [blazedumper](entities/blazedumper.md) — maintained CS:GO offset database (Akandesh; JSON + C++/C# defs; signature patterns + updater pipeline; cheat / game:csgo [Offset])
- [BlackSignatureDriver](entities/black-signature-driver.md) — black-signature kernel driver dev + networking (gmh5225; Anti Cheat → Black Signature)
- [Blarion AntiCheat](entities/blarion-anticheat.md) — Bedrock ScriptAPI behavior-pack AC (StarBloomMinecraft; JavaScript; 40+ combat/movement/inventory/packet modules; configurable thresholds; admin scan + `/flag` API; vanilla/BDS/LiteLoader; Anti Cheat / game:minecraft)
- [BlindEye](entities/blindeye.md) — BattlEye report-path pool-alloc drop (“Packet Fucker”)
- [Blanket](entities/blanket.md) — process hide via ActiveProcessLinks unlink + PspCidTable + NtQuerySystemInformation hook (cheat / hide)
- [Blackout](entities/blackout.md) — BYOVD EDR/AV killer via GMER **`gmer64.sys`** (IOCTL PID terminate; Defender continuous suppression; gmh5225)
- [blah](entities/blah.md) — lightweight portable C++ 2D game framework (CMake C++17; OpenGL or D3D11; lifecycle/render/input/audio/math; few deps; hackable prototype base; Game Engine / [C++ 2D]; NoelFB)
- [binary-analysis-mcps](entities/binary-analysis-mcps.md) — Binary analysis MCP collection (Python; IDA Pro function/xref/variable tools for LLM agents; Binary analysis MCPs collections)
- [binaryaudit](entities/binaryaudit.md) — Harbor benchmark for AI agents finding injected backdoors in stripped C/Go/Rust binaries (Docker; Ghidra/Radare2; lighttpd/dnsmasq/Dropbear/Sozu/Caddy; QuesmaOrg)
- [binary-ninja-mcp](entities/binary-ninja-mcp.md) — Binary Ninja MCP server (Python; disasm/decompile/xrefs/functions/types for LLM agents; MCP for Binary_Ninja)
- [binaryninja-ollama](entities/binaryninja-ollama.md) — Binary Ninja plugin: local Ollama LLM-assisted HLIL function/variable rename (ahaggard2013; offline models)
- [binaryninja-openai](entities/binaryninja-openai.md) — Binary Ninja plugin: OpenAI-assisted HLIL/pseudo-C function summarize + variable rename (WhatTheFuzz; Integrates OpenAI)
- [binaryninjaplugins](entities/binaryninjaplugins.md) — Binary Ninja custom architecture plugins: Java class files, Renesas H8/300, Xtensa ELF (Pusty; Python; disassembly/decode/lifting; patch workflows)
- [binaryninja-pcode](entities/binaryninja-pcode.md) — BN ↔ Ghidra Sleigh/p-code bridge (experimental LLIL; Binary Ninja Plugins)
- [binaryninja-themes](entities/binaryninja-themes.md) — Binary Ninja `.bntheme` collection: standard/light/green Gruvbox-inspired palettes (FuzzySecurity; Theme)
- [binja-division-deoptimization](entities/binja-division-deoptimization.md) — Binary Ninja MLIL division/modulo deoptimizer (architecture-agnostic)
- [binja-kc](entities/binja-kc.md) — Binary Ninja MachO kernelcache / KDK dSYM loader
- [binja-lattice-mcp](entities/binja-lattice-mcp.md) — BinjaLattice BN plugin: authenticated HTTP bridge to external MCP servers; export disasm/pseudocode + controlled edits (Invoke-RE; MCP for Binary_Ninja)
- [binja-sigmaker](entities/binja-sigmaker.md) — Binary Ninja plugin: IDA-style wildcard byte-pattern signatures from disassembled functions (apekros)
- [BinExport](entities/binexport.md) — Google C++ disassembly exporter (IDA/Ghidra/BN → Protocol Buffer; BinDiff pipeline)
- [BinCon](entities/bincon.md) — VEH + PAGE_NOACCESS hardened console sample (AC page protection)
- [binlex](entities/binlex.md) — binary pattern extraction + genetic trait analysis (C++/Rust; PE/ELF/raw; function-level patterns; JSON/YARA/threat-intel pipelines; c3rb3ru5d3d53c)
- [Binoculars](entities/binoculars.md) — IDA Pro plugin: integrated AI assistant; explain/rename, Go pclntab helpers (Python; cheat / IDA Plugins)
- [binprotect](entities/binprotect.md) — x64 PE bin2bin obfuscator (no new section; BB rewrite; AC Obfuscation Engine)
- [Binary Internals Viewer](entities/binaryinternals.md) — Java interactive binary format inspector (field/bit-level BMP/class/JPEG/PNG/ZIP; OpenJDK/Maven; reusable format libs; RE education / parser dev)
- [BinaryLens](entities/binarylens.md) — Berk000x C++ IDA Pro LLM plugin (bulk function rename, decompiler-context explain, local variable rename; IDA SDK + OpenSSL; multi-model backends; large game client / anti-cheat binary RE; cheat / IDA Plugins)
- [BinaryShield](entities/binary-shield.md) — open-source bin2bin x86-64 code virtualizer (custom bytecode + purpose-built VM; AC Obfuscation Engine `[VM]`; connorjaydunn)
- [BingusLdr](entities/bingusldr.md) — Crystal Palace Win x64 DLL loader (CET stack spoof; EAF API resolution; heap/image masking; reflective loading; Cobalt Strike .cna)
- [binsync](entities/binsync.md) — cross-disassembler collaborative RE sync (IDA/Ghidra/BN/angr; Git-backed names/comments/types; cheat / Sync; gmh5225)
- [BizHawk](entities/bizhawk.md) — multi-system C# retro emulator (TAS/TAStudio, Lua memory+input APIs, RAM search, hex editor, CPU debuggers, savestates/rewind; NES/SNES/GB/GBA/Genesis/N64/DS/PS1/MAME; TASEmulators)
- [BloatedHammer](entities/bloatedhammer.md) — C++20 fold API hammering (no loops; AC Compile Time)
- [BLOCKPOST-Cheat](entities/blockpost-cheat.md) — BLOCKPOST Unity IL2CPP cheat (C/C++; IL2CPP analysis + native hooking; cheat / game:blockpost; gmh5225)
- [blood-hunt](entities/blood-hunt.md) — Blood Hunt cheat (C/C++; driver / rendering / modding; cheat / game:bloodhunt; gmh5225)
- [Bloodhound (Skeletal-Group)](entities/bloodhound.md) — user-mode EPT/NPT hook detector (C++; vectored exceptions + VPGATHER accessibility; hypervisor page-state PoC; anti-cheat / virtualization security research)
- [Bloom Anti-Cheat](entities/bloom-anticheat.md) — Windows x64 kernel+UM AC prototype (ObRegisterCallbacks handle protection for AC + target processes; Visual Studio driver/DLL/app; callback vs UM monitoring tradeoffs; Rycooop; Anti Cheat)
- [Bloom Engine](entities/bloom-engine.md) — TypeScript game engine (Bloom-Engine/engine; Perry LLVM AOT→native; Rust core + wgpu Metal/DX12/Vulkan/OpenGL/WebGPU; raylib-inspired 2D/3D API; Jolt Physics, glTF GPU skeletal animation, WGSL; desktop/mobile/WASM; Game Engine / source)
- [BLUESPAWN](entities/bluespawn.md) — open-source Windows active defense / EDR (ION28; Hunt/Mitigate/Monitor/Scan; ATT&CK detections, YARA, ETW monitoring, automated quarantine/process suspension; C++; rule-driven content; blue-team endpoint defense; README [EDR])
- [bloodhunt-external](entities/bloodhunt-external.md) — Blood Hunt external cheat (C++; ImGui DX9 overlay + memory/offset helpers; mhyprot driver utilities; ZZZ-Monster; cheat / game:bloodhunt [External])
- [bloodhunt-v1-1](entities/bloodhunt-v1-1.md) — Blood Hunt external cheat framework (PhysX1337; C++; UE; DX9 ImGui ESP/aimbot/recoil; hardcoded offsets + actor cache + menu; cheat prototyping / AC evasion research)
- [blitz](entities/blitz.md) — header-only UM lazy import resolver with direct calls (C++; Anti Cheat / Lazy Importer; emlinhax)
- [blc](entities/blc.md) — IDA Pro plugin integrating Ghidra decompiler (Binary Lifting Contraption; cheat / IDA Plugins; cseagle)
- [BLCGameSecLab](entities/blc-gamesec-lab.md) — Authorized game-security validation and regression orchestration CLI (Python; BLCReverseLab intake, evidence graphs, build diffing, incremental anti-cheat retest scoping; BLCCoreStudio)
- [blender-mcp](entities/blender-mcp.md) — Blender MCP bridge (addon + Python server; scene/object/material edit; AI-assisted 3D prototyping; Game Develop / MCP)
- [bn](entities/bn.md) — Binary Ninja CLI for agents (Python; agent-facing CLI; plugin development; Cheat Binary Ninja Plugins)
- [bn-ebpf-solana](entities/bn-ebpf-solana.md) — Binary Ninja Solana eBPF/SBF disasm + decompile (Cheat Binary Ninja Plugins)
- [bndb2pat](entities/bndb2pat.md) — Binary Ninja plugin: IDA FLIRT `.pat` patterns from LLIL (wildcard masks, CRC16; sigmake → `.sig`; joren485)
- [bsimvis](entities/bsimvis.md) — Ghidra BSim binary similarity platform (MISP; Python + JS; Kvrocks/Redis + optional Milvus; REST API + web UI; function diffing, HDBSCAN clustering, call-graph navigation; cheat / Ghidra BSim-based binary similarity)
- [bobalkkagi](entities/bobalkkagi.md) — Python Themida 3.1.3 Tiger red64 unpack via Unicorn API-hook emulation (win10_v1903 DLL set; fast/hook_block/hook_code; optional OEP; planned devirt; Fix Themida)
- [borderless-gaming](entities/borderless-gaming.md) — Windows C#/.NET utility: windowed games → borderless fullscreen; process watch + HWND manipulation; faster alt-tab vs exclusive fullscreen; Game Testing / external overlay prerequisite (Codeusa)
- [BOOM](entities/boom.md) — hijack Beep.sys; stealth driver communication
- [BS AntiCheat](entities/bs-anticheat.md) — Paper/Folia Minecraft anti-cheat plugin (BoondockSulfur; Java; 1.21.10+; movement/combat/world/inventory/vehicle/packet checks; transaction lag compensation; violation-level punishments + setbacks; SQLite logging; PacketEvents/Discord/PlaceholderAPI/LuckPerms; false-positive-conscious tunable heuristics; Anti Cheat / game:minecraft)
- [BootBypass](entities/bootbypass.md) — Secure Boot / DSE / HVCI bypass (native; SeCiCallbacks / CI.dll)
- [BootExecuteEDR](entities/bootexecute-edr.md) — bootExecute EDR bypass (pre-service; cheat / hide)
- [BGRTInjector](entities/bgrt-injector.md) — Jamesits; C UEFI loader/driver; ACPI BGRT boot-logo replacement via custom 24-bit BMP; rEFInd + default EFI path integration; firmware customization / boot-chain experimentation
- [bootlicker](entities/bootlicker.md) — UEFI bootkit PoC (Boot Manager / OS loader patch; pre-kernel DSE / PatchGuard / Secure Boot research; gmh5225)
- [boltgolt/boltobserv](entities/boltobserv.md) — CS:GO radar (player slot numbers on map dots; cheat / game:csgo [Radar])
- [Branch Monitoring Project](entities/branch-monitoring-project.md) — Intel LBR/BTS branch-trace framework (C KM driver + usermode; PMI; control-flow monitoring)
- [Browser Password Exportor](entities/browser-password-exportor.md) — Python Windows browser password decrypt/export (BL0odz; Chromium/Edge/Firefox; DPAPI/AES + Firefox key-material parsing; ASN.1 login-storage routines; credential forensics / browser secret-storage RE)
- [BYOUD](entities/byoud.md) — x64 unwind-metadata stack spoofing framework (klezVirus; Cheat Spoof Stack)
- [BYOVD Lab](entities/byovd.md) — educational multi-driver AV/EDR kill PoCs (`viragt64.sys`, TfSysMon, ksapi64, BdApiUtil, `wsftprm.sys`; gmh5225)
- [BYOVD Read Write Primitive](entities/byovd-read-write-primitive.md) — 0xJs educational BYOVD toolkit (C PoCs; IOCTL kernel R/W; PPL/token/ETW/callback/minifilter/DSE modification; offset/symbol resolution; AC/EDR hardening gap study)
- [BYOVD EDRKiller](entities/byovd-edrkiller.md) — 0xJs educational BYOVD PoC via **`BdApiUtil64.sys`** (C; driver-interface RE; security-process enumeration + repeated termination; red-team defensive-resilience study)
- [BYOVDFinder](entities/byovdfinder.md) — identify LOLdrivers not blocked by active HVCI policy (BYOVD path research under Memory Integrity; ghostbyt3)
- [bypassHiddenApiRestriction](entities/bypass-hidden-api-restriction.md) — Android hidden non-SDK API bypass library (Java/Kotlin + JNI/CMake; Android 9–12; startup init; RE / compatibility / security research; WindySha)
- [BYPASS-PUBG-MOBILE-IMGUI](entities/bypass-pubg-mobile-imgui.md) — PUBG Mobile AC bypass + ImGui menu (C/C++; hooking / memory; cheat / game:pubgm)
- [Bypassing EasyAntiCheat Integrity check](entities/bypassing-easyanticheat-integrity-check.md) — EAC kernel driver self-integrity RE + bypass (CreateProcess/LoadImage notify; Capstone deobfuscator; section-compare C++; gmh5225 [Bypassing integrity check])
- [boundcallback](entities/boundcallback.md) — KeRegisterBoundCallback research (C++; cheat / driver communication)
- [bt-modular-game-features](entities/bt-modular-game-features.md) — BTS modular Unreal features (audio / physics / animation; C/C++; Plugins:Unreal; gmh5225)
- [btop](entities/btop.md) — cross-platform C++ terminal resource monitor (CPU/memory/disk/network/process/GPU TUI; Performance Monitor)
- [btrace](entities/btrace.md) — Android app dynamic behavior tracking via eBPF (C/C++/Go; cheat / RE tools)
- [BugCheck2Linux](entities/bugcheck2linux.md) — NSG650; Windows kernel driver; mini-rv32ima RISC-V Linux emulator inside BSOD screen; BOOTVID framebuffer + embedded device tree/boot image; kernel-mode embedded emulation / bugcheck-environment research
- [BugCheckHack](entities/bugcheckhack.md) — NSG650; Windows driver + user-mode utility; service workflow kernel load, offset resolution, bugcheck-routine patching; desktop controller; BSOD appearance/behavior research / kernel patching demo
- [Bugcheck Suppressor](entities/bugcheck-suppressor.md) — HVCI/kCET-aware BSOD suppression PoC (data-only HAL dispatch hook + RtlUnwindEx SEH recovery; XaFF-XaFF)
- [BudgetEPT (brew02)](entities/budget-ept.md) — SMAP/SMEP inline hooks emulating EPT split-page semantics without a hypervisor; limited software-virtualization concealment (Some Tricks / Windows Ring0) — SMAP/SMEP inline hooks emulating EPT split-page semantics without a hypervisor; limited software-virtualization concealment (Some Tricks / Windows Ring0)
- [BWSR](entities/bwsr.md) — cross-platform Arm64/Arm64e inline hooking library (BossKoopa; C; iOS, Android, Linux, macOS; low-level patching primitives + multi-platform build paths; portable native runtime code interception; security research / instrumentation)
- [Bulllord Engine](entities/bulllord-engine.md) — lightweight cross-platform pure-C game engine (rendering, audio, physics, asset management; ASTC/FastLZ/FreeType; Game Engine / source)
- [Bunyip](entities/bunyip.md) — pure Go game engine (matjam/bunyip; cgo-free Vulkan bindings; ECS, 2D/3D physics, PBR, immediate-mode UI, spatial audio, TCP/TLS/UDP networking; macOS/Windows/Linux; headless screenshot tests; Game Engine / source)
- [Bullet3](entities/bullet3.md) — Bullet Physics SDK (C++ collision + multi-physics; rigid/soft body, vehicles, character controllers, OpenCL broadphase; PhysX SDK / Game Engine)
- [Butler](entities/butler.md) — open-source Android file explorer (Kotlin/Compose; root/Shizuku/ADB/shell; app manager, APK export, regex search; Cheat Android File Explorer; d4rken-org)
- [BusterCall](entities/bustercall.md) — enumerate/patch kernel callbacks; HVCI PFN-swap research
- [bytecode-viewer](entities/bytecode-viewer.md) — Java/Android multi-decompiler suite (CFR/Procyon/FernFlower/JD-GUI/Krakatau; bytecode+Smali+source tabs; JAR/DEX/APK)
- [BytecodeVM](entities/bytecodevm.md) — Java bytecode virtualizing obfuscator (Gradle/ASM CLI; pure-Java VM; dispatch/threaded/register/FSM architectures; encrypted operands + shuffled CFG; educational Java hardening; NHCM-dev; AC Obfuscation Engine)
- [C-Android-Memory-Tool](entities/c-android-memory-tool.md) — C++ rooted Android memory toolkit (process search/read/write, offset scan, result management, value freeze; reusable class over process mappings + memory files; cheat-engine style workflows; Anonym0usWork1221; cheat / RPM)

- [byfron-bypass](entities/byfron-bypass.md) — Byfron/Roblox client AC bypass research (C++; asset pipelines / editor tooling; explore anticheat:byfron; gmh5225)
- [byvalver](entities/byvalver.md) — shellcode bad-byte banisher (2 modes; AC shellcode engine & tricks)
- [callout-poc](entities/callout-poc.md) — kernel callout / spoof-stack PoC (C/C++; Cheat Spoof Stack)
- [CallMeWin32kDriver](entities/callmewin32kdriver.md) — win32k.sys session-driver unsigned loader; anti-rootkit dump resistance + MmCopyMemory-detection bypass (gmh5225; PUBG cheat-driver lineage)
- [CallMon](entities/callmon.md) — PsAltSystemCallHandlers kernel syscall monitor (C driver + GUI; per-process trap frame/stack via named pipe; optional Rust driver; AltSystemCallHandlers; DownWithUp)
- [CallStack-Spoofer](entities/callstack-spoofer.md) — Barracudach C++ user/kernel call-stack spoofing toolkit; macros/templates + shellcode proxy paths; x64; compiler/CET constraints (Cheat Spoof Stack)
- [CallStackSpoofer](entities/callstackspoofer.md) — WithSecure Labs C++ PoC; spoof arbitrary call stacks on Windows syscalls; selectable stack profiles (Cheat Spoof Stack)
- [CallStackSpoofer-2](entities/callstackspoofer-2.md) — x64 call-stack spoofing via custom ASM trampolines (gmh5225; Cheat Spoof Stack)
- [Call Obfuscator](entities/call-obfuscator.md) — PE post-processor: decoy IAT + load-time shellcode resolver (PEB→Ldr export walk; INI-mapped API misdirection; Call Obfuscation; d35ha)
- [Camera Triggerbot](entities/camera-triggerbot.md) — camera triggerbot (movement/color around crosshair; cheat / triggerbot & aimbot)
- [Campfire](entities/campfire.md) — in-progress OpenGL/Vulkan game engine (Vulkan migration; features on OpenGL branch; Game Engine / source)
- [cat-annihilation](entities/cat-annihilation.md) — C++20/Vulkan/CUDA wave-survival engine (render graph, clustered deferred PBR, ECS, behavior-tree AI; React Three Fiber browser demo; Game Engine / source) — C++20/Vulkan/CUDA wave-survival engine (render graph, clustered deferred PBR, ECS, behavior-tree AI; React Three Fiber browser demo; Game Engine / source)
- [cartmanv2](entities/cartmanv2.md) — internal CS:GO cheat (C/C++; rendering / networking / editor tooling; gmh5225 [Internal])
- [capture-engine](entities/capture-engine.md) — Windows game capture/recording (WGC/DDA or injected D3D9–D3D12/Vulkan/OpenGL/DXVK hooks; Matroska, HDR overlays, DLSS/FSR; explicit AC safety boundaries; aufkrawall)
- [cbs](entities/cbs.md) — IDA Pro plugin: mnemonic-pattern breakpoint automation (Python IDAPython + PyQt; regex disasm scan; set/enable/disable/remove breakpoints across functions; Reodus; cheat / IDA Plugins)
- [CEDetector](entities/cedetector.md) — Cheat Engine detector (window/process/driver/debug; CE stealth test)
- [CE Remap Plugin](entities/ce-remap-plugin.md) — Delphi CE plugin: remap disassembler memory pages for hidden/obfuscated code (CE plugin SDK; tested CE 7.4; cheat / Remap; gmh5225)
- [CE Examples](entities/ce-examples.md) — FreeER CE example/practice-table collection: Lua/`.CT` assets for memory scanning, Auto Assembler, pointer utilities, UI helpers, Mono workflows, trainer experiments; RE snippets and templates (cheat / Some Examples)
- [CE Extensions](entities/ce-extensions.md) — FreeER modular CE Lua pack: autosave, disassembler highlighting, structure/offset helpers, process attach conveniences, independently loadable workflow scripts (cheat / Lua Extensions)
- [CE Lua Extensions](entities/ce-lua-extensions.md) — Skyrimfus CE Lua autorun pack: extension loader + breakpoint cleanup, caller lookup, template insertion, UI workflow scripts (cheat / Lua Extensions)
- [CE MCP Plugin](entities/ce-mcp-plugin.md) — Eruditi CE plugin: C + Lua; async TCP AI command channel; memory R/W, freeze, disasm/asm, process control, DLL injection (cheat / MCP for Cheat Engine)
- [CE Tracer-IDA](entities/ce-tracer-ida.md) — Python IDA plugin: CheatEngine value tracer (memory analysis; cheat / IDA Plugins)
- [ce-easyanticheat-bypass](entities/ce-easyanticheat-bypass.md) — Cheat Engine bypass for EAC (CE process/window class/driver/memory-access evasion; UD CE; gmh5225)
- [ce-tutorial](entities/ce-tutorial.md) — Cheat Engine register tutorial (register roles vs common illustrations; cheat / guide)
- [ce_speed_hack](entities/ce-speed-hack.md) — compact C++ CE-style speed hack (Detours timing hooks; core hooking logic for learners; user-mode time manipulation; IamSanjid)
- [ceserver-ios](entities/ceserver-ios.md) — Cheat Engine ceserver for iOS (jailed/jailbroken; desktop CE remote scan/edit, breakpoints, pointer scan; 0xiuks)
- [ceserver-rawmem](entities/ceserver-rawmem.md) — Cheat Engine ceserver over raw physical memory (`/dev/mem` or DMA; bypasses OS process APIs and anti-cheat monitoring; cs1ime)
- [CapcomDKOM](entities/capcom-dkom.md) — Capcom.sys BYOVD DKOM tool (IOCTL 0xAA013044; kernel shellcode via MmGetSystemRoutineAddress; gmh5225)
- [CapcomLib](entities/capcomlib.md) — reflexive DSE-bypass kernel driver loader (custom PE loader; default Capcom.sys BYOVD; modular signed-driver backends; gmh5225)
- [Certael](entities/certael.md) — server-authoritative OSS AC (Rust C ABI; Godot/Unity/Unreal; .NET control plane)
- [Cerberus](entities/cerberus.md) — Win32 ChaosVm x86 bytecode PE protector (disasm/asm, PE patcher, CRC32, Qt GUI; AC Obfuscation Engine `[VM]`)
- [CFB](entities/cfb.md) — Canadian Furious Beaver IRP monitor (filter driver hooks dispatch table; C driver + Python client; IOCTL RE / fuzzing)

- [cet-research](entities/cet-research.md) — CET / shadow-stack research (C; Windows Security Features)
- [cet-spoofing-detection](entities/cet-spoofing-detection.md) — PoC: detect stack spoofing in CET-enabled processes (shadow stack vs user stack; usermode; Clang/CMake; 0xjbb; Detection:Spoof Stack)
- [cet-win10](entities/cet-win10.md) — Windows 10 Intel CET research (shadow stack + IBT; kernel forward/backward-edge CFI; gmh5225)
- [CFG-FindHiddenShellcode](entities/cfg-find-hidden-shellcode.md) — CFG bitmap inconsistency shellcode scanner (C; valid call targets outside module code)
- [cfgdump](entities/cfgdump.md) — WinDbg extension: inspect Control Flow Guard coverage (C++; print CFG maps, query ranges, list protected regions; JKornev; Analyze Control Flow Guard map)
- [cfclap](entities/cfclap.md) — CrossFire (CF) cheat: memory manipulation / ESP / aimbot (cheat / game:crossfire; gmh5225)
- [cgl](entities/cgl.md) — single-header C graphics/utility library (Jaysmito101; cross-platform windowing, rendering, noise, math, data structures, networking, threading; Rust/Python wrappers; bloom/audio/node editing; prototyping/demo scenes; Game Engine / source)
- [cheap-engine](entities/cheap-engine.md) — lightweight Android memory scanner (scan/edit, exact/range/changed search, pointer scan; simplified CE alternative; gmh5225)
- [charlyengine](entities/charlyengine.md) — open-source Android CE clone (Kotlin + NDK; Jetpack Compose UI + native `/proc` daemon; scan/rescan/inject/freeze, per-title saved sessions, Termux text protocol; andoridcharlyroot-debug; cheat / Android Memory Explorer)
- [ChainOfFools](entities/chainoffools.md) — CVE-2020-0601 Windows CryptoAPI ECC root-spoof PoC (Python + OpenSSL; CurveBall/ChainOfFools; gmh5225)
- [ChaiScript Plugin](entities/chaiscript-plugin.md) — x64dbg plugin: ChaiScript automation (three commands; thorough API; Cheat x64dbg Plugins)
- [Chasm](entities/chasm.md) — high-performance runtime x86-64 assembler library (C; instruction IR, relative ref linking, AVX-256; JIT/emulator/runtime optimization; aqilc)
- [chernobog](entities/chernobog.md) — 19h Hex-Rays IDA Pro plugin; automatic Hikari LLVM deobfuscation (CFF/bogus-branch restore, indirect control-transfer resolution, encrypted data recovery; Z3 + MBA simplification; malware/game-security RE)
- [ChinaPubg](entities/china-pubg.md) — Android NDK PUBG RE/manipulation toolkit (C/C++; inline hooks, ptrace inject, memory tooling, ImGui, offsets/map/patch; mobile AC research; Super-Cssdiv; cheat / game:pubgm)
- [CheekyBlinder](entities/cheeky-blinder.md) — enumerate/modify kernel callbacks via signed vulnerable MSI driver (BYOVD PoC; br-sn)
- [checkhv_um](entities/checkhv-um.md) — user-mode HV detection (CPUID / RDTSC / VMCS / signatures)
- [cheese](entities/cheese.md) — Quest 3/3S root via Adreno CVE-2025-21479 (Magisk, no boot rewrite)
- [Chess King](entities/chessking.md) — Rust Axum multiplayer chess platform (server-side AC: risk scoring, device fingerprint, match integrity, CAPTCHA step-up, ban escalation; shakmaty; admin dashboard; Anti Cheat / educational)
- [cheatengine-mcp-bridge](entities/cheatengine-mcp-bridge.md) — MCP bridge: CE named pipe + Lua/FastMCP; 40+ tools (scan/read/pointers/RTTI/HWBP/DBVM); sub-2ms; miscusi-peek / beamstar forks
- [cheat-driver](entities/cheat-driver.md) — MmCopyVirtualMemory KM test driver (AC stress / cross-process R/W)
- [CiDllDemo](entities/ci-dll-demo.md) — kernel driver demo; ci.dll `CiValidateFileObject` / `CiCheckSignedFile`; process-creation notify hook; Authenticode certificate extraction (Ido-Moshe-Github; Windows Code Integrity research)
- [Code Integrity DriverBlocklist](entities/code-integrity-driverblocklist.md) — WDAC CI policy blocklist XML data; hash/identity deny rules incl. anti-cheat kernel modules; defensive hardening + attack-surface reduction (Harvester57)
- [code_injection](entities/code-injection.md) — Fahersto; C++ host-based Windows code injection collection (~two dozen PE/DLL/shellcode paths; hollowing, callbacks, loader abuse; per-technique executables; 32/64-bit, WoW64, multi-version notes; offensive tradecraft + defensive detection coverage)
- [CirSAT](entities/cirsat.md) — circuit-based AIG SAT (DAG/AIGER; verification / equivalence; MBA constraint lane)
- [Classroom](entities/classroom.md) — x64dbg OOP class docs (member funcs/vars; Cheat x64dbg Plugins)
- [ClassMaker](entities/classmaker.md) — IDA Python plugin: auto C++ class reconstruction from constructor pseudocode; vtable trace, struct create/update, naming heuristics; 32/64-bit (Pycatchown; cheat / IDA Plugins)
- [Classy](entities/classy.md) — IDA Pro C++ class/vtable/signature manager (PyQt5 GUI; vtable gen, Itanium mangling, struct mapping, C headers; gmh5225)
- [ClawSearch](entities/clawsearch.md) — x64dbg plugin: Cheat Engine–style memory value scan (first/next; int/float; exact/changed/increased; fast-scan; dump jump; codecat)
- [ClickPic](entities/clickpic.md) — screen pixel color detection + auto-click (OpenCV + triggerbot; gmh5225)
- [ClearDriverTraces](entities/clear-driver-traces.md) — C++ KM driver; MmUnloadedDrivers, PiDDBCacheTable, CI hash-cache cleanup; version-specific offsets (Sentient111; Driver Trace Cleaner)
- [CleanCheat](entities/clean-cheat.md) — C++ modular game cheat foundation (data providers, feature modules, runners, shared state; Unreal internal sample; CorrM; cheat / Game cheat base)
- [clipboard-tools-ue4](entities/clipboard-tools-ue4.md) — UE4 plugin: copy string args to system clipboard (C++ module; UE4.27; in-engine debug/scripting text transfer; Plugins:Unreal; aoharudesu)
- [ClrGuard](entities/clrguard.md) — Windows defensive CLR assembly-load monitor/blocker (ClrHook DLL hooks; PE metadata/hash logging; optional Windows service; endgameinc; Anti Cheat → CLR Protection)
- [CoBRA](entities/cobra.md) — Trail of Bits MBA expression simplifier (C++; Cheat Mixed boolean-arithmetic)
- [Cobra (web Snake)](entities/cobra-snake.md) — Next.js/React HTML5 Canvas Snake; LibSQL Top 10 leaderboard; HMAC game sessions, score plausibility, rate-limited silent forged-score rejection (aryribeiro; Anti Cheat / Anti-Cheat Programming)
- [Cognitor](entities/cognitor.md) — Go Windows kernel driver static analysis (IDA/Ghidra exports; IOCTL/access-check/ALPC/COM rules; Patch Tuesday diff)
- [COD-boiii](entities/cod-boiii.md) — BOIII client modification/research: patches, SDK structures, runtime engine tooling (gmh5225; Reverse engineering and analysis)
- [CoD_Hacks](entities/cod-hacks.md) — Call of Duty v1.5 educational hack collection: Desk.dll multi-hack, internal W2S ESP, OpenGL `glDrawElements` wallhack, syscall wallhack, pattern-scan trainer (attilathedud; cheat / game:cod)
- [COD7-Tools](entities/cod7-tools.md) — COD7 (Black Ops) research tooling (VcPkg; cheat / game:cod7)
- [CodM Dumper](entities/codm-dumper.md) — Call of Duty Mobile IL2CPP dump package (Poko-Apps; armv7/arm64; Termux; dump.cs/ida.py/IDA JSON; release distribution; deprecated; [il2cpp dump])
- [CODM-ESP-Aimbot-Mod-Menu](entities/codm-esp-aimbot-mod-menu.md) — Call of Duty Mobile internal mod menu: injectable library + overlay; ESP / aimbot / gameplay mods (gmh5225; cheat / game:codm [ESP])
- [CodeCleaner](entities/codecleaner.md) — x64dbg plugin: Capstone + AsmJit disassembly cleanup (redundant NOPs, no-op register moves); Themida mutation assembly; packed/obfuscated binary RE (Steesha; Fix Themida / x64dbg Plugins)
- [cnc-ddraw](entities/cnc-ddraw.md) — DirectDraw replacement wrapper (CnCNet; C/C++; shader upscaling, windowed/borderless, frame limiting; Windows + Wine; legacy 2D RTS/modder titles; Old Game / DirectX Compatibility)
- [Command and Conquer: Red Alert](entities/cnc-red-alert.md) — EA open-source C&C: Red Alert + Steam Workshop (Westwood RTS; Game Develop / source)
- [CmdT](entities/cmdt.md) — TrustedInstaller token launcher (x86/x64 asm; TI ACL / RE forensics)
- [ConBeerLib](entities/conbeerlib.md) — Linux/Android container·VM detect (cgroup/fs/env; Docker/LXC/K8s/WSL)
- [ConfuserEx](entities/confuserex.md) — open-source .NET application protector (Confuser successor; AC Binary Packer / CLR protection)
- [ConfuserEx IDAPython](entities/confuserex-idapython.md) — Python IDAPython deobfuscation script for ConfuserEx (cheat / IDA Plugins)
- [Corange](entities/corange.md) — pure C game engine (Game Engine / source)
- [Corner Culling](entities/corner-culling.md) — 87andrewh server-side occlusion-culling (C++ + Unreal Engine; analytical ray casts, BVH + recent-occluder caching, latency-aware lookahead; reduces wallhack visibility in multiplayer shooters; scalable line-of-sight enforcement research)
- [Corner Culling Source Engine](entities/corner-culling-source-engine.md) — 87andrewh Source engine anti-wallhack extension (C++ extension + SourceMod + map occluders; strict server-side visibility culling; ray-cast correctness, low overhead, latency-safe; competitive Source servers; For Source Games)
- [Cordova Plugin RootGuard](entities/cordova-plugin-rootguard.md) — Cordova root/jailbreak/Frida detection plugin (Binuka97; Magisk/KernelSU/APatch; SAFE/COMPROMISED/UNKNOWN tri-state; Android+iOS)
- [COPG](entities/copg.md) — Zygisk per-app hardware-profile spoofing (CPU/GPU/build props, IMEI, Widevine, SIM, GAID; stealth CoW/unload-before-launch vs resident GPU/DRM hooks; JS WebUI; hardware-gated FPS/graphics tier bypass; AlirezaParsi; cheat / Android)
- [Cubyz](entities/cubyz.md) — open-source Zig 3D voxel sandbox (OpenGL; LOD rendering, unbounded 3D chunks, procedural crafting; Windows/Linux; Game Engine / source)
- [Controller Mode](entities/controller-mode.md) — official CE Lua add-on: gamepad-operated CE UI (D-pad navigation, A/B confirm/cancel, `.CT` picker, Steam Deck keyboard; cheat-engine)
- [CountHook](entities/count-hook.md) — working-set memory-check bypass (count-oriented; Cheat / Bypass Page Protection)
- [CppServer](entities/cppserver.md) — C++ server framework with Fast Binary Encoding message protocols (Game Network / source; modding + memory analysis)

- [com.unity.demoteam.hair](entities/com-unity-demoteam-hair.md) — Unity strand-based hair package (Alembic import, GPU sim, hierarchical LOD; Built-in/URP/HDRP; character rendering; Plugins:Unity)
- [com.unity.ide.cursor](entities/com-unity-ide-cursor.md) — Unity package: Cursor as external code editor (Plugins:Unity; C#/C++)
- [com.sipvlib.anticheat](entities/com-sipvlib-anticheat.md) — Unity UPM soft AC (server-verified GameTime + root/jailbreak/emulator/debugger)
- [Common-Registry](entities/common-registry.md) — KMDF driver + user client; registry-based KM↔UM comm; custom process-attach handling; Windows internals / AC bypass PoC (EBalloon; Registry Callback)
- [Common-Registry-Jmp-RCX](entities/common-registry-jmp-rcx.md) — CmRegisterCallback + JMP RCX gadget in nvraid.sys for covert KM↔UM registry-callback comm (gmh5225; Registry Callback)
- [comm-data-ptr-driver](entities/comm-data-ptr-driver.md) — shared data-ptr KM↔UM comm via NtGdiPolyPolyDraw; avoids IOCTL telemetry (gmh5225; cheat driver)
- [comm-data-pointer-swap](entities/comm-data-pointer-swap.md) — win32kbase data-ptr swap via NtDCompositionSetChildRootVisual; GUI-syscall covert KM↔UM PoC (gmh5225; cheat driver)
- [comm-im-miraclela](entities/comm-im-miraclela.md) — EFT UM+KM overlay via `NtDxgkGetTrackedWorkloadStatistics` dxgkrnl hook; win32k draw + ImGui comms (gmh5225; cheat / game:eft)
- [comm-neko-swap](entities/comm-neko-swap.md) — swap-based memory page KM↔UM covert channel via Win32kApiSetTable; avoids IOCTL telemetry (gmh5225; cheat driver)
- [community-plugins](entities/community-plugins.md) — Vector35 community Binary Ninja plugin index (Python manifest validation; licensing, compatibility, update metadata; discover/install community extensions)
- [copy-rva](entities/copy-rva.md) — IDA Pro plugin: copy cursor RVA to clipboard (Python IDAPython; context menu; WinDbg breakpoints on unsymbolized drivers; RomanRybachek; cheat / IDA Plugins)
- [collateral-damage](entities/collateral-damage.md) — Xbox One/Series SystemOS kernel exploit (CVE-2024-30088; kernel 25398.4478/4908/4909; console emulator / Xbox RE)
- [comida](entities/comida.md) — IDA Pro COM analysis plugin (GUID scan + registry correlation; Hex-Rays type inference on CoCreateInstance/QueryInterface; airbus-cert; cheat / IDA Plugins)
- [comon](entities/comon.md) — WinDbg extension; trace COM class creation + interface querying (WinDbg Plugins)
- [compact-vm-detector](entities/compact-vm-detector.md) — compact embeddable Windows C++ VM-detection component (pafish-inspired; lightweight anti-virtualization; Visual C++ integration; LukeGoule)
- [component-fuse-mechanic](entities/component-fuse-mechanic.md) — UE5.2 actor-component fuse prototype (EvelynSchwab; C++/Blueprint; socket alignment, placement previews, Chaos physics constraints; object-combination mechanic prototyping; Game Engine / UE5 constraining system)
- [compile_android_driver](entities/compile-android-driver.md) — out-of-tree Android kernel driver build/ABI (kade / Kadeflow; GKI)
- [compile-time-random](entities/compile-time-random.md) — C++11 header-only compile-time random constants (constexpr FNV/Murmur3-style hashing; 32/64-bit macros; no runtime RNG; lightweight obfuscation / AC Compile Time; Deniskore)
- [compile-time-regular-expressions](entities/compile-time-regular-expressions.md) — C++ CTRE compile-time regex (cmake `ctre`; AC Compile Time)
- [cocos2d-x](entities/cocos2d-x.md) — cross-platform C++ 2D framework (cocos2d-iphone lineage; Game Engine / source)
- [cocos4](entities/cocos4.md) — COCOS 4 cross-platform C++ engine (script bindings; write-once-run-anywhere; Game Engine / source)
- [cocos-engine](entities/cocos-engine.md) — Cocos Creator runtime framework (3D/2D; editor-backed; Game Engine / source)
- [compiler-binary-richprint](entities/compiler-binary-richprint.md) — print MSVC Rich Header compiler info from PE (DOS stub→PE gap; cheat / RE tools; gmh5225)
- [cos-mapper](entities/cos-mapper.md) — signed-helper driver mapper; kernel hooks transfer unsigned payload; unloaded-driver/cache cleanup (armvirus; Signed Driver Map)
- [CompiledProtection](entities/compiled-protection.md) — C/C++ cheat compiler (CS:GO-adjacent; Cheat Compiler)
- [cormem.sys-vulnerable-driver](entities/cormem-sys-vulnerable-driver.md) — **`cormem.sys`** vulnerable kernel driver binary; memory R/W primitives for BYOVD research (KeServiceDescriptorTable; Cheat Vulnerable Driver)
- [coruna](entities/coruna.md) — leaked iOS WebKit exploit toolkit (multi-version chains; locally hostable; partial deobfuscation; cheat / iOS jailbreak)
- [covcane](entities/covcane.md) — experimental Windows x86-64 DBI framework (C++; loader + instrumentation runtime; translation/rewriting/memory/exception handling; Zydis + AsmJIT; RE / runtime analysis; ZehMatt)
- [covirt](entities/covirt.md) — x86-64 stack-VM code virtualizer (PE MinGW + ELF; MBA + self-modifying code; marker regions; AC Obfuscation Engine `[VM]`; dmaivel)
- [brkida](entities/brkida.md) — header-only C++ `BRKIDA` macro; MSVC x64 compile-time stubs + crafted stack-access patterns break IDA Hex-Rays decompilation on protected functions (anti-tamper / software protection; android1337)
- [brovan](entities/brovan.md) — .NET Unicorn binary analysis/emulation framework (x86/x64/ARM PE/ELF + memory dumps; syscall emulation, API hooking, interactive debugger shell; AdvDebug; Windows User Space Emulator)
- [crycall](entities/crycall.md) — C++14+ compile-time call obfuscation (lambda/virtual-dispatch wrappers; normal and virtual call macros; hides callee/argument flow; AC Compile Time; android1337)
- [crystr](entities/crystr.md) — C++20 compile-time string/number obfuscation (XOR keys from compile-time math/timestamps/counters; inline/virtual decrypt; per-char/per-value key variation; AC String Crypter; android1337)
- [crossover-patcher](entities/crossover-patcher.md) — experimental macOS CrossOver patcher for anti-cheat-protected Windows games (Apple Silicon; Wine/graphics runtime patches; rollback; dazi2011)
- [WaferACA](entities/crispy-wafer-anti-cheat-assistant-waferaca.md) — Forge **1.20.1** client AC; peer mod-list extraction via FML handshake + custom packets, or client-only rotation aimbot heuristics; cheat alerts + mod commands (sodium-CrispyWafer; Anti Cheat / game:minecraft)
- [createprocessasppl](entities/createprocessasppl.md) — 2x7EQ13; C++ CLI loader; launches processes at WinTCB/Windows/Antimalware/LSA PPL levels; protected-process boundary and tooling compatibility research
- [crc32](entities/crc32.md) — Facepunch Rust internal cheat framework (C++; visuals/hooks/math/weapon logic + Unity IL2CPP + ImGui menu; detours/pattern-scan/spoofcall utilities; ZentifyZ)
- [castle-engine](entities/castle-engine.md) — DX11 C/C++ engine (DirectX/shader/rendering; benanil; Game Engine / source)
- [crown](entities/crown.md) — C++ 2D/3D engine (DirectX/Vulkan + shader work; Game Engine / source)
- [CReadMemory](entities/creadmemory.md) — user-mode cross-process memory read library; multiple methods beyond ReadProcessMemory; external cheat base (gmh5225)
- [counterstrike2](entities/counterstrike2.md) — CS2 cheat: rendering / SDK generation / hooking (C++; cheat / game:cs2)
- [counter-strike2-sdk](entities/counter-strike2-sdk.md) — header-only CS2 SDK snapshot (Omn1z; Source 2 class declarations/enums; entity/gameplay/animation layouts with field offsets; bit-vector utilities; RE/tooling/game-security research; cheat / game:cs2 [SDK])
- [counter-strike-ds-unity-project](entities/counter-strike-ds-unity-project.md) — Unity tooling workspace for Fewnity DS Counter-Strike demake (map/collision/trigger export; pathfinding matrices; gun-sprite pipeline; DS-compatible content iteration; cheat / Unity CS)
- [counter-strike-nintendo-ds](entities/counter-strike-nintendo-ds.md) — Nintendo DS Counter-Strike demake (Fewnity; C; devkitPro + Nitro Engine; weapons/bots/maps/networking; online multiplayer on emulator and real hardware; homebrew FPS on constrained handheld hardware; cheat / Nintendo CS)
- [cozinha-loader](entities/cozinha-loader.md) — CS:GO C++ remote-download inject loader (process hollowing/manual map; anti-debug + string encryption + import obfuscation; b1scoito [Injector])
- [CounterStrike2-Linux-Cheat](entities/counterstrike2-linux-cheat.md) — Linux external CS2 cheat (C++; memory analysis)
- [CS-2-Glow](entities/cs-2-glow.md) — external CS2 glow ESP (C++; entity / offsets / memory)
- [cs16-client](entities/cs16-client.md) — rewrote CS1.6 client forks (thomaseichhorn Game Develop / Source; Velaron Xash3D FWGS cross-platform/mobile; preservation + RE)
- [cs16-trigger-kvm](entities/cs16-trigger-kvm.md) — KVM/QEMU host-side CS1.6 triggerbot (guest memory read + input injection; cheat / game:cs1.6; gmh5225)
- [CSHackCreator-2-Demo](entities/cshackcreator-2-demo.md) — no-code CS1.6 cheat generator (C/C++; OpenGL + Vulkan + rendering; user-input custom output; cheat / game:cs1.6; gmh5225)
- [cs2-anticheat](entities/cs2-anticheat.md) — CS2 in-binary anticheat code documentation (danielkrupinski; June 2023 update; modding/debugging; explore anticheat:cs2)
- [cs2-cheat](entities/cs2-cheat.md) — CS2 cheat samples: tiansongyu external ESP (SDL2 + ImGui; cs2-dumper) and gmh5225 internal (Source 2 SDK; ESP / aimbot / misc)
- [cs2-cheat-base](entities/cs2-cheat-base.md) — CS2 internal cheat base framework (gmh5225; SDK structures, hooks, offsets, entity wrappers, rendering; [Internal])
- [kisssart-cs2-cheat-base](entities/kisssart-cs2-cheat-base.md) — CS2 internal DirectX cheat base (KisSsArt; injectable DLL; kiero + ImGui hooks/rendering; ESP/bhop modules; JSON config; VS x64 + manual-map inject; starter framework; cheat / game:cs2 [Internal])
- [cs2-calladmin](entities/cs2-calladmin.md) — ModSharp CS2 in-game player report system (C#; admin claim/resolve workflow; LiteDB/MySQL/PostgreSQL; optional Discord webhooks; Anti Cheat / Server)
- [cs2-cheat-cpp](entities/cs2-cheat-cpp.md) — external CS2 cheat (C++; rendering / SDK generation)
- [cs2-cheat-source](entities/cs2-cheat-source.md) — internal CS2 cosmetic cheat (bootmgfw; skin/glove/knife changers; Source 2 interfaces/schema/protobuf; MinHook + VMT + DX11 Present ImGui; cheat / game:cs2 [Internal])
- [CS2-Dma-Radar](entities/cs2-dma-radar.md) — CS2 DMA radar (gmh5225: PCIe hardware + real-time overlay; MoZiHao: Spring Boot/WebSocket + Leaflet browser tactical map; VMM/LeechCore; zero target-OS software; cheat / game:cs2 [DMA])
- [CS2-DMA-Cheat](entities/cs2-dma-cheat.md) — CS2 DMA cheat (C/C++; shader/rendering/audio; PCIe DMA; zero target-OS software; cheat / game:cs2 [DMA]; eden13378)
- [CS2-DMA-Extrnal](entities/cs2-dma-extrnal.md) — CS2 external DMA toolset (MoZiHao; C++; LeechCore/VMMDLL; aimbot/triggerbot/radar/bhop/anti-flash; ImGui UI; JSON offsets; zero target-OS software; cheat / game:cs2 [DMA External])
- [CS2-DMA](entities/cs2-dma.md) — open-source CS2 DMA external (C++; FPGA/LeechCore; read-only ESP, web radar, grenade helper; MemProcFS scatter reads; cs2-dumper offsets; zero target-OS software; cheat / game:cs2 [DMA]; chao-shushu)
- [cs2-dumper](entities/cs2-dumper.md) — CS2 external offset/interface dumper (Rust; memflow; Windows/Linux; C#/C++/Rust/JSON output; cheat / game:cs2 [Dump]; a2x)
- [cs2-kvm-dma](entities/cs2-kvm-dma.md) — CS2 KVM/DMA cheat (radar/ESP from separate VM; DMA hardware or KVM memory mapping; zero guest-OS footprint; cheat / game:cs2 [KVM/DMA]; atombottle)
- [cs2-ext](entities/cs2-ext.md) — external CS2 cheat framework (C++17; kernel driver interface; D3D11/DXGI ImGui; aimbot / ESP / spinbot)
- [cs2-fov-changer](entities/cs2-fov-changer.md) — CS2 FOV changer (C/C++; hooking / memory analysis; gmh5225)
- [cs2fixes](entities/cs2fixes.md) — Metamod CS2 server plugin: gameplay fixes + zombie-escape features (Source2ZE; hook-driven logic, config/admin tooling, bundled assets; Source 2 mod boilerplate; CS2 mod / game:cs2)
- [CS2-External-Cheat](entities/cs2-external-cheat.md) — external CS2 cheat (C++; D3D11 ImGui overlay / aimbot / memory)
- [CS2-External](entities/cs2-external.md) — external CS2 cheat (Zckyy; C#; read-only memory + overlay; entity/offset/view-matrix helpers; auth/subscription; cheat / game:cs2 [External])
- [cs2-external-1](entities/cs2-external-1.md) — external CS2 cheat (gmh5225; ImGui + DirectX 11 overlay; aimbot / ESP / skeleton / snaplines; cheat / game:cs2 [External])
- [cs2-external-base](entities/cs2-external-base.md) — CS2 external overlay starter base (UnnamedZ03; C++; team checks + box/health/distance/skeleton/text ESP; overlay structure only—no memory driver; educational; cheat / game:cs2 [External])
- [cs2-external-esp](entities/cs2-external-esp.md) — external CS2 ESP (IMXNOOBX; C++ Visual Studio; out-of-process memory reads; handle hijacking; JSON config + offset scripts; GDI overlay boxes/names/health; external cheat architecture study; cheat / game:cs2 [External])
- [cs2External](entities/cs2external.md) — external CS2 ESP (Tokyodidit; C++; process memory reads; JSON offsets; W2S; Win32/GDI transparent overlay; boxes/health/names; cheat prototyping / memory analysis; cheat / game:cs2 [External])
- [CS2_External](entities/tkazer-cs2-external.md) — external CS2 cheat framework (TKazer; C++; ESP/aimbot+RCS/triggerbot/radar/bhop/visibility/offsets; ImGui UI + process memory; external cheat/AC research; cheat / game:cs2 [External])
- [CS2 Hybrid Anti-Cheat Proposal](entities/cs2-hybrid-anticheat-proposal.md) — CS2 hybrid AC proposal (Glicko-2 judges, honeypot entities, shadow monitoring; Python PoC)
- [CS2AC](entities/cs2ac.md) — open-source server-side CS2 anti-cheat Metamod:Source plugin (aim/movement/input; ~17 modules; kick/ban; Discord webhooks)
- [CS2KAC](entities/cs2kac.md) — open-source CS2 kernel-mode AC companion (KMDF driver + usermode service; client integrity signals for CS2AC/CS2FOW)
- [CS2Guard](entities/cs2guard.md) — ML behavioral CS2 cheat detection from demo parsing and feature engineering (aim/tracking/reaction-time signals; CS2CD adapters; anomaly + supervised models; goal: real-time server-side AC; Driw0x; Python; Anti Cheat)
- [CS2-Internal](entities/cs2-internal.md) — internal CS2: SDK generation / hooking / memory analysis (C++)
- [cs2-internal-sdk](entities/cs2-internal-sdk.md) — reverse-engineered CS2 internal SDK (clouddss; C++; Source 2 class defs, interface pointers, netvar offsets, schema structures; entity/player/weapon/rendering types; cheat / game:cs2 [Internal])
- [cs2-internals](entities/cs2-internals.md) — educational CS2/Source 2 internals guide (MkDocs; Schema/Entity, offsets, networking, verification labs; excludes cheat/AC evasion; ianveig29)
- [cs2internal](entities/cs2internal.md) — internal CS2 cheat (C#; SDK generation / hooking / overlays; chaycee; cheat / game:cs2 [Internal])
- [CS2-OFFSETS](entities/cs2-offsets.md) — CS2 memory offsets / netvars (C++ headers + JSON; Source 2)
- [CS2-Offsets (ro0ti)](entities/cs2-offsets-ro0ti.md) — CS2 offset dump (C#/C++; `[Offset]`; cheat / game:cs2)
- [cs2-p2c-templates](entities/cs2-p2c-templates.md) — CS2 VAC Live P2C research templates (ccsimplyspolit; VMProtect FVA reconstruction; VacLiveBypass MinHook; kernel spoof drivers; multi-method injectors; cheat / game:cs2)
- [cs2-sdk](entities/cs2-sdk.md) — CS2 Source 2 SDK headers (gmh5225/cs2_sdk + cs2-sdk; bruhmoment21/cs2-sdk cross-platform fork; NotOfficer/cs2-sdk source2gen auto-generated headers; C/C++; SDK generation / simplified Source 2 layout; driver / rendering / networking; DX11 + Vulkan; ImGui; cheat / game:cs2 [SDK])
- [cs2-sdk-source2gen](entities/cs2-sdk-source2gen.md) — CS2 Source 2 SDK dump from source2gen (gmh5225; auto-generated C++ headers; animation/client/engine2/network/scene/schema; cheat / game:cs2 [SDK])
- [sdk-cs2](entities/sdk-cs2.md) — generated CS2 SDK header pack (FrySimpl3; C++ engine types, enums, subsystem interfaces; client/rendering/networking/schema/panorama/particles/physics; reference definitions for RE tooling and CS2 analysis; cheat / game:cs2 [SDK])
- [cs2-signature-list](entities/cs2-signature-list.md) — CS2 function-signature reference notes (Salvatore-Als; Markdown + IDC helper; string anchors for team switch, item give, chat, damage; per-build search guidance; cheat / [Signature])
- [CS2 VibeSignatures](entities/cs2-vibe-signatures.md) — automated CS2 signature/gamedata updater for CS2Fixes, CounterStrikeSharp, cs2kz, cs2surf (HLND2T; Python + C++ depot verification; ida-pro-mcp Agent SKILLS; cheat / game:cs2 [Signature])
- [cs2-things](entities/cs2-things.md) — CS2 Source 2 research collection (VScript; RE structures / offsets / SDK / netvars; gmh5225)
- [cs2-tracker](entities/cs2-tracker.md) — CS2 stats tracker with local FastAPI, Game State Integration live match feed, and explainable heuristic anti-cheat suspicion scoring (LooperSalty)
- [cs2-webradar](entities/cs2-webradar.md) — CS2 browser-based radar cheat (C++/JavaScript; memory analysis / asset pipelines; gmh5225 and clauadv forks)
- [csf (ekknod)](entities/csf.md) — CS:GO Linux SDK generation (C/C++; Linux SDK scaffold; cheat / game:csgo [Linux SDK])
- [csf-w (ekknod)](entities/csf-w.md) — CS:GO Win SDK generation (C/C++; Windows SDK scaffold; cheat / game:csgo [Win SDK])
- [CSGO-AC](entities/csgo-ac.md) — ekknod CS:GO proof-of-concept anti-cheat plugin (C++/C; AC research + plugin development; Open Source Anti Cheat System)
- [CSGO_BacktrackPatch](entities/csgo-backtrack-patch.md) — CS:GO backtrack patch (hooking / memory analysis; cheat / game:csgo)
- [csgo-aw-v5.1.13](entities/csgo-aw-v5.1.13.md) — leaked AimWare v5.1.13 CS:GO internal (aimbot, visuals, movement, anti-aim, hooking framework; gmh5225 [aw-v5.1.13])
- [csgo](entities/csgo.md) — large internal CS:GO C++ cheat framework (Bartis1313; SDK wrappers, hook-driven modules, config tooling, DirectX rendering; aimbot, triggerbot, backtrack, ESP, chams, glow, radar, prediction; educational cheat client engineering; cheat / game:csgo [Internal])
- [csgo-alphen](entities/csgo-alphen.md) — CS:GO internal (full SDK with entity/weapon structures and rendering primitives; ImGui menu; ESP, aimbot, visual mods; gmh5225)
- [csgo-animation-code-reversed](entities/csgo-animation-code-reversed.md) — CS:GO animation subsystem RE (click4dylan; C++; bone-matrix/pose/sequence logic; cheat / game:csgo)
- [csgo-auto-dumper](entities/csgo-auto-dumper.md) — CS:GO C++ auto-dump pipeline (Akandesh; steamcmd + build-ID polling; launches local dumper + scripts on new builds; cheat `[Auto Dump]` / game:csgo)
- [csgo-bot](entities/csgo-bot.md) — CS:GO bot; driver / OpenGL / shader (C/C++; cheat / game:csgo)
- [csgo_cheat_external](entities/csgo-cheat-external.md) — external CS:GO; driver development (C++; cheat / game:csgo)

- [csgo-external-ahk-hack](entities/csgo-external-ahk-hack.md) — external CS:GO; AutoHotkey script RPM; triggerbot / bhop / basic ESP (cheat / game:csgo)
- [csgo-external-cheat](entities/csgo-external-cheat.md) — external CS:GO; RPM/driver reads; ESP / aimbot / radar (C++; cheat / game:csgo)
- [csgo-external-esp](entities/csgo-external-esp.md) — external CS:GO ESP (forceinline; MIT; cheat / game:csgo [External])
- [CSGO-FindMDL](entities/csgo-findmdl.md) — internal CS:GO model changer (FindMDL hook; C++ DLL; interface wrappers, offsets, VMT utilities; injector workflow; Kruziikrel1; cheat / game:csgo [Model Changer])
- [Csgo-Full-kernel](entities/csgo-full-kernel.md) — KMDF full-kernel CS:GO external; memory, draw, input, offsets in Ring0 without usermode cheat process (Sentient111; Running from kernelmode)
- [csgo-dma-overlay](entities/csgo-dma-overlay.md) — CS:GO DMA + overlay sample (cheat / game:csgo [DMA])
- [aqhax-csgo](entities/aqhax-csgo.md) — CS:GO internal cheat AqHax (interface capture, VMT hooks, netvar dump; ESP/aimbot/triggerbot/movement/skin changer; cheat / game:csgo)
- [csgo-cheat](entities/csgo-cheat.md) — modular external CS:GO C++17 framework (manka81; MemoryReader + pattern scan + hazedumper offsets; W2S; DX11 ImGui overlay; ESP/aim/triggerbot/no-recoil/bhop; WriteProcessMemory/SendInput; INI config; cheat / game:csgo [External])
- [csgo-cheat-base](entities/csgo-cheat-base.md) — CS:GO internal cheat base (MinHook, ImGui, engine prediction, glow ESP, interface wrappers; designer1337 [Internal])
- [CSGO-Cheats](entities/csgo-cheats.md) — tutorial external CS:GO examples (HeathHowren; C++ Visual Studio; window/process attach, memory R/W wrappers, offset maintenance; beginner manipulation + defender cheat-pattern study; cheat / game:csgo [External])
- [csgo-internal-base](entities/csgo-internal-base.md) — CS:GO internal cheat base (CreateInterface, VMT hooks, netvars, pattern scan, ImGui; cheat / game:csgo)
- [csgo-internal](entities/csgo-internal.md) — CS:GO internal multi-feature cheat (Spelchure; C++17; aimbot, ESP/snaplines, bunnyhop, anti-flash; injected internal; cheat / game:csgo [Internal])
- [csgo-kns](entities/csgo-kns.md) — CS:GO internal cheat (VMT hooks, interface pointers; ESP/aimbot/bhop/skin changer; cheat / game:csgo)
- [csgo-linux-cheat-sdk](entities/csgo-linux-cheat-sdk.md) — Linux CS:GO cheat SDK (C++; render/net/mod; cheat / game:csgo)
- [CSGO-Loader](entities/csgo-loader.md) — CS:GO C++ cheat loader with PHP auth backend (HWID check, time-based license, web panel for injected DLL access; gmh5225 [Loader])
- [csgo-main-internal](entities/csgo-main-internal.md) — archived CS:GO internal cheat base (Neaxic; C++; Visual Studio DLL; ESP, glow, triggerbot, bunny hop, third-person, world-to-screen; ImGui + DirectX 9 menu; learning reference; cheat / game:csgo [Internal])
- [csgo-nixware-csgo](entities/csgo-nixware-csgo.md) — leaked Nixware CS:GO internal (aimbot, ESP, movement hacks, skin changer; full CS:GO SDK + ImGui overlay; gmh5225 [Nixware])
- [csgo-xenforo-loader](entities/csgo-xenforo-loader.md) — CS:GO C++ cheat loader with XenForo forum auth (license verification, subscription check, DLL download + injection; P2C distribution research; flowxrc [Loader])
- [csgo-offsets](entities/csgo-offsets.md) — CS:GO memory offsets (gmh5225; netvars / interfaces / signatures; patch-updated; cheat / game:csgo [Offset])
- [csgo-ormbunke-x86](entities/csgo-ormbunke-x86.md) — CS:GO internal cheat base (x86; DirectX 9 + Kiero + MinHook; ImGui menu; ESP/aimbot/movement/trigger; educational scaffold; ViddeBoiiii [Imgui Menu])
- [csgo-p2c-dumper](entities/csgo-p2c-dumper.md) — CS:GO internal P2C process memory dumper (signature / hook-JMP / allocation diff; decoded assembly + handler offsets; Dump lane; ch4ncellor)
- [csgo-sdk](entities/csgo-sdk.md) — CS:GO Source 1 SDK headers (gmh5225 + bloesway/csgo_sdk; classes / netvars / interfaces / rendering / networking / animation; cheat / game:csgo [SDK])
- [csgo-sdk-improved](entities/csgo-sdk-improved.md) — improved CS:GO Source 1 SDK (corrected classes, extra interfaces, fuller netvars; cheat / game:csgo [Internal])
- [csgo-src](entities/csgo-src.md) — leaked CS:GO Source engine mirror (PiMoNFeeD; networking/rendering/game logic/client-server architecture; Game Engine / source [Leaked CSGO])
- [csgocrosshair](entities/csgocrosshair.md) — web CS:GO crosshair generator (Skarbo; jQuery/KineticJS; visual preview, presets, console config export, keybind setup; cheat / game:csgo [Crosshair Generator])
- [csgo2-cheat](entities/csgo2-cheat.md) — CS2 internal cheat: rendering / SDK generation / hooking (imnotdatguy + gmh5225 [Internal]; C++; cheat / game:cs2)
- [solace-csgo](entities/solace-csgo.md) — CS:GO internal cheat (modern C++; ImGui menu; ESP, aimbot, triggerbot, movement, skin changer; Source SDK hooking; emilyinure [Internal])
- [solana-sbpf-rlib](entities/solana-sbpf-rlib.md) — Solana sBPF rlib signature packs for IDA/Ghidra/Binary Ninja (Python; cheat / IDA signature database)
- [CSGOSimple](entities/csgosimple.md) — spirthack Internal CS:GO baseline (MarkHC fork; cheat / game:csgo)
- [csso-src](entities/csso-src.md) — CS:GO mod Source tree (client/server / weapons / movement / engine interfaces; Game Engine)
- [CSSFontFace-Exploit](entities/cssfontface-exploit.md) — WebKit CSSFontFace UAF (PS4/PS5 browser; jailbreak / PlayStation)
- [cstrike-hack](entities/cstrike-hack.md) — internal CS:GO hack (binkynz; C/C++; rendering / networking / animation; cheat / game:csgo)
- [cstrike2-hack](entities/cstrike2-hack.md) — Rust internal CS2 cheat base (modular crates; DX11 + egui menu; MinHook; pattern scanning; interfaces/hooks/settings/rendering; W1lliam1337; [Internal])
- [cstrike15_src](entities/cstrike15-src.md) — leaked partial CS:GO Source tree (client/server / weapons / net; Game Engine)
- [CTRComposer](entities/ctr-composer.md) — raw Luma3DS .3gx overlay/cheat engine (self-rendered UI; any Title ID template)
- [CTTrainer](entities/cttrainer.md) — standalone Windows ImGui/DX11 trainer (abhijeetadarsh; loads CE `.CT` tables; module offsets, pointer chains, value freeze; 32/64-bit attach; external trainer without CE)
- [custom-game-engines](entities/custom-game-engines.md) — curated custom game engines list (2020 study; Game Engine / guide)

- [CounterStrikeSource-Linux-Trainer](entities/counterstrikesource-linux-trainer.md) — Linux external CS:S trainer (movement / info display)
- [CovertThread (brew02)](entities/covert-thread.md) — covert system threads via page-table module removal, custom IDT address space, NMI-blocked inspection; direct kernel fn exec (Windows Ring0 / anti-forensic research)
- [cpp-3d-game-tutorial-series](entities/cpp-3d-game-tutorial-series.md) — C++ DirectX 11 3D game tutorial (Win32 windowing; DX11 graphics; entity-component + input; staged engine modules vs game project; tagged milestones; README [DirectX]; PardCode)
- [cpp-android-basic-samples](entities/cpp-android-basic-samples.md) — Google Play Games C++ SDK sample games (Game Develop / Android source)
- [cpp-anti-debug](entities/cpp-anti-debug.md) — Windows C++ anti-debugging library (BaumFX; PEB/API/exception/timing/debug-register checks; granular functions + combined runtime security-check entry; anti-tamper prototyping and debugger-detection study; Anti Debugging)
- [cpp-game-engine-book](entities/cpp-game-engine-book.md) — C++/OpenGL hands-on engine book (chapter samples; rendering→animation/GUI/audio/profiling/multithreaded rendering; Lua, Blender, FMOD; Game Engine / guide; ThisisGame)
- [cpp-veh-dbi](entities/cpp-veh-dbi.md) — C++ VEH-based lightweight DBI (Cheat / dynamic binary instrumentation)
- [CPUZ-DSEFix](entities/cpuc-dsefix.md) — CPU-Z BYOVD DSE bypass (`g_CiEnable`/`g_CiOptions` patch; unsigned driver load; PatchGuard risk; SamLarenN; cheat / CPU-Z)
- [cpuz](entities/cpuz.md) — CPU-Z vulnerable-driver exploit (XP–Win10 1607; Cheat Vulnerable Driver)
- [cpuengine](entities/cpuengine.md) — real-time CPU-only 3D software renderer (FHowington; C++17 + SDL2; rasterization, depth testing, shading models, post-processing, OBJ/TGA; scalar + SIMD + thread-pool triangle distribution; interactive camera/HUD; graphics education and rendering performance research)
- [cthash](entities/cthash.md) — constexpr SHA-2/SHA-3 hashes + `cthash::literals` hash_value suffixes (AC Compile Time)
- [CVE-2015-2291](entities/cve-2015-2291.md) — Intel `iqvw64e.sys` Nal-driver IOCTL PoC (arbitrary kernel R/W; NtQuerySystemInformation base leak → LPE; kdmapper-family backend; gmh5225)
- [CVE-2017-9769](entities/cve-2017-9769.md) — Razer Synapse `rzpnk.sys` IOCTL → ZwOpenProcess PoC (arbitrary process handle; unprivileged; v2.20.15.1104; gmh5225)
- [CVE-2018-19320](entities/cve-2018-19320.md) — Gigabyte `gdrv.sys` CVE-2018-19320 DSE bypass (ring-0 memcpy IOCTL → `CI!g_CiOptions` leak/toggle; gmh5225)
- [CVE-2018-19320-LPE](entities/cve-2018-19320-lpe.md) — Gigabyte `gdrv.sys` CVE-2018-19320 SYSTEM LPE (arbitrary alloc/write IOCTLs; Win10 x64 21H1; gmh5225)
- [CVE-2019-2215](entities/cve-2019-2215.md) — Binder epoll UAF temporary root (Pixel 2/XL; Sep 2019 firmware; ARM64 NDK)
- [CVE-2020-0041](entities/cve-2020-0041.md) — Binder transaction-buffer bounds-check LPE (Pixel 3; Feb 2020 firmware; kernel R/W + root; Blue Frost Security full Chrome→kernel chain)
- [CVE-2020-14974](entities/cve-2020-14974.md) — IObitUnlocker `IObitUnlocker.sys` IOCTL file-manipulation PoC (unlock/delete/rename/copy/move in-use files; low privilege; gmh5225)
- [CVE-2020-36603](entities/cve-2020-36603.md) — HoYoVerse `mhyprot2.sys` Genshin Impact AC driver LPE (unprivileged calls → SYSTEM; CVE tracking; gmh5225)
- [CVE-2021-1961](entities/cve-2021-1961.md) — Qualcomm QSEECOM/TrustZone kernel R/W (Widevine ION; Pixel 3; SELinux off)
- [CVE-2021-21551](entities/cve-2021-21551.md) — Dell `dbutil_2_3.sys` signed-driver LPE (IOCTL kernel R/W → SYSTEM token theft; gmh5225)
- [CVE-2021-21551 PoC](entities/cve-2021-21551-poc.md) — Dell `dbutil_2_3.sys` reusable kernel-memory toolkit (virtual/phys R/W IOCTLs; EPROCESS/page-table demos; gmh5225)
- [CVE-2022-3699](entities/cve-2022-3699.md) — Lenovo `LenovoDiagnosticsDriver.sys` IOCTL validation LPE (arbitrary kernel memory access; gmh5225)
- [CVE-2022-42045](entities/cve-2022-42045.md) — Zemana `amsdk.sys` in-driver `.hook` section code injection (IOCTL stub plant + trigger; gmh5225)
- [CVE-2022-42046](entities/cve-2022-42046.md) — `wfshbr64.sys` IOCTL improper access control LPE (SYSTEM; gmh5225)
- [CVE-2024-0044](entities/cve-2024-0044.md) — Android 12/13 app data-directory access via crafted payload (Application CVE)
- [CVE-2024-35250](entities/cve-2024-35250.md) — `ks.sys` untrusted pointer dereference LPE via KSPROPERTY (Win10/11; gmh5225)
- [CVE-2024-49138 PoC](entities/cve-2024-49138-poc.md) — `CLFS.sys` LPE via kernel R/W + token swap (Win11; MrAle98)
- [CVE-2024-26229](entities/cve-2024-26229.md) — `csc.sys` improper address validation LPE via METHOD_NEITHER IOCTL (Win11 22H2; gmh5225)
- [CVE-2024-21338](entities/cve-2024-21338.md) — `appid.sys` kernel IOCTL LPE (Win11 22H2 Build 22621; XSS PWN-Day; gmh5225)
- [CVE-2025-21333](entities/cve-2025-21333.md) — Hyper-V `vskrnlintvsp.sys` heap overflow LPE (IoRing pool spray / pipe attr R/W)
- [CVE-2025-21333 PoC](entities/cve-2025-21333-poc.md) — gmh5225 Win11 23H2 LPE PoC for Hyper-V `vkrnlintvsp.sys` heap overflow (ITW-exploited CVE)
- [CVE-2025-24990 PoC](entities/cve-2025-24990-poc.md) — Agere Modem `ltmdm64.sys` METHOD_NEITHER IOCTL abuse → kernel R/W (IoRing LPE variant; BYOVD)
- [CVE-2025-26125](entities/cve-2025-26125.md) — IObit `IMFForceDelete.sys` MSI-based file/folder deletion LPE → SYSTEM (ZeroMemoryEx)
- [PoC CVE-2025-38352](entities/poc-cve-2025-38352.md) — posix-cpu-timers thread-group-exit vs timer-fire race UAF (LTS 6.12.33; Sep 2025 Android bulletin ITW)
- [CVE-2026-40369-EXPLOIT](entities/cve-2026-40369-exploit.md) — Win11 24H2–25H2 LPE via NtQuerySystemInformation class 253 (Chrome sandbox)
- [CVE-2026-43499-popsicle](entities/cve-2026-43499-popsicle.md) — Xiaomi popsicle Android 16 LPE (CVE-2026-43499; LD_PRELOAD; uid 0; same CVE family as [[ghostlock-oneplus]]/[[ghostlock-app]])
- [CVE-2026-64560 Analysis](entities/cve-2026-64560-analysis.md) — posix-cpu-timers non-leader exec() race UAF trigger PoC (Linux x86_64 + Android GKI arm64; patch verification)
- [CVE-2026-XNU-AIO-KEVENT-UAF](entities/cve-2026-xnu-aio-kevent-uaf.md) — XNU kern_aio.c AIO+kevent UAF from sandbox app (panic/double-free; iOS 26.2, patched 26.3; crazymind90)
- [cve-maker](entities/cve-maker.md) — Python CLI: multi-DB CVE/exploit search (keyword/product/CVE ID; severity + links)
- [CVE2PoC](entities/cve2poc.md) — Python: aggregate public PoCs/exploits for a CVE ID (GitHub, ExploitDB, Nuclei, Metasploit; CVSS/EPSS/CISA KEV; Docker labs, reports; 0liverFlow)
- [CVEAC-2020](entities/cveac-2020.md) — EAC kernel-module vuln PoC (WDK; Integrity Checks)
- [custom-data-ptr-swap-sample](entities/custom-data-ptr-swap-sample.md) — NtQueryLicenseValue KM↔UM channel (C++; driver development; cheat / driver communication; gmh5225)
- [custom-dpapi](entities/custom-dpapi.md) — C++ PoC; undocumented DPAPI RPC via NdrClientCall3 to lsass protected_storage; bypasses CryptUnprotectData; dpapi.dll RE (EvilBytecode)
- [custom-VEH](entities/custom-veh.md) — RtlpCallVectoredHandlers hook for fast pre-vanilla VEH registration (Ring3 callback research; gmh5225)
- [cunthook](entities/cunthook.md) — TF2/Source open hacking framework (full SDK; hooks / ESP / aimbot / gameplay mods; internal interfaces + Boost; Linux; gmh5225)
- [CUTracer](entities/cutracer.md) — CUDA kernel instruction DBI (GPU-side trace + host-side analysis; Cheat / DBI)
- [Cyberpunk Better Shaders (Callisto SSS)](entities/cyberpunk-better-shaders.md) — Callisto SSS Cyberpunk 2077 path-traced skin mod; Callisto BRDF + reshaped SSS; `VkLayer_callisto_spvswap` SPIR-V hot-swap via Proton/Linux + RED4ext CopyTextureRegion hooks; DXIL fingerprint match; SPIR-V census/patch/A-B toolchain; skin-pixel gating (BlaneC; Vulkan / graphics modding)
- [CyberAntLoader](entities/cyber-ant-loader.md) — cheat loader with auth, HWID binding, license verification, and anti-detection inject pipeline (gmh5225)
- [CYBERSEC 2023 BYOVD Demo](entities/cybersec2023-byovd-demo.md) — CYBERSEC 2023 Taiwan RTCore64.sys BYOVD chain (DSE nullify → unsigned driver load; blind 360 Total Security ObRegisterCallbacks + notify callbacks; gmh5225)
- [data-communication](entities/data-communication.md) — kernel `.data` pointer swap KM↔UM comms (Sinclairq; C++ driver + usermode; pattern scan; memory R/W + process base; README [NtCompareSigningLevels])
- [double-data-pointer](entities/double-data-pointer.md) — double-pointer KM↔UM channel for manually mapped driver; virtual/physical R/W; PFN + pool artifact cleanup (Astronaut00; C++; cheat / driver communication)
- [data-ptr-swap](entities/data-ptr-swap.md) — NtSetCompositionSurfaceAnalogExclusive kernel channel (C/C++)
- [DataptrHooks](entities/dataptrhooks.md) — `.data` pointer-hook kernel PoC on NtConvertBetweenAuxiliaryCounterAndPerformanceCounter; CFG call-site notes (0mWindyBug; driver communication)
- [dataptrswap-driver](entities/dataptrswap-driver.md) — win32kbase data-ptr swap on NtSetCompositionSurfaceAnalogExclusive; MmUnloadedDrivers cleanup (gmh5225; cheat driver)
- [DataPtrHookWin11](entities/dataptrhookwin11.md) — NtUserSetGestureConfig Win11 data-ptr hook (driver communication)
- [d-process](entities/d-process.md) — Linux decoy process generator (on-demand C compile + nohup; arbitrary process names; anti-cheat / tracker enumeration research)
- [DCMB](entities/dcmb.md) — dynamic kernel callback-list discovery without hardcoded offsets/signatures (GetRektBoy724; C driver; process/thread/image/registry/object/minifilter notify; debug-output learning PoC; AC/EDR callback inspection)
- [Dainsleif](entities/dainsleif.md) — simple internal CS:GO cheat (RE training; cheat / game:csgo)
- [Dani's Nightmare](entities/danis-nightmare.md) — BepInEx Harmony mod for Muck (C# runtime debug/cheat chat commands; player/enemy/item/powerup/time manipulation; Tab autocomplete from live memory; mod dev / RE / engine stress-test; PlinKuuu)
- [DakotaAC](entities/dakotaac.md) — Spigot/Paper Minecraft AC (ProtocolLib + Citizens2; combat/movement/inventory modules; YAML kick/ban)
- [Darken Anti-Cheat](entities/darken-anticheat.md) — kernel AC PoC (driver comm / integrity / sigscan / debugger / overlay; C/C++)
- [Dark Souls III Cheat Engine Guide](entities/dark-souls-iii-cheat-engine-guide.md) — The Grand Archives DS3 Cheat Engine table guide (cheat / game:dark souls [Cheat Engine])
- [darksword-kexploit-fun](entities/darksword-kexploit-fun.md) — DarkSword kernel r/w playground (iOS 17.0–26.0.1; sandbox/SSV/PAC; ObjC/C)
- [darwin-vm](entities/darwin-vm.md) — QEMU Darwin VM boot iOS/macOS to root shell; virtual iPhone 12–17 (A14–A19) and M1–M5 Macs; SPTM/TXM/MIE kernel debug; no GUI/SpringBoard (jprx; IOS Emulator)
- [dayu](entities/dayu.md) — Open/HarmonyOS `.abc` parser and decompiler (mobile RE; maintenance not guaranteed)

- [DayZ-Cheat](entities/dayz-cheat.md) — DayZ external cheat (ESP, aimbot, item ESP; external memory reads + overlay; gmh5225)
- [dayz-mcp](entities/dayz-mcp.md) — DayZ MCP server (53 tools; Enforce Script bridge; server-authoritative world control, telemetry, automated in-game testing; willy92wins)
- [dayz-server-battleye-remover](entities/dayz-server-battleye-remover.md) — DayZ server BE disable patch (C++ pattern scan + binary patch; reprocessable after updates; JonathanEke; Disable battleye)
- [DayZzz](entities/dayzzz.md) — DayZ cheat/modding: SDK generation + overlays (C/C++)
- [DbgViewEx](entities/dbgviewex.md) — ETW event + system debug-log capture (emlinhax; early-stage; cheat / RE telemetry)
- [DbgNexum](entities/dbgnexum.md) — Debug API + HWBP shellcode injector; file-mapping transfer; no WPM/RPM/VirtualAllocEx (dis0rder0x00)
- [D3D11 Wallhack](entities/d3d11-wallhack.md) — DX11 hook-based wallhack (DrNseven; C++; Detours + ImGui; DLL inject + render-path hooks; menu-driven stride/index-count logging for target models; 32/64-bit Windows; cheat prototyping / graphics pipeline analysis)
- [D3D11 World-to-Screen Finder](entities/d3d11-worldtoscreen-finder.md) — DX11 W2S projection finder (DrNseven; C++; MinHook + ImGui overlay; brute-force matrix/CB combos; model-position text + matched-target logging; ESP/aim bootstrap; game security research)
- [D3D12 Hook ImGui](entities/d3d12-hook-imgui.md) — DX12 ImGui overlay hook sample (DrNseven; C++; MinHook-style interception; DLL inject + frame hook + real-time menu; graphics API research / overlay prototyping; DirectX Hook [DX12 Imgui])
- [D3D12Renderer](entities/d3d12renderer.md) — DX12 renderer sample (raytracing / mesh shaders; DirectX / guide)
- [D3D9On12](entities/d3d9on12.md) — Microsoft D3D9 usermode DDI → D3D12 mapping layer (DirectX Compatibility)
- [D2D Overlay](entities/d2d-overlay.md) — header-only Direct2D external overlay library (`DirectOverlay.h`; simple API + performance; coltonon)
- [D2GI](entities/d2gi.md) — Hard Truck 2 DirectDraw7/D3D7→D3D9 wrapper (modern resolutions, MSAA, anisotropic filtering, graphics fixes, widescreen hooks; REDPOWAR; DirectX Compatibility)
- [d3d12book](entities/d3d12book.md) — DX12 educational sample (shader/rendering/animation; DirectX / guide)
- [d3dhook_imgui](entities/d3dhook-imgui.md) — D3D/OpenGL/Vulkan ImGui hook base (C/C++; x86/x64; DirectX Hook)
- [d3doverlay-nvidia-hijack](entities/d3doverlay-nvidia-hijack.md) — D3D9 ImGui overlay via NVIDIA GeForce window hijack (Brattlof; click-through; external game tooling)
- [UniversalHookX](entities/universalhookx.md) — universal DX9–12/OpenGL/Vulkan ImGui hook library (dummy-device vtable bootstrap; compile-time backend selection; bruhmoment21)
- [Universal Dear ImGui Hook](entities/universal-dear-imgui-hook.md) — Windows D3D9–12 + partial Vulkan Dear ImGui overlay hook (backend-specific hooks; toggleable in-process menu; overlay prototyping / debug UI; Sh0ckFR)
- [d810](entities/d810.md) — CKCat; Python IDA Pro microcode deobfuscation at decompilation time; configurable extensible rule sets (malware/game-security RE)
- [d810-ng](entities/d810-ng.md) — d810 next-gen; deobfuscate at decompilation time (Fix OLLVM)
- [daila](entities/daila.md) — ChatGPT decompiler AI assistant (DAILA; cheat / IDA Plugins; human–LLM RE research)
- [DeathSleep](entities/death-sleep.md) — thread terminate/restore sleep obfuscation; page protection during no-execution (AC page protection)
- [WProtect (DeDf)](entities/dedf-wprotect.md) — Windows PE code virtualizer (disassemble→VM bytecode, jump stubs, new section; AsmJit + udis86; software protection / VM anti-tamper research; DeDf)
- [DeepSleep](entities/deepsleep.md) — x64 Gargoyle variant; ROP-only + PIC sleep-hide (no APCs; page protection)
- [debug-remover](entities/debug-remover.md) — C/C++ strip debug info from binaries (Anti Cheat → Binary Packer; anti-RE hardening)
- [debugoff](entities/debugoff.md) — Linux Rust anti-analysis/anti-debug library (0xor0ne; direct syscalls without libc; syscall obfuscation; chained/randomized ptrace validation with tamper termination; binary hardening against RE; Anti Debugging / Linux)
- [deadcell-csgo](entities/deadcell-csgo.md) — CS:GO internal cheat framework full source (EternityX; C++; aiming, visuals, config, menu; build-and-study learning codebase; legacy Source 1; cheat / game:csgo)
- [Dead-Anticheat](entities/dead-anticheat.md) — FiveM server-side Lua anticheat (CitizenFX; noclip/spectate/godmode/mod-menu globals; JSON bans + Discord webhooks; Dead-Scripts)
- [deadlock-anti-cheat](entities/deadlock-anti-cheat.md) — UrnIt user-mode Deadlock session AC (process/screenshot/key/HWID logging; Discord webhook; tournament review)
- [de4py](entities/de4py.md) — Python deobfuscation/analysis framework (Fadi002; GUI + CLI; multi-obfuscator support; packed-artifact analyzers, hash/string inspection, behavior monitoring, process-integrated execution; PySide6 + native Windows injection/hook helpers; malware/RE workflows; Toolkit for python reverse engineering)
- [decbench](entities/decbench.md) — Python decompiler benchmark suite (CFG GED, DWARF type match, recompile bytematch; angr/Ghidra/IDA/Binja/r2dec/dewolf + LLM backends; Debian/embedded/firmware/malware corpora; Noelo-Lab)
- [deREferencing](entities/dereferencing.md) — Python IDAPython plugin: live-debug register/stack views with dereferenced pointer chains and color-coded memory annotations (danigargu; x86/ARM/MIPS; PEDA/GEF/pwndbg-like; Cheat IDA Plugins)
- [Deep Learning Anti-Cheat For CSGO](entities/deep-learning-anti-cheat-csgo.md) — CS:GO OSS AC pipeline (memory/code-integrity/process/debugger checks + network packet validation; detection-to-response; gmh5225; Open Source Anti Cheat System)
- [DeepAimDetector](entities/deepaimdetector.md) — 87andrewh SourceTV demo LSTM prototype (Go parser + Python notebooks; view-angle delta + crosshair-to-target angular features around attack events; legit-aimbot gunfight classification; anti-cheat research experiment; Anti Cheat / Deep Learning)
- [DeepZero](entities/deepzero.md) — 416rehman automated Windows kernel driver vulnerability research framework (parse/decompile at scale; AI-agent exploitable IOCTL analysis; BYOVD/LOLDriver attack-surface study)
- [deepwiki-mcp](entities/deepwiki-mcp.md) — DeepWiki docs MCP server (query/retrieve wikis for AI agents; Game Develop / MCP)
- [Def1nit3lyN0tAJa1lbr3akTool](entities/def1nit3lyn0tajailbreaktool.md) — iOS 16.0–16.6.1 jailbreak tool (kernel exploitation; trustcache build paths; Objective-C/C; post-exploitation workflows; KpwnZ)
- [DEF CON Dreamcast PlanetWeb Research](entities/defcon-dreamcast-planetweb-research.md) — DEF CON demo; PlanetWeb v3.0 Eden RCE + `setRawDeviceID` memory write + MIME stack overflow → native SH-4 DOOM without debugger; Python DNS/HTTP/POP3 + Java staging + Flycast patch; vintage console browser attack-surface RE (piffd0s; Cheat)
- [defender-control](entities/defender-control.md) — C# GUI: Defender real-time / Tamper Protection / sample-submission toggles (registry/service)
- [Dead By Daylight Copy](entities/dead-by-daylight.md) — UE4 asymmetric-horror clone (physics / animation / asset pipelines; Game Develop / source)
- [Delamain](entities/delamain.md) — headless JADX MCP server (APK/DEX/AAB; Frida hooks; AI agents)
- [DelphiHelper](entities/delphi-helper.md) — x86/x86_64 Delphi binary analysis tooling (eset; cheat / IDA Plugins; py7zr setup)
- [DelphiReSym](entities/delphiresym.md) — Ghidra/pyghidra Delphi symbol recovery (function signatures, params, vtables from compiler metadata; modern Delphi; malware/legacy RE; WenzWenzWenz)
- [DELBOT-Mouse](entities/delbot-mouse.md) — deep learning human-vs-bot mouse movement classifier (Bureau404 internship; University of Mons; Detection:triggerbot & aimbot)
- [Demo](entities/demo.md) — JingMatrix Android demo app for runtime user-space library injection detection (Kotlin + native C++/CMake; soinfo linked-list, virtual memory map inspection, module unload counters; Zygisk injection focus; mobile AC research)
- [Destiny](entities/destiny.md) — MapleStory v0.83 C# server emulator (Fraysa; center/login/game multi-server architecture; Lua NPC/portal scripting; SQL-backed account/world state; Visual Studio solution; private-server dev / MMORPG protocol research; Private Server-GMS-083 C#)
- [demumble](entities/demumble.md) — Itanium/MSVC (+ D/Rust/Swift) demangler; c++filt/undname replacement (RE tools)
- [Demystifying-PatchGuard](entities/demystifying-patchguard.md) — educational C/C++ walkthrough of PatchGuard
- [delete-self-poc](entities/delete-self-poc.md) — C PoC; delete locked or running executable from disk via primary-stream rename + SetFileInformationByHandle disposition (LloydLabs; handle sequencing / locked-file removal; anti-forensics / secure cleanup / defensive detection engineering)
- [dezlock-dump](entities/dezlock-dump.md) — runtime schema + RTTI extraction for Source 2 (Deadlock, CS2, Dota 2); live-process dump; WebSocket bridge + schema browser; no source2gen required
- [decryption-dumper](entities/decryption-dumper.md) — Windows C++ runtime encrypted-pointer decrypt routine dumper (Nuxar1; debugger single-step + Zydis; register/stack dependency trace; pattern scan + context restore; cheat / [Dump])
- [digital-sdk](entities/digital-sdk.md)
- [Diligent Engine](entities/diligent-engine.md) — cross-platform low-level 3D graphics library and rendering framework (D3D11/12, Vulkan, Metal, OpenGL/ES, WebGL, WebGPU; HLSL; modular C++ multithreaded command/resource workflows + render-state tooling; Rendering library)
 — CS:GO internal cheat base (MinHook, ImGui, ESP, bunnyhop, engine prediction, autowall, chams; CreateMove + D3D reset hooks; interfaces/netvars/rendering modules; W1lliam1337)
- [Detours](entities/detours.md) — Microsoft Windows API monitoring/instrumentation (inline hook/trampoline; cheat / hook research)
- [DetoursNT](entities/detoursnt.md) — NTDLL-only Microsoft Detours (no Win32; cheat / hook research)
- [Dobby](entities/dobby.md) — lightweight multi-platform hook framework (C/C++; DirectX / Windows game tooling; cheat / hook research)
- [DIE-engine-web](entities/die-engine-web.md) — Detect It Easy in-browser (WASM PE/ELF/Mach-O packer/compiler ID)
- [DFIRTriage](entities/dfirtriage.md) — Python Windows DFIR triage (process/network/registry/event logs/prefetch)
- [DFoundryFX](entities/dfoundryfx.md) — UE5 plugin: in-viewport performance tooling (customizable metric charts, shader compile monitoring, STAT command controls; no extra level actors; C++ modules; runtime diagnostics; DarknessFX; Plugins:Unreal)
- [DioProcess](entities/dioprocess-private.md) — Windows internals research (Rust/Dioxus + KM + UEFI; DSE/KPP)
- [Direct3D9 Overlay](entities/direct3d9-overlay.md) — D3D9 proxy-DLL wrapper + Detours-style overlay (on-screen console, text feed, plugin modules; single-player modding; SeanPesce)
- [Direct3DHook](entities/direct3d-hook.md) — C#/.NET D3D9–11 EasyHook inject + SharpDX capture/overlays (remoting CaptureInterface)
- [DirectXHook](entities/directxhook.md) — DX11/12 Present hook + in-game overlay framework (C++; dinput8 DLL)
- [DirectX11Hook](entities/directx11hook.md) — DX11 Present + DeviceContext hook + ImGui overlay base (C++; DirectX Hook)
- [directx11-with-windows-sdk](entities/directx11-with-windows-sdk.md) — Windows SDK DX11 tutorial + samples (MKXJun; progressive rendering + ImGui; CMake/VS; triangle → shadow mapping/deferred shading/compute; README [DX11 zh]; DirectX / guide)
- [DirectXMath](entities/directxmath.md) — Microsoft SIMD inline C++ vectors/matrices/quaternions + collision (SSE–AVX2/NEON; Mathematics)
- [Divert (WinDivert)](entities/divert.md) — WFP kernel-driver packet capture/divert; user-mode intercept/modify/drop/inject (C; cheat / Packet Divert; basil00)
- [Diglett](entities/diglett.md) — kernel-mode stealth PoC; hide system threads + alter entry-address visibility; driver + client (Rwkeith; README Hide Kernel Thread)
- [Dino Printer](entities/dino-printer.md) — Meteor Client Fabric addon; Litematica schematic auto-build; BlockState matching + multi-point raytracing + hack rotation; built from scratch; anti-cheat-aware placement timing for strict/anarchy servers (Gingerbeard5773; cheat / game:minecraft)
- [DirtyPipe-Android](entities/dirtypipe-android.md) — Pixel 6 Dirty Pipe (CVE-2022-0847) permanent Magisk v24.3 root
- [DirtyPipeRoot](entities/dirtypiperoot.md) — Pixel 6 Dirty Pipe (CVE-2022-0847) one-click temporary root
- [DirtySepolicy](entities/dirty-sepolicy.md) — LSPosed Android App Zygote SELinux probe (AIDL permissive policy injection without root; detect userspace su; Detection:Android root)
- [dirty-zero](entities/dirty-zero.md) — iOS XNU kernel KRW exploit (CVE-2025-24203; jailbreak-chain primitive)
- [dirty-vanity](entities/dirty-vanity.md) — RtlCreateProcessReflection process-fork injection PoC; fork inherits shellcode without WPM (deepinstinct; EDR-evasion research)
- [Direct EFI Apex Cheat](entities/direct-efi-apex-cheat.md) — Apex user-mode client + UEFI runtime; runtime variable hooks + EFI-bridged kernel pointers; glow/aim (TheCruZ; firmware-assisted AC bypass; cheat / game:apex legends)
- [dlac](entities/dlac.md) — LaihoE CS:GO demo-analysis deep-learning anti-cheat (Python + Go parser; ONNX models; per-shot suspicious-aim prediction; CSV/terminal export; tunable confidence; replay-based behavioral detection research; Anti Cheat / Machine Learning)
- [disable-call-recording-bookrestore](entities/disable-call-recording-bookrestore.md) — iOS bl_sbx file-exploit tool to suppress call-recording notification sounds (system audio asset replace; cheat / iOS file explorer)
- [disable-threat-tracing](entities/disable-threat-tracing.md) — C ETW Testing / threat-tracing disable (AC stress-testing)
- [disabling-hyper-v](entities/disabling-hyper-v.md) — Win10 Hyper-V / Device Guard / Credential Guard teardown guide (Microsoft hardware readiness tool → disable HVCI + VBS; gmh5225; Disable Hyper-V)
- [DirectInput (adspro15)](entities/directinput.md) — kbd/mou class-service input injection (WDK driver + UM; bypass SendInput; game automation / AC input-path research)
- [dk](entities/dk.md) — WinDbg extension; refactored tokenext; token/heap pointer SVG overlays (WinDbg Plugins)
- [DisableParallelLoader](entities/disable-parallel-loader.md) — x64dbg plugin: disable Win10+ parallel DLL loader (`LdrpMapAndSnapWork`; phnt; sequential load order)
- [DisableNvidiaScreenshot](entities/disablenvidiascreenshot.md) — DWM anti-screenshot (C++; NVIDIA / capture lane; Cheat Anti Screenshot)
- [discord-dpi-bridge](entities/discord-dpi-bridge.md) — user-space ByeDPI SOCKS5 + DoH + TCP relay + hosts/Chromium proxy flags for Discord client/updater; PowerShell install/status/fix/uninstall + JSON config; avoids WinDivert kernel drivers that break EAC/Denuvo (egeorcun; Some Tricks / Windows Ring3)
- [discord-overlay-hook](entities/discord-overlay-hook.md) — Discord overlay DX11 hook sample (C++; rendering / modding / hooking)
- [disrobe](entities/disrobe.md) — Rust modular static recovery platform; unpack/deobfuscate/decompile native PE packers, Python protections (PyArmor/PyInstaller), APKs, WASM, JVM/.NET/Go/JS bytecode, and nested archives; Ghidra integration; Python/TypeScript bindings; benchmark harnesses (1-3-7; cheat / RE Tools)

- [dll-hot-reload](entities/dll-hot-reload.md) — injectable DLL hot-reload wrapper (ergrelet; reload payload on disk change; cheat / injection:windows)
- [dll-ollvm](entities/dll-ollvm.md) — LLVM 18 pass plugin (sub/bcf/fla/trim) for manually mapped Windows DLLs; tess-obf pipeline; per-function markers; evades AC allocation/table pattern scans (R7flex; Obfuscation Engine)
- [DllNotif](entities/dllnotif.md) — `LdrRegisterDllNotification` Ring3 callback research (blaquee; C++/C++; modding; anti-cheat / defensive Ring3 callback lane)
- [DLLHSC](entities/dllhsc.md) — Windows DLL hijack scanner (ctxis; Visual Studio 2019; cheat / DLL Hijack research)
- [DLLSpy](entities/dllspy.md) — CyberArk Windows DLL hijack vulnerability scanner (missing deps, writable dirs, unsafe search paths; audit reports)
- [DLL-Hijack-ExportDumper](entities/dll-hijack-export-dumper.md) — PE export-table dump → proxy-DLL forwarding stubs for search-order sideload (gmh5225; Cheat / DLL Hijack)
- [DLLirant](entities/dllirant.md) — automated Windows DLL search-order hijack discovery (proxy DLL + load monitor; Sh0ckFR historical mirror)
- [Cheat Engine](entities/cheat-engine.md) — open-source memory scan/debug/disasm IDE (Lua, speedhack, code injection, cheat tables, trainer maker; user-mode + DBVM kernel driver; Delphi/Pascal + C)
- [Cheat Engine Tables](entities/cheat-engine-tables.md) — large forum-curated CE `.CT` archive (Hexorg; thousands of game tables; pointer chains, AOB scans, Lua scripts, trainers; offline-focused; cheat / [Cheat Engine])
- [CheatCheck](entities/cheatcheck.md) — Fabric server-side Minecraft mod (Java; **26.1.x**; `/cheatcheck` spectate + safemode moderation; freeze/vanish/inventory/radar; `/report` + reach/x-ray/speed heuristics; tempban/pardon presets; vanilla-client compatible; EliGamer154; Anti Cheat / game:minecraft)
- [cheat-engine-undetectable](entities/cheat-engine-undetectable.md) — modified CE with user-mode evasion (direct syscalls, PE mutation), BYOVD kernel bridge (CR3 R/W, ObCallback bypass, handleless hide); AC research (NulledNah; Free Pascal/Lazarus)
- [Cheat Engine DMA Plugin](entities/cheat-engine-dma-plugin.md) — CE plugin: DMA R/W via LeechCore/PCILeech FPGA; replaces process memory path (C/C++)
- [CheatEngine DMA](entities/cheatengine-dma.md) — Visual Studio C++ CE plugin (Metick; process attach, R/W, search/browse, module/thread enum, pointer scan; DMA hardware path; cheat / CheatEngine DMA)
- [CheatEngine Mono Helper](entities/cheatengine-mono-helper.md) — JasonGoemaat CE Lua/table toolkit for Mono games: searchable class/field/method views, hook templates, disassembly jump, runtime monitoring scripts (cheat / CE Mono Helper)
- [cheatguard](entities/cheatguard.md) — JUS7205 Rust engine-agnostic AC scanner (JSON signature ruleset; Win32 loaded-module enumeration; weighted signals; deterministic 0–100 CLEAN/SUSPICIOUS/MALICIOUS JSON report; library + CLI)
- [cheat-engine-ceserver-pcileech](entities/cheat-engine-ceserver-pcileech.md) — CE ceserver over PCILeech/LeechCore DMA; remote scan/edit invisible to target anti-cheat (gmh5225)
- [cheat-it](entities/cheat-it.md) — UE multi-title internal cheat (Witch It + POLYGON; signature scan for UObject arrays / engine structures; configurable pattern matching; gmh5225)
- [Cheat Manager Menu](entities/cheat-manager-menu.md) — UE 5.8 Win64 plugin; auto-builds in-game cheat menu by reflecting UCheatManager + registered extensions; SlateIM UI; Shipping-stripped; Ghostleadie
- [Game Debug Menu](entities/game-debug-menu.md) — UE debug menu plugin; C++ module + Blueprint/UI; console commands, property/function editing, localization, saved menu state; dev/QA runtime tuning; 000-aki-000
- [CheatUnityGames](entities/cheat-unity-games.md) — Android NDK Unity cheat template (C/C++; Il2CppResolver + Dobby hooks; VSCode build scripts; injection/native-layer study; SsageParuders; cheat / game engine explorer:Unity)
- [cheat-attack-thread-slemu](entities/cheat-attack-thread-slemu.md) — thread sleep emulation / context manipulation to evade AC thread scanning (gmh5225; Heartbeat Testing)
- [ddma](entities/ddma.md) — disk HBA ATA DMA PoC (SLAT/EPT bypass via unvirtualized storage; Hyper-V runtime modification; kernel/hypervisor research; btbd)
- [DDMA-1](entities/ddma-1.md) — disk-based DMA cheat framework (ATA/SCSI PCIe camouflage; zero target-OS footprint; gmh5225; cheat / DMA)
- [Diskjacker](entities/diskjacker.md) — runtime Hyper-V VM-exit hijacking via DDMA-style DMA (LabGuy94; C++ kernel + usermode + asm stubs; low-level mapping/execution transfer; hardware/virtualization preconditions; hypervisor security PoC)
- [DMACheatEngineLoader](entities/dma-cheat-engine-loader.md) — Cheat Engine DMA loader (copy CE → DMACE; closed-source)
- [DMA Attack Firmware Customization](entities/dma-attack-firmware-customization.md) — Screamer Squirrel 35T [[pcileech-fpga]] RTL8111 NIC disguise guide (MindShare Arbor donor harvest; Vivado patch; BattlEye/EAC evasion testing; acageduser)
- [DMA (Rakeshmonkee)](entities/dma.md) — PCIe DMA FPGA firmware guide and toolkit (Vivado customization; Python/Tcl auto-generation; config-space cloning; flash workflows; anti-cheat evasion research; Guide)
- [DMA CFW Guide](entities/dma-cfw-guide.md) — [[pcileech-fpga]] v4.15 custom firmware guide for Squirrel/EnigmaX1/ZDMA (Arbor/Telescan PE donor harvest; Vivado IP patch; TLP emulation; `.coe`/writemask shadow config; Silverr12)
- [DMA FW Guide 2.0](entities/dma-fw-guide-2.0.md) — comprehensive FPGA PCIe DMA device-emulation firmware guide (donor profiling; config-space clone; BAR/interrupt handling; Vivado flash; PCILeech-style stack references; multi-language materials; JPShag; Guide)
- [Pcileech DMA Firmware Guide](entities/pcileech-dma-firmware-guide.md) — Windows-first [[pcileech-fpga]] donor-emulation guide (BAR/capability/TLP beyond VID/DID; shadow config, writemask, Python COE; Arbor/TeleScan PE; Squirrel/CaptainDMA/LeetDMA/Enigma/ZDMA; cold-boot validation, Zero4K BAR, ILA; 16SalomonArs; Guide)
- [DMA-Pcileech](entities/dma-pcileech.md) — open-source PCILeech-based network-card-style FPGA firmware (Screamer M2/Enigma X1/Squirrel; TLP/config-space shadow/BAR/FT601; educational release after ACE network-card detection; JOKOSAHS; cheat / DMA)
- [dma-cheat-base](entities/dma-cheat-base.md) — DMA cheat base scaffold (C/C++; rendering, animation, SDK generation; cheat / DMA)
- [DMALib](entities/dmalib.md) — lightweight C++ DMA helper library (LeechCore/MemProcFS; process lookup, R/W, pattern scan, scatter reads; Spuckwaffel; cheat / DMA library)
- [DMALibrary](entities/dmalibrary.md) — C++ DMA toolkit (Metick; signature scan, scatter/normal R/W, dumps, CR3 fix, PID/base lookup, import/export parsing; LeechCore/MemProcFS; cheat / DMA library)
- [DMAInvoker](entities/dma-invoker.md) — Windows DMA RPM via [[dmalibrary]] (cheat / RPM)
- [DMA PE Dumper](entities/dma-pe-dumper.md) — DMA PE dumper via LeechCore/VMMDLL (C++; CR3 shuffle + DTB patching; EXE/DLL extraction; memory forensics / AC research; Trustings)
- [DMA-PCIE-BOARD-75T](entities/dma-pcie-board-75t.md) — Artix-7 75T PCIe DMA board design (firmware + HDL; hardware-level host memory R/W; gmh5225; cheat / DMA)
- [dma-speedtest-memflow-rs](entities/dma-speedtest-memflow-rs.md) — Windows DMA R/W speedtest via memflow (Rust CLI/GUI; pcileech/native)
- [dma-tools-rs](entities/dma-tools-rs.md) — Rust Windows GUI for Artix-7 JTAG bitstream flash, device DNA, PCILeech/memflow sanity check (CH347/FTDI RS232)
- [Document](entities/document.md) — Windows Driver Development guide (Cheat / Windows kernel explorer)
- [docker-palworld-dedicated-server](entities/docker-palworld-dedicated-server.md) — Palworld UE5 dedicated server (Linux + Docker; cheat / game:palworld [UE5])
- [docker-win](entities/docker-win.md) — WSL2 networking lab (QEMU/KVM/PVE/VBOX research-host lane)
- [dbk64-vulnerability-driver](entities/dbk64-vulnerability-driver.md) — Cheat Engine `dbk64.sys` BYOVD PoC (IOCTL → arbitrary kernel R/W; debugging-tool driver; gmh5225)
- [dolboeb-executor](entities/dolboeb-executor.md) — Capcom.sys BYOVD kernel code executor (IOCTL → shellcode or arbitrary kernel calls; gmh5225)
- [doom-syscalls](entities/doom-syscalls.md) — Windows x64 indirect syscalls; dynamic SSN + syscall-instruction resolve; return-address spoof via ntdll gadgets; userland hook / RIP-return evasion (SilentisVox)
- [doomretro](entities/doomretro.md) — DOOM Retro idTech 1 source port (C/SDL2; widescreen/uncapped FPS/lighting/filtering; WAD/DeHackEd/BOOM; Game Engine / source)
- [pure-doom](entities/pure-doom.md) — PureDOOM header-only dependency-free DOOM port (Daivuk; pure C; stdlib-free portable interface; 32/64-bit; minimal embed model; engine experimentation / low-level runtime research; Game Engine / source)
- [gzdoom](entities/gzdoom.md) — GZDoom modder-friendly Doom source port (C/C++; OpenGL/Vulkan; ZScript/mod scripting; GPLv3; Game Engine / source)
- [uzdoom](entities/uzdoom.md) — UZDoom modern Doom source port (GZDoom continuation; OpenGL/Vulkan; high-res/dynamic lighting/3D floors; CMake cross-platform C/C++; Game Engine / source)
- [dumpulator](entities/dumpulator.md) — Python minidump → Unicorn x86/x64 emulation (memory/modules/threads; NT stubs / PEB·TEB / API hooks)
- [dump-val-exception-handler](entities/dump-val-exception-handler.md) — Valorant exception handler registration + VEH chain dump (`RtlpCallVectoredHandlers`; Vanguard RE; gmh5225)
- [DumpVAC](entities/dumpvac.md) — PoC to disable VAC module execution and dump received modules with automatic decryption (RenardDev; Steam/module-loading hooks; C/C++; explore anticheat:vac)
- [DumpPE](entities/dumpepe.md) — lightweight CLI PE dumper (OpenProcess/RPM; SizeOfImage mapped-image dump; x86/x64; packed/protected EXE post-unpack RE; d35ha)
- [Dumper-7](entities/dumper-7.md) — C++ UE4/UE5 SDK generator (Encryqed; in-process DLL inject; engine structure/offset discovery; generated C++ headers; configurable overrides; cheat / SDK Dump for all of UE4 and UE5)
- [dumpwow](entities/dumpwow.md) — WoW client module unpacker (gmh5225 fork; C++/Python; namreeb lineage; cheat / game:wow)
- [dumpy](entities/dumpy.md) — Rust LSASS dump via duplicated existing handles (native object/system APIs; XOR output + optional HTTP upload; detection-evasion research; Kudaes; Elevating Handle By LSASS)
- [dynre-x86](entities/dynre-x86.md) — early x86 dynamic-recompilation learning codebase (C++; Zydis decode/operand inspect; Makefile + Docker; instruction-decoding / binary-translation pipeline study)
- [DummyDlls NARAKA 1.9.21](entities/dummy-dlls-naraka-1-9-21.md) — NARAKA: BLADEPOINT v1.9.21 IL2CPP dummy DLL stubs (C# class/method metadata; modding/cheat/RE; gmh5225; `[Dump]`)
- [Dopamine](entities/dopamine.md) — iOS 15.0–15.4.1 rootless jailbreak (PAC/PPL/AMFI; Sileo/procursus `/var/jb`)
- [Dopamine2-roothide](entities/dopamine2-roothide.md) — iOS 15/16 RootHide Dopamine 2 (C/C++/ObjC; cheat / iOS jailbreak)
- [dota-cheat](entities/dota-cheat.md) — Dota 2 Source 2 entity overlay cheat (C++; ESP / cooldowns / auto-ability; gmh5225; cheat / game:dota2)
- [dota2-cheat](entities/dota2-cheat.md) — Dota 2 internal cheat DLL (Source 2 SDK; subhook / VMT hooks / pattern scan; gmh5225; cheat / game:dota2)
- [Dota2-Overlay-2.0](entities/dota2-overlay-2-0.md) — Dota 2 overlay sample (C/C++; cheat / game:dota2)
- [Dota2-Overlay-OffsetUpdater](entities/dota2-overlay-offset-updater.md) — Dota 2 overlay remote offset fetch/apply utility (gmh5225; keeps overlay functional across patches; cheat / game:dota2)
- [devilution](entities/devilution.md) — Diablo 1 retail Windows binary reverse engineering (drlg/render/tables/multiplayer/save/Storm MPQ; MSVC 4.20; Game Develop / source)
- [devour-client](entities/devour-client.md) — Devour co-op horror Unity IL2CPP client mod (QoL/cheat via in-process memory manipulation; gmh5225; cheat)
- [devour-menu](entities/devour-menu.md) — Devour co-op horror Unity IL2CPP mod menu (ImGui overlay; toggleable gameplay mods; gmh5225; cheat / [Menu])
- [dOffset](entities/doffset.md) — IDA Pro + Cheat Engine current-module offset sync (multi-tool static+dynamic RE; cheat / IDA Plugins; dNop90)
- [dota2dumped](entities/dota2dumped.md) — Dota 2 Source 2 offset dumper (C++ headers; netvars / interfaces / class layouts; `[Offset dumper]`)
- [draw-ida](entities/draw-ida.md) — lightweight IDA Pro whiteboard plugin (sketch/brainstorm in-IDA; MIT; cheat / IDA Plugins)
- [drive-cloning-for-ps4-ps5](entities/drive-cloning-for-ps4-ps5.md) — PS4/PS5 extended-storage drive cloning (DrYenyen; Linux dd + sparse images; installed-app transfer between consoles; PlayStation)
- [Driver-intel-PEBs-LoopHPCs](entities/driver-intel-pebs-loophpcs.md) — LoopHPCs filter-driver framework; PEBS + LBR loop-centric hot-loop telemetry for unpacking/malware RE (gmh5225; Intel PEBs)
- [driver-efi-bootkit](entities/driver-efi-bootkit.md) — UEFI boot-stage implant: EFI→kernel staged chain; loader hook + pre-OS driver patch; Python BOOTDOOR inject (gmh5225)
- [Driver-kaldereta](entities/driver-kaldereta.md) — unsigned KM cheat-driver skeleton; `KALDERETA_MEMORY` via hooked Win32 `NtTokenManagerGetAnalogExclusiveTokenEvent`; R/W, input sim, pattern scan, manual DLL map (gmh5225)
- [Driver-HWID-btbd-modified](entities/driver-hwid-btbd-modified.md) — BTBD-derived storage-stack HWID spoofer; disk/partition IOCTL hooks, GPT/SMART/storahci RAID serial rewrite; manual-map target for Win1909 (gmh5225; cheat / HWID)
- [Driver-HideKernelThread-IoCancelIrp](entities/driver-hide-kernel-thread-iocancelirp.md) — disguise custom kernel thread start as `IoCancelIrp` via IRP cancel routine; context via `UserBuffer`/`MdlAddress`; detection notes (gmh5225; Hide Kernel Thread)
- [Driver-HypercallPageHook](entities/driver-hypercall-page-hook.md) — `nt!HvcallCodeVa` hypercall-page hook; custom dispatcher + `HvlEnlightenments` flip; assembly callback dispatch with fallback (gmh5225; HvcallCodeVa)
- [Driver-KDtour](entities/driver-kdtour.md) — compact KM inline detour library; `c_detour` MDL-backed patch + absolute jump stub; sample `KeAttachProcess` hook (gmh5225; Easy Kernel Detour)
- [Driver-Communication-List](entities/driver-communication-list.md) — user→kernel call-path mapping notebook; win32u.dll through win32k/win32base to dxgkrnl.sys breadcrumbs for debugger/disassembler tracing (gmh5225)
- [Driver-Detect-nullshit](entities/driver-detect-nullshit.md) — kernel export-trampoline detector; mov rax, imm64; jmp rax patches with out-of-image targets in win32k/dxgkrnl/ntoskrnl (gmh5225; Null driver detector)
- [driver-base](entities/driver-base.md) — KMDF Windows kernel driver starter template; CMake + FindWDK; driver entry scaffolding; optional compile-time obfuscation via bundled obfusheader.h (SecondNewtonLaw)
- [driver-dll-finder](entities/driver-dll-finder.md) — System32/drivers PE section scanner; find oversized sections for section-overlay mapping; skip loaded drivers (armvirus; Find Driver Useless Memory)
- [Driver-DriverNoImage](entities/driver-driver-no-image.md) — no-image driver hijack PoC; shellcode via existing driver dispatch (NTFS handlers); inline hooks + WP disable + trampolines (gmh5225; Hijack Driver)
- [Driver-read_write](entities/driver-read-write.md) — manually mapped KM R/W via Beep.sys IRP hijack; PiDDBCache/MmUnloadedDrivers cleanup (gmh5225; Hijack IRP Beep.sys)
- [Driver-physical-rw](entities/driver-physical-rw.md) — C++ kernel driver; IOCTL phys/virt R/W, alloc/protect, module-base lookup, process helpers; DeviceIoControl client pattern (Vekor64; Kernel-mode W/RPM for Windows)
- [driver-risk-scout](entities/driver-risk-scout.md) — read-only PowerShell endpoint driver inventory and risk scanner; LOLDrivers/MS blocklist/BYOVD profile correlation; PE/YARA scoring; HVCI/VBS/WDAC posture; CSV/JSON/HTML/Wazuh export (Systemhaus-Schulz)
- [Driver-RPM-DirectPageManipulation](entities/driver-rpm-direct-page-manipulation.md) — minimal PTE-PFN rewrite + manual VA→PA cross-process copy; no documented copy helpers (gmh5225; read physical memory)
- [Driver-SessionMapper](entities/driver-session-mapper.md) — session-space manual driver mapper; `ntoskrnl` callback hook; import/reloc/entry; loader-metadata scrub on unload (gmh5225; Session Driver)
- [Driver-SoulExtraction](entities/driver-soul-extraction.md) — in-kernel PE Authenticode cert extraction; Lib-SoulExtraction PKCS#7/ASN.1/X.509; signer subject + validity window (gmh5225; Extracting cert information)
- [driver-systemthread-from-pspcidtable-src](entities/driver-systemthread-from-pspcidtable-src.md) — PspCidTable / handle-table hide tutorial; `ExRemoveHandleTable` + CID-field zeroing; build-specific offsets (gmh5225; Hide Process/Thread/Handle)
- [Driver-WatchOwl](entities/driver-watchowl.md) — defensive KM driver; load-image + thread notify; stack-trace validation of suspicious user-mode mapping (gmh5225; ImageNotify+Stack Trace)
- [DriverBuddyReloaded](entities/driver-buddy-reloaded.md) — IDA Pro plugin: Windows kernel driver RE (IOCTL dispatch, IRP handlers, vulnerable-driver patterns, WDM structure annotations; gmh5225; Windows Kernel Analysis)
- [Driver Vuln Analyzer](entities/driver-vuln-analyzer-ida-plugin.md) — IDA Pro Python plugin: static kernel driver vulnerability triage (IOCTL extract/CTL_CODE decode, METHOD_NEITHER + sensitive API flags; JSON export; CyberSecurityUP; Driver Vuln Analyzer)
- [DragonBurn](entities/dragonburn.md) — external CS2 cheat framework (C++; kernel-assisted read-only RPM; ImGui ESP/radar + offset automation; ByteCorum; cheat / game:cs2 [External])
- [dragonhook](entities/dragonhook.md) — Ghidra↔Frida static+dynamic bridge (localhost HTTP GhidraDB API; runtime indirect-call resolution, live xref/comment sync, symbol backtraces, call tracing; mitros123; cheat / Ghidra Plugins)
- [dragons-vs-vms](entities/dragons-vs-vms.md) — VMProtect x64 devirtualization lab (Fare9; Binary Ninja VM trace; dragon-tales lift to IGNIL/LLVM IR; Z3 symbolic handler recovery; all 256 handler slots classified; serial-check sample + BN databases; Cheat / Fix VMP)
- [drivers-binaries](entities/drivers-binaries.md) — multi-vendor compiled Windows kernel `.sys` binaries with CVE/report links; detection-rule and threat-hunting samples for signed-driver abuse (CaledoniaProject; Vulnerable Driver List)
- [drivers_and_shit](entities/drivers-and-shit.md) — categorized Windows kernel `.sys` binary corpus from OEM/utility/security products; vulnerable-driver research reference (alfarom256; Vulnerable Driver List)
- [dsmm](entities/dsmm.md) — Windows kernel PoC; manual map into discarded section of legitimate signed driver; post-boot system thread; PatchGuard-aware stealth loading (0xf1a; Discarded Driver Section Manual Map)
- [droidrun](entities/droidrun.md) — Python LLM agent framework for Android/iOS device control (ADB + accessibility APIs; multi-provider; scripter agents; MCP for Android; mobile security testing / QA automation)
- [droidvm](entities/droidvm.md) — Android on-device VM manager (Snapdragon Gunyah + QEMU/KVM/crosvm; ARM64/x86_64 guests; UEFI Linux/Windows; VirGL/GfxStream GPU, VNC, VirtFS; root required; Android Emulator)
- [Drv Hide And Camouflage](entities/drv-hide-and-camouflage.md) — unsigned driver load + identity camouflage via unexported kernel routines, manual offset init, object/import-table manipulation (IcEy-999; C ring-0; Hide Driver)
- [DrvEye](entities/drveye.md) — 0xDbgMan Windows kernel driver static analysis and bug hunting (IOCTL dispatch recovery, taint analysis, emulation-based handler tracing, certificate verification, YARA, PoC generation; discover IOCTLs, symbolic links, certificate checks; exploitation triage)
- [drvtrace](entities/drvtrace.md) — Windows kernel IRP filter tracer (major/minor codes, buffers, completion status; IOCTL/device-protocol RE; eversinc33)
- [drvscan (ekknod)](entities/drvscan.md) — Windows DMA/PCIe device scanner and memory forensics (C; PCIe enumeration, pcileech-style acquisition, cheat/rootkit signature scans; Anti Cheat / Detection:DMA [Scanner])
- [Dr. Memory](entities/drmemory.md) — DynamoRIO dynamic memory debugger (UAF, OOB, leaks, uninitialized reads; Windows handle/GDI checks; unmodified binaries; game/anti-cheat reliability testing)
- [DrillAndJoin](entities/drill-and-join.md) — C++17 Drill & Join exact Boolean synthesis; SMT-guided 64-bit opaque-predicate and MBA-style simplification via Bitwuzla
- [Duchamp Root](entities/duchamp-root.md) — Xiaomi K70e (duchamp) one-tap root (CVE-2026-43499 IonStack; LD_PRELOAD preload.so; pselect KASLR leak, futex PI race, pipe-buffer phys R/W; embedded KernelSU ksud; Android 16 offsets; cheat / Android root)
- [Duck-Detector-Refactoring](entities/duck-detector-refactoring.md) — Android local device-integrity inspector (Jetpack Compose + Kotlin + native C++/assembly; root/hook/mount/attestation/virtualization cards; eltavine; cheat / Android root)
- [Duckov Market Mod](entities/duckov-marketmod.md) — Duckov flea-market C# mod (Harmony patches; Steam-auth API + WebSocket; mod loader with auto-update; RE-derived internals; a0yark; modding / online marketplace research)
- [deobf](entities/deobf.md) — libtprt.so OLLVM deobf / plugin hooks (Python)
- [deobfbr](entities/deobfbr.md) — ARM64 branch-obfuscation deobf in ELF `.so` (Mrack; Python; Unicorn+Capstone+Keystone; function range → reconstructed binary; libtprt.so; Android native RE)
- [Deobfuscator](entities/deobfuscator.md) — Java bytecode deobfuscator (gmh5225 fork + narumii; ProGuard/Allatori/ZKM passes; cheat / RE tools)
- [DetectTpmSpoofing](entities/detect-tpm-spoofing.md) — KMDF: TPM 2.0 EK spoof detect (IOCTL vs TPM.sys cache)
- [DmaProtect](entities/dmaprotect.md) — Windows kernel driver configuring VT-d/AMD-Vi IOMMU remapping to block unauthorized PCIe DMA (cutecatsandvirtualmachines; DMA mitigation research)
- [DieDMAProtection](entities/diedmaprotection.md) — Windows PoC kernel driver disabling IOMMU/VT-d DMA remapping (iqrw0; IOMMU bypass research)
- [detect-hypervisor-detect-ring-0](entities/detect-hypervisor-detect-ring-0.md) — ring-0 hypervisor detection test driver (CPUID leaves, TSC/APERF/MPERF VM-exit timing, LBR/DEBUGCTL; manual-map print harness; Secret Club lineage; gmh5225; Detection: Hacked Hypervisor)
- [detect-ntoskrnl-integrity](entities/detect-ntoskrnl-integrity.md) — ntoskrnl memory-vs-disk integrity verification (DejavuSecure; C++; SSDT transforms, page-table randomization, retpoline-era behavior; anti-rootkit / AC / defensive kernel security research)
- [Detect-HiddenThread-via-KPRCB](entities/detect-hiddenthread-via-kprcb.md) — KPRCB-based hidden-thread detection PoC (KANKOSHEV; walks KPRCB-related structures; thread lookup verification for threads removed from process/thread ID table; Visual Studio kernel driver; anti-cheat integrity monitoring / forensic research)
- [Detect-KeAttachProcess](entities/detect-keattachprocess.md) — kernel-mode KeAttachProcess usage detection PoC (KANKOSHEV; continuously running driver; process/thread enumeration + thread-context inspection for unexpected attached targets; anti-cheat / covert process-attachment monitoring research)
- [Detect-MouseClassServiceCallback](entities/detect-mouseclassservicecallback.md) — kernel-mode MouseClassServiceCallback hook detection PoC (KANKOSHEV; WDK driver; observe/validate mouse callback execution paths; anti-cheat / rootkit input-interception research)
- [DetectFrida](entities/detect-frida.md) — Android native Frida detector (named-pipe scan, thread-name checks, `.text` memory-vs-disk ELF integrity; syscall libc + O-LLVM hardening; darvincisec; Detection:Frida)
- [DetectZygisk](entities/detect-zygisk.md) — Android Zygisk-style injection POC (C++/JNI; fork + ptrace attach + PTRACE_GETEVENTMSG; sample APK/logs; apkunpacker)
- [detection](entities/detection.md) — Android root/Xposed/Frida/VPN/dev-options multi-check collection (Java; Detection:Android root)
- [detection-cheat-engine](entities/detection-cheat-engine.md) — user-mode CE artifact detector (ReadDirectoryChangesW; ADDRESSES.FIRST/MEMORY.FIRST table markers; gmh5225; CE)
- [detection-cheat-engine-ring0](entities/detection-cheat-engine-ring0.md) — kernel CE/DBVM debug-print callback PoC (DbgSetDebugPrintCallback; dbvm-mode string; gmh5225; CE)
- [detection-hyper-v](entities/detection-hyper-v.md) — kernel-mode Hyper-V guest probe via KPCR/KPRCB PowerState (Win10 17763; KeGetPcr→CurrentPrcb; gmh5225; Hyper-v)
- [DeviceResetSpoofer](entities/device-reset-spoofer.md) — LSPosed post-clear automatic Android ID/GAID/IMEI/MAC/GSF ID/build fingerprint regeneration with sentinel-file wipe detection (GJR787878; Cheat / Xposed)
- [DeviceTrust](entities/device-trust.md) — Kotlin + NDK Android integrity library (root/emulator/hook/custom ROM/bootloader checks; weighted risk scoring; Xheghun)
- [DeviceWarLock](entities/device-warlock.md) — Android device HWID / lock SDK (Java/C++; networking, SDK gen, hooking; Detection:HWID)
- [device-control-hooks-scanner](entities/device-control-hooks-scanner.md) — KMDF kernel driver scanner for suspicious `IRP_MJ_DEVICE_CONTROL` hooks (`\Driver` enumeration; dispatch pointer bounds + module resolution; Luchinkin; kernel integrity auditing / driver hook detection)
- [device_xiaomi_mondrian](entities/device-xiaomi-mondrian.md) — Pixel Experience Plus device tree for Redmi K60 / POCO F5 Pro (mondrian; Waipio / SM8475)
- [DaliVM](entities/dalivm.md) — Python Dalvik VM emulator (DEX execution, Android API mocking, static analysis, string decryption, Multi-DEX; no Android runtime)
- [Dalvikus](entities/dalvikus.md) — Android smali editor / Dalvik bytecode RE tool (ethical research)
- [dex2jar](entities/dex2jar.md) — DEX↔JAR toolset (d2j-baksmali / APK sign / DEX manip; mobile RE)
- [DexBuilder](entities/dexbuilder.md) — LSPosed C++ DEX bytecode generator (AOSP-derived dexmaker alternative; runtime integration; Android framework/tooling)
- [dexkit-android](entities/dexkit-android.md) — high-performance Android DEX deobfuscation library (LuckyPray; C++ NDK + JNI/Kotlin; string/relation/opcode-pattern search; Gradle/prefab/CMake; hook-point discovery; cheat / dex deobfuscator)
- [dfm-android-unicorn](entities/dfm-android-unicorn.md) — DFM Android ARM64 coordinate decryption via Unicorn emulation (C/C++; ACE/libtersafe; cheat / explore anticheat system:ACE)
- [Diaphora](entities/diaphora.md) — open-source IDA Pro binary diffing plugin (CFG/BB-hash/mnemonics/strings/call-graph; symbol porting; patch analysis)
- [DiaSymbolView](entities/diasymbolview.md) — Delphi GUI PDB symbol inspector (MSDIA; navigable hierarchy; 200+ symbol properties; register-name resolution; RE / debugger symbols)
- [dncil](entities/dncil.md) — Python CIL disassembly for .NET PE (Mandiant; metadata + operands; Unity Mono / YARA pipelines)
- [dnSpy](entities/dnspy.md) — .NET assembly debugger/decompiler/editor (C#/VB/IL; live edit + breakpoints; Unity Mono via patched runtimes; For Unity)
- [DnSpyMCP](entities/dnspymcp.md) — local MCP server for .NET assembly RE (C# .NET 8; dnlib + ICSharpCode.Decompiler; 31 tools; Unity/IL2CPP dump.cs bridge, offset/RVA lookup, cross-refs, IL patch, crypto/secret scans; stdio JSON-RPC; no dnSpy GUI; rabbanyhmm)
- [dnSpy.Extension.HoLLy](entities/dnspy-extension-holly.md) — dnSpyEx extension for obfuscated .NET RE (C#; source-map renaming, managed DLL inject-on-debug, native disasm, CFG viz; For Unity)
- [dnSpy-Unity-mono](entities/dnspy-unity-mono.md) — patched Unity Mono sources + build tooling for dnSpy soft-debugger `mono.dll` / `mono-2.0-bdwgc.dll`; umpatcher; [mono]
- [Mono.Debugger.Soft](entities/mono-debugger-soft.md) — dnSpy fork of Mono soft-debugger client (wire protocol + mirror API; breakpoints/stepping/object inspection; Unity/Mono RE; [Mono Debugger])
- [Doriax](entities/doriax.md) — cross-platform C++ ECS game engine with ImGui editor (Lua/C++ scripting; Sokol OpenGL; DirectX/OpenGL/Metal/Vulkan; desktop/mobile/web)
- [dotNIET](entities/dotniet.md) — IDA plugin: .NET NativeAOT type/method symbol recovery (Import .NET Symbol)
- [dotrix](entities/dotrix.md) — open-source Rust 3D engine (dot + matrix; Game Engine / source)
- [dot-server-security](entities/dot-server-security.md) — Godot 4 dedicated-server security addon (GDScript configuration-driven rule engine; chat/connection/auth/console/AC surfaces; movement re-sim + shot validation; impossible vs suspicious tiers; sliding-window rate limits; warn/gag/mute/kick/ban escalation; external ban feeds; dry-run auditing default; modcommunity; Anti Cheat / Open Source Anti Cheat System)
- [DotX64Dbg](entities/dotx64dbg.md) — .NET 6 / C# x64dbg plugin framework (live edit; custom commands)
- [DoubleCallBack](entities/double-callback.md) — DWM in kernel (C/C++; cheat render/draw)
- [dp701](entities/dp701.md) — IDA Pro dark color theme (syntax/UI palette; cheat / IDA themes; gmh5225)
- [dpatch](entities/dpatch.md) — syscall dispatcher patching PoC (table copy + dispatcher jump)
- [dProtect](entities/dprotect.md) — Android/iOS LLVM native obfuscator (CFF / MBA / string encrypt; AC Obfuscation Engine)
- [DsArk64](entities/dsark64.md) — BYOVD via Qihoo 360 `DsArk64.sys` (handle donor; ring-0 kill + kernel R/W)
- [DWARFHelper](entities/dwarfhelper.md) — x64dbg plugin: load DWARF debug symbols from PE/ELF via libdwarf (function names, variable types, file:line comments; x86/x64; Cheat x64dbg Plugins)
- [DWEX](entities/dwex.md) — DWARF Explorer GUI (ELF/debug files; pyelftools; RE tools)
- [DWM_Hook](entities/dwm-hook.md) — DWM hook / overlay research (C++; cheat / overlay)
- [DWM-DwmDraw](entities/dwm-dwmdraw.md) — DWM `DwmDraw` pipeline overlay (gmh5225; ESP/visual hacks via compositor; README `[DWM StackWalk]`; anti-screenshot research)
- [dwm-overlay](entities/dwm-overlay.md) — DWM/DirectX ImGui overlay (Yukin02; dispatch/present-path assembly stubs; external overlay without `.text` patches; README `[DWM Overlay without modify .text]`) + LoxTus PoC (MinHook + D3D11 + ImGui; dwmcore present pattern scan; swap-chain UI; README `[DWM]`)
- [dwmhook](entities/dwmhook.md) — DWM composition overlay (gmh5225 PoC; inject draw calls without overlay HWND; README `[DWM]`) + mfxiaosheng DX11 vtable ImGui framework (MinHook/PolyHook2; PDB/DIA; `[DWM VFTable]`)
- [dwm-screen-shot](entities/dwm-screen-shot.md) — DWM screenshot / AC research (C++; anti-cheat engineers; README `[DWM]`)
- [dwm-window-capture](entities/dwm-window-capture.md) — DWM redirect focused-window capture (vmguard; C++17; D3D11 + undocumented DWM exports; staging readback + WIC PNG; Alt+Insert; README `[DWM Redirect]`; Anti Cheat → Screenshot)
- [DroidShield](entities/droidshield.md) — Android RASP SDK (root/debugger/Frida-Xposed/emulator/tamper; polymorphic checks)
- [Disable NMI callbacks](entities/disable-nmi-callbacks.md) — kernel driver; KiNmiInterruptStart pattern scan + affinity/NMI-state patch vs NMI stack-walk AC (gmh5225)
- [Disable Windows Defender](entities/disable-windows-defender-.md) — UAC bypass + SYSTEM token escalation → real-time / Tamper Protection disable (gmh5225)
- [DisableDSE](entities/disabledse.md) — kernel validation-chain DSE bypass (`SeValidateImageHeader` / `MiValidateSectionCreate` / `MiValidateSectionSigningPolicy`; unsigned driver load; gmh5225; kernel research)
- [DSEDodge Signed Kernel Driver](entities/dsedodge-signed-kernel-driver.md) — signed kernel driver DSE bypass via legitimately signed certificate (PTT-based DSE defeat; gmh5225; kernel research)
- [dse_hook](entities/dse-hook.md) — CI.dll hook / `g_CiEnabled` patch DSE bypass for unsigned driver load (gmh5225; kernel research)
- [Dse-Patcher-2](entities/dse-patcher-2.md) — CI.dll `g_CiOptions` patch DSE bypass for unsigned driver load (gmh5225; kernel research)
- [dse_pg_bypass](entities/dse-pg-bypass.md) — 4l3x777; Windows kernel research PoC; BYOVD bypasses DSE + PatchGuard; C++ + reversing notes on signature validation callbacks and integrity-check paths; educational kernel security / defender BYOVD study
- [ds4-tools](entities/ds4-tools.md) — DualShock 4 HID scripts (input/LED/touchpad/motion/rumble; play + reverse-engineer DS4 on PC; gmh5225)
- [dsh-cheatengine](entities/dsh-cheatengine.md) — DeepSeek Harness plugin: TCP bridge to Cheat Engine; on-demand `ce_*` scan/debug/script tools; session audit/snapshot; gated writes (TindalosKorone; Game Develop / MCP)
- [dsh-plugins](entities/dsh-plugins.md) — DSH plugin bundle: PyGhidra Ghidra bridge (import/decompile/strings/xrefs) + radare2/RetDec/tshark/mitmproxy forensics + Claude Code/Codex/Marvis agent bridges; web-scraping adapters; Windows bundle profiles; AI-assisted malware/game-binary/network forensics (GalaxyBatMan111; Cheat / RE Tools)
- [ds2os](entities/ds2os.md) — Deprecated Dark Souls 2 online-service placeholder; README-only migration pointer to [[ds3os]] (Game Network / game:dark souls; TLeonardUK)
- [ds3os](entities/ds3os.md) — Dark Souls 2/3 online-service server emulator (Protobuf protocol; Docker; matchmaking/co-op/invasions/messages; Game Network / game:dark souls; TLeonardUK)
- [DumpIt for Linux](entities/dumpit-linux.md) — MagnetForensics Linux live memory acquisition (Rust; `/proc/kcore` → ELF core; optional tar.zst; gdb/crash/drgn; no custom LKM; IR / Linux memory forensics)
- [DumpIt-mirror](entities/dumpit-mirror.md) — Comae DumpIt mirror; one-click Windows live physical RAM capture (raw / crash dump; Volatility / WinDbg)
- [DVRT](entities/dvrt.md) — dynamic value resolution table for runtime address resolution (gmh5225; maintains/updates memory offsets on module load/relocation; cheat [Offset])
- [Dynsec](entities/dynsec.md) — dynamic security analysis framework; instrumentation/monitoring for anti-tamper, anti-debug, integrity checks (gmh5225)
- [DynaDbg](entities/dynadbg.md) — remote cross-platform RE/dynamic analysis suite (DoranekoSystems; Tauri/React GUI + Rust/C/C++ backend; memory scan, watchpoints, code tracing, host-remote workflows; Android/iOS debugger)
- [dynadump](entities/dynadump.md) — runtime Objective-C class-dump CLI (DerekSelander; dlopen-assisted; Apple binaries/shared cache; dylib/class/interface dump, demangled signatures, in-place signing; macOS/iOS RE)
- [Dynamizer](entities/dynamizer.md) — compact C++ anti-analysis toolkit (string obfuscation, anti-step-over, SW/HW breakpoint checks, `.text` integrity, return-address manipulation, system DLL unhooking; modular drop-in; PaulNorman01)
- [DX11-BaseHook](entities/dx11-basehook.md) — minimal DX11 Present trampoline + ImGui overlay base (C++; DirectX Hook)
- [DXInject-UC](entities/dxinject-uc.md) — D3D11 GPU payload transport + compute-shader decode; GPU-assisted process hollowing PoC (a0yark; injection:windows research)
- [DXGICaptureApplication](entities/dxgicaptureapplication.md) — C/C++ desktop capture app (shader work; `[Capture Desktop]`; anti-cheat / screenshot research; bavulapati) — C/C++ desktop capture app (shader work; `[Capture Desktop]`; anti-cheat / screenshot research; bavulapati)
- [DxWrapper](entities/dxwrapper.md) — DirectX compatibility proxy DLL (DDraw/D3D8–9/DInput; DDrawCompat/d3d8to9/Dd7to9; DirectX Compatibility)
- [DLSS Unlocked](entities/dlss-unlocked.md) — DirectX 12 mod/installer unlocking DLSS-G/multi-frame generation/DLSS-NR on RTX 20xx–40xx (ShyVortex; NGX/Streamline proxy DLL inject; OptiScaler/FSR 3.1 bridge; driver-signature bypass; ASI/DXGI loaders; Windows + Proton; DirectX Compatibility)
- [DLSSG 30s Manager](entities/dlssg-30s-manager.md) — WPF .NET 8 deploy manager for RTX 30 `dlssg_for_sm86` DLSS-G proxy on `nvngx_dlssg.dll` titles (BUNNY-19C; Steam/custom scan; per-game INI; Authenticode/SHA-256 verified downloads; kernel AC fingerprinting blocks unsafe installs and quarantined proxy DLLs; DirectX Compatibility)

- [dxgkrnl_hook](entities/dxgkrnl-hook.md) — dxgkrnl screen-buffer hook (kernel overlay / render-draw)
- [e3](entities/e3.md) — C++ homomorphic encryption framework (MoMA Lab; FHE backends; encrypted compute; AC Encrypt Variable research)
- [e9patch](entities/e9patch.md) — Linux x86-64 ELF static binary rewriter (instruction punning + eviction; jumps/trampolines/instrumentation without reassembly; GJDuck)
- [eac-analysis](entities/eac-analysis.md) — 19h Linux EAC userland (`eac.elf`) VM reconstruction; dlopen/trace harness, dispatch/VMTAIL probes, bytecode→IR/CFG, handler ISA, static path replay, MBA reducers; GDB dynamic tracing (Anti Cheat / Linux ELF)
- [eac-bypass](entities/eac-bypass.md) — offensive EAC bypass research (C++; kernel driver + shader work)
- [eac-bypass-1](entities/eac-bypass-1.md) — EAC bypass via `NtMapVisualRelativePoints` KM↔UM channel (C++; driver communication; gmh5225)
- [eac-cr3-bypass](entities/eac-cr3-bypass.md) — UM+KM EAC CR3 bypass teaching sample (C/C++; driver dev)
- [eac-cr3-shuffle](entities/eac-cr3-shuffle.md) — compact EAC CR3 shuffle research sample; paging walk + VA→PA checks (SamuelTulach; Bypassing CR3 protection)
- [eac-dbp](entities/eac-dbp.md) — EAC debug/bypass PoC; kernel driver + UM module; callback/minifilter/control-path interference + API interception; Visual Studio/WDK; controlled RE/security testing (Debug; Schnocker)
- [eac-driver-ud-for-now](entities/eac-driver-ud-for-now.md) — EAC driver-scan evasion sample; stealth KM↔UM memory R/W channel (gmh5225; [Sample])
- [eac-emu](entities/eac-emu.md) — simple x64 EAC DLL emulator stub; exports expected anti-cheat APIs with placeholder implementations; C++/asm patch helpers; RE/compatibility PoC (Rat431; Simple EasyAntiCheat x64 emulator)
- [EAC-EasyAntiCheatMemorySig](entities/eac-easyanticheatmemorysig.md) — documented EAC in-memory byte-pattern corpus for cheat frameworks, injectors, and hack modules (Memory sig maker; gmh5225)
- [EAC-EasyAntiCheat-Src-1](entities/eac-easyanticheat-src-1.md) — reconstructed/leaked EAC source; detection routines, driver comms, integrity validation (Reversed Source; gmh5225)
- [eac-extractor-utility](entities/eac-extractor-utility.md) — decrypt/extract EAC driver, UM modules, config for offline RE
- [EAC-HydraHook](entities/eac-hydrahook.md) — Hydra KM↔UM channel hooking; intercepts/suppresses EAC detection reports before backend upload (Packet Fucker; gmh5225)
- [eac-injector-driver](entities/eac-injector-driver.md) — EAC state toggle via `NtQueryIntervalProfile` + HalDispatchTable (manual-map driver; thread/callback manipulation; gmh5225)
- [EAC-Kernel-Packet-Fucker](entities/eac-kernel-packet-fucker.md) — kernel-mode EAC telemetry suppression via `ExAllocatePoolWithTag` hijack; drops ~33 KB violation reports before backend upload (gmh5225)
- [eac-leak](entities/eac-leak.md) — leaked EAC server + EOS SDK anti-cheat session handling; game-server ↔ cloud validation protocol RE (chaeyk)
- [eac-mapper](entities/eac-mapper.md) — EAC session-driver integrity mapper PoC; `gdrv.sys` BYOVD; bypasses read-only section checks when drivers are not globally mapped in EAC context; patching + low-noise KM↔UM hooks (Compiled-Code; C++; mapper attack-path research; cheat / gdrv.sys)
- [eac-overlay](entities/eac-overlay.md) — EAC overlay PoC (ESP via alt surfaces / window manip; C++)
- [eac-spoofer-meme](entities/eac-spoofer-meme.md) — open-source kernel HWID spoofer for EAC fingerprinting; C driver + C++ IOCTL controller; SMBIOS/disk/NVMe/MAC/GPU/PCI/CPUID/EFI/ACPI/registry; VT-x/SVM CPUID hooks (zensenzay; cheat / HWID)
- [EAC-Reversal](entities/eac-reversal.md) — devirtualized EAC driver internals; callback/dispatch/certificate/code-integrity RE as C++ pseudocode (ch4ncellor; [Reversed EAC])
- [EAC-Runtime-Extractor](entities/eac-runtime-extractor.md) — MinHook DLL; intercepts EAC kernel driver load before disk write for offline RE (gmh5225)
- [EAC-shellcode-1](entities/eac-shellcode-1.md) — archived raw EAC shellcode memory dump from protected-game dumper (~Mar 2023; hook entry points; offline RE sample; gmh5225)
- [EAC-VmCheck.asm](entities/eac-vmcheck-asm.md) — recovered `easyanticheat.sys` VM-detection assembly (`CheckVM` / VMREAD probe; VM-found vs VM-not-found paths; gmh5225)
- [EAC](entities/eac.md) — mixed EAC study pack: reversed `easyanticheat.sys` callback logic + EAC/EOS SDK drop (gmh5225)
- [EAFE](entities/eafe.md) — Mineflayer elytra autopilot (vanilla physics FSM; Bézier look-vector AC evasion; cheat / game:minecraft)
- [Early Cascade Injection](entities/earlycascade-injection.md) — early cascade process-injection PoC (Cracked5pider; C++ Visual Studio; stealthier inject during early process init; build-specific offsets; malware/EDR/defensive detection testing; Injection Testing)
- [EASY-HWID-SPOOFER](entities/easy-hwid-spoofer.md) — kernel-mode HWID spoofer via driver dispatch hooks + physical-memory patches (disk/NIC/GPU/SMBIOS; Win10; gmh5225)
- [EasyHandles](entities/easy-handles.md) — driver+DLL handle acquisition bypassing ObRegisterCallbacks via ObOpenPointerToObject + OpenProcess hook (AlSch092; AC/EDR handle-protection research)
- [EasyAntiPatchGuard](entities/easy-anti-patchguard.md) — Win8–Win10 kernel PoC; driver + assembly hooks observe/short-circuit PatchGuard dispatch paths; call-chain analysis from kernel debugging (armasm; cheat / PatchGuard-related)
- [easypeasy-gc](entities/easypeasy-gc.md) — Genshin Impact EasyPeasy-framework cheat client (Grasscutter custom server; client-side gameplay mods; gmh5225)
- [EasyAntiCheat-Emulator](entities/easyanticheat-emulator.md) — lightweight EAC client-interface DLL stub; fake client-side exports for debugging-oriented RE and compatibility testing; no server-side protocol spoofing (CamxxCore; EAC Emulator)
- [EasyAntiCheat-Reversing](entities/easyanticheat-reversing.md) — IDA Pro 7.7 decompilation dump of `EasyAntiCheat.sys`; searchable driver RE snapshot (gmh5225)
- [EasyAntiCheat-SRC](entities/easyanticheat-src.md) — Hex-Rays decompiled EAC kernel driver snapshot; C output + headers; process memory ops, validation, anti-cheat control paths (EBalloon)
- [EazyAntiCheatSRC](entities/eazy-anti-cheat-src.md) — reversed EAC source; detection routines, driver comms, integrity validation (Reversed Source; gmh5225)
- [eft](entities/eft.md) — Escape From Tarkov internal cheat (Splitx12; C++/ASM; Unity object/world/entity traversal; ESP/exfil/aim-assist/menu; KeUserModeCallBack Win10 notes; cheat / game:eft [Internal])
- [eft-dma-radar-1](entities/eft-dma-radar-1.md) — Escape From Tarkov DMA radar (PCILeech-compatible hardware; separate-screen overlay; player/loot/map; cheat / game:eft [DMA Radar]; gmh5225)
- [eft-external](entities/eft-external.md) — Escape From Tarkov external cheat (C/C++; kernel-level work + overlays + modding; cheat / game:eft [External]; frankie-11)
- [eft-streamed-cheat](entities/eft-streamed-cheat.md) — Escape From Tarkov streaming/external cheat (driver memory reads; separate-display radar/ESP; avoids injection; cheat / game:eft [External/Streaming]; fcancelog)
- [eft-tarkov-internal-cheat](entities/eft-tarkov-internal-cheat.md) — Escape From Tarkov internal (bootmgfw): C++ DLL; Unity/Mono SDK; pattern scan + direct syscalls; DX11 ImGui Kiero/MinHook; ESP/aimbot/radar; cheat / game:eft [Internal]
- [eft-internal](entities/eft-internal.md) — Escape From Tarkov internal cheat (C++; shader / rendering / asset pipelines; cheat / game:eft; gmh5225)
- [eftleecher](entities/eftleecher.md) — Escape From Tarkov DMA cheat toolbox (MemProcFS/FPGA; visor/night/thermal/recoil/stamina/weight mods; INI config; map files; auto-disconnect OPSEC; cheat / game:eft [DMA]; bytemyass)
- [eft-monoeft](entities/eft-monoeft.md) — Escape From Tarkov Mono internal cheat (C#; Unity/Mono method hooks; ESP/silent aim/no-recoil/speed/stamina/loot; cheat / game:eft; gmh5225)
- [eft-newtarkov-cheatproject](entities/eft-newtarkov-cheatproject.md) — Escape From Tarkov cheat (ESP, aimbot, loot visualization; Unity memory reads for overlay; cheat / game:eft; gmh5225)
- [eft-veil-eft](entities/eft-veil-eft.md) — Escape From Tarkov Veil cheat framework (ESP, aimbot, radar; Unity client memory access; cheat / game:eft; gmh5225)
- [Escape-from-TuxKov](entities/escape-from-tuxkov.md) — QEMU-based EFT cheat framework (Qemu-Gang; C++; ESP/aimbot/recoil; Unity/Mono structures; memory/data pipelines; build/inject/extract/reload scripts; Linux/QEMU external or hybrid; cheat / game:eft [QEMU])
- [Elden Ring CT TGA](entities/elden-ring-ct-tga.md) — Elden Ring Cheat Engine table; protonhax + Wine CE on Steam Proton (cheat / game:eldenring [Cheat Engine])
- [Elden Ring Debug Tool](entities/elden-ring-debug-tool.md) — Elden Ring debug/cheat tool; hidden parameters, stat edit, item spawn, teleport, no-clip (cheat / game:eldenring [Debug tool])
- [EldenRingLauncher](entities/eldenringlauncher.md) — Elden Ring ImGui/SDL2 custom launcher; EAC bypass options + mod loading (cheat / game:eldenring [Launcher])
- [EldenRingMods](entities/eldenringmods.md) — Elden Ring animation/modding (C++ / C/C++; cheat / game:eldenring [Mod])
- [EasyPixel](entities/easypixel.md) — Magisk module: disguise device as Google Pixel (Cheat Magisk)
- [EasyRe](entities/easyre.md) — RE toolkit: pattern scan, memory dump, structure reconstruction (Trace Execution; gmh5225)
- [EasyUefi](entities/easyuefi.md) — Visual Studio GNU-EFI UEFI app template (SamuelTulach; C/asm + linker scripts + bundled GNU-EFI; firmware security / boot-stage / game-security prototyping)
- [EATGuard](entities/eat-guard.md) — Windows PoC: VEH + PAGE_GUARD monitors Export Address Table integrity; detects EAT hooking (rootkits/cheats; connormcgarr)
- [EDRSandblast](entities/edrsandblast.md) — BYOVD EDR/ETW blind (callbacks / ETW TI / ntdll unhook; C)
- [EDR-XDR-AV-Killer](entities/edr-xdr-av-killer.md) — Go Spyboy Terminator reproduction via Zemana **`zam64.sys`** (IOCTL PID trust-list bypass → kernel EDR/XDR/AV kill; EvilBytecode; BYOVD evasion research)
- [edb-debugger](entities/edb-debugger.md) — Linux OllyDbg-style Qt debugger (ptrace; x86/x86-64; disasm/registers/memory map/breakpoints/plugins; eteran; For Linux)
- [eDBG](entities/edbg.md) — eBPF-based lightweight Android ARM64 CLI debugger (GDB-like breakpoints/memory/registers/threads; file+offset breakpoints; anti-debug resistance; Go + C/eBPF; rooted mobile RE / game security; Sh11no)
- [edbgserver](entities/edbgserver.md) — eBPF-powered debugger server for Android and Linux (Rust multi-crate; Arm64/x86_64; breakpoints/stepping/memory/registers/signals/library info; avoids ptrace; low-intrusion RE in monitored environments; Satar07)
- [edgegdi_hook](entities/edgegdi-hook.md) — GDI32 EdgeGDI `.data` pointer-swap hook PoC (0mdi; C++; pattern scan + runtime pointer replacement; BitBlt-class intercept; test harness; graphics-hook / AC evasion research; README [gdi32 .data swap])
- [ebpf-dex-dumper](entities/ebpf-dex-dumper.md) — Android in-memory DEX dumper via eBPF probes (LLeavesG; Go; rooted ARM64; UID/package filter; method traces; ART dump + auto-repair; dynamically loaded bytecode recovery; cheat / DexDumper based eBPF on Android Platform)
- [ebyte-syscalls](entities/ebyte-syscalls.md) — header-only C++ direct/indirect Windows syscalls (EvilBytecode; PEB/ntdll runtime SSN resolve; indirect syscall trampolines; VEH guard-page/INT3 call obfuscation; EDR/AC hook bypass research)
- [ELFpacker](entities/elfpacker.md) — ELF32 `.text` XOR packer + prepend decrypt stub (ELF header/PHDR/SHDR inject; Anti Cheat → Binary Packer `[ELF]`)
- [ELFcrypt](entities/elfcrypt.md) — ELF `.text` RC4 encrypt + self-decrypt stub (`mprotect`; mmap/section headers; runtime unpack; Anti Cheat → Binary Packer `[ELF]` RC4)
- [elfuck](entities/elfuck.md) — ELF packer/protector (NRV2E / password / anti-debug; Anti Cheat → Binary Packer)
- [elfloader](entities/elfloader.md) — Java ELF loader for ps5-jar-loader (PS5 kernel/modding/SDK gen; Anti Cheat → Binary Packer)
- [elf-got-patcher](entities/elf-got-patcher.md) — ARM64 ELF static GOT hook patcher (code-cave shellcode, `.init_array` RELA hijack, ASLR-safe config; ARM/ARM64 Android native `.so`; LeoChen-CoreMind; cheat / Android RE)
- [elobuddy-addons](entities/elobuddy-addons.md) — EloBuddy LoL addon scripts (champion automation; orbwalker; skill-shot prediction; utility modules; gmh5225; cheat / game:lol)
- [Embuche](entities/embuche.md) — ELF anti-reversing technique collection (Anti Cheat → Binary Packer `[ELF]`)
- [emulator](entities/emulator.md) — Unicorn+Capstone debugger-emulator hybrid (PE load; dbghelp imports; API hooking; instruction logging; Windows User Space Emulator)
- [emotet-deobfuscator](entities/emotet-deobfuscator.md) — Emotet CFF deobfuscation (ElvisBlue; Python IDA Hex-Rays plugin; microcode API; dispatcher register/status ID + block transition rewrite; cheat / IDA plugin to deobfuscate emotet CFF)
- [encrypted_value](entities/encrypted-value.md) — C++ header-only scalar value encrypt (Anti Cheat → Encrypt Variable)
- [eneio64-driver-exploit](entities/eneio64-driver-exploit.md) — `eneio64.sys` educational physmem BYOVD PoC (VA translation + token-theft LPE; modern Windows offsets; Xacone)
- [enum-real-dirbase](entities/enum-real-dirbase.md) — WDK kernel driver PoC; PFN database walk to enumerate real process CR3/dirbase from physical memory (Rythorndoran; Find real dirbase)
- [EfiCMake](entities/eficmake.md) — minimal CMake UEFI app scaffold (EDK2 headers; MSVC `.efi`; boot services)
- [EfiDump](entities/efidump.md) — EFI runtime driver + Windows client for post-boot process memory R/W (gnu-efi; EDK2 shell load; PoC dumper; gmh5225; [Dump])
- [EFI Driver Access](entities/efi-driver-access.md) — boot-loaded GNU-EFI runtime driver + usermode client for read/write/process-base (TheCruZ; pre-OS privileged memory; cheat / EFI RPM)
- [EfiGuard](entities/efiguard.md) — portable x64 UEFI bootkit; patches Windows boot chain to disable PatchGuard + DSE at startup; EDK2 + runtime disassembly; SetVariable patch modes; EfiDSEFix helper (Mattiwatti; README [EFI])
- [efi-memory](entities/efi-memory.md) — EFI runtime virtual-memory R/W PoC; SetVariable hook comm (EfiGuard-inspired); firmware + usermode + kdmapper-style mapper client (SamuelTulach; cheat / EFI RPM)
- [engine-showcase](entities/engine-showcase.md) — older custom C++ engine showcase (Lua/UI/levels/net; Game Engine / [Old engine])
- [Enigma](entities/enigma.md) — standalone native Ghidra SLEIGH/Pcode decompiler (C++; no JVM; BFD multi-arch; Capstone pipelines; embeddable for AI/agents; adam-040)
- [EntropyReducer](entities/entropy-reducer.md) — PE section padding / data-distribution manipulation to lower Shannon entropy (AV/AC heuristic evasion)
- [Encryptic Roblox Anti-Cheat](entities/encryptic-roblox-anti-cheat.md) — server-authoritative Luau AC for Roblox (movement/remote/fly/noclip/combat guards; strike BanManager; Studio demo; Longno242)
- [Ephemera](entities/ephemera.md) — multiplatform MEMORY.DMP analysis (WinDbg flavor; AC / kernel dump)
- [Epsilon](entities/epsilon.md) — NeoForge/Fabric multi-loader Minecraft utility client (Java; modular combat/movement/render; Mixins + event bus; addon system + Lua; Lumin/PrismRHI HUD; NekoyaHouse; cheat / game:minecraft)
- [EquilibriumEngine](entities/equilibrium-engine.md) — data-oriented C11 ECS game engine (multi-threaded; hot-reload libraries/shaders; clang; Game Engine / source)
- [equ8_bypass](entities/equ8-bypass.md) — simple EQU8 user-mode bypass (registry driver path + IOCTL handle close; explore anticheat:equ8)
- [EQU8-PoC](entities/equ8-poc.md) — full C++ EQU8 kernel driver reimplementation (explore anticheat:equ8; driver development)
- [epic-r6-v9](entities/epic-r6-v9.md) — R6 internal: DirectX rendering + SDK generation (C++; cheat / game:r6; beans42)
- [EpicSurvivalGame](entities/epic-survival-game.md) — UE4 FPS course (action system / event-driven C++; Game Develop / Unreal source)
- [esoterica](entities/esoterica.md) — BobbyAnguelov MIT C++ prototype engine framework (serialization/resource/reflection codegen/editor; actor/ECS hybrid, animation graphs, PhysX ragdoll; rendering/gameplay-architecture research; Game Engine / source)
- [evpp](entities/evpp.md) — C++11 libevent TCP/UDP/HTTP event-loop network library (nonblocking servers/clients; timers; async DNS; Memcached/NSQ clients; Game Network / source; Qihoo360)
- [ErisDbg](entities/erisdbg.md) — VT debugger (C/C++; kernel drivers / modding; cheat / debugging)
- [Eronana Packer](entities/eronana-packer.md) — Eronana basic Win32 x86 PE packer (C++ + companion compression; Visual Studio + CLI; self-validation extension branch; PE packing / unpacking RE education; Anti Cheat → Binary Packer `[PE X86]`)
- [EscapeFromTarkov-Trainer](entities/escapefromtarkov-trainer.md) — discontinued EFT internal trainer (Mono era; IL2CPP 1.0 pivot; cheat / game:eft)
- [meatyeftrelease](entities/meatyeftrelease.md) — open-source DMA EFT radar and companion toolkit (C++/ImGui; LeechCore/MemProcFS; fuser overlay; cheat / game:eft [DMA])
- [EfiTool](entities/efitool.md) — UEFI ExitBootServices in-RAM SYSTEM hive patch (SYSTEM shell; no disk/driver)
- [efi-monitor (ekknod)](entities/efi-monitor.md) — PatchGuard-safe MmCopyMemory hook (C/C++; driver development / graphics / networking; cheat / EFI driver area)
- [efiSeek](entities/efiseek.md) — Ghidra UEFI firmware analyzer (Java; EFI GUID/protocol/callback automation; LOCATE_PROTOCOL·NOTIFY·INSTALL_PROTOCOL_INTERFACE flows; headless firmware RE; DSecurity)
- [efiXplorer](entities/efixplorer.md) — IDA Pro UEFI firmware annotator (GUID/protocol matching; Boot·Runtime Services; PEI/DXE deps; bootkit/EFI malware RE; gmh5225)
- [EtwTi-Syscall-Hook](entities/etwti-syscall-hook.md) — Instrumentation Callback syscall hook (C/C++; Detection:hook / ETW TI–adjacent)
- [EtwTi-FluctuationMonitor](entities/etwti-fluctuation-monitor.md) — EtwTi provider registration fluctuation monitor (C; ETW callback tamper alerts)
- [Etw-Syscall](entities/etw-syscall.md) — ETW syscall hook/modding (C/C++; Some Tricks / Windows Ring3)
- [Etw-SyscallMonitor](entities/etw-syscall-monitor.md) — user-mode EtwTi syscall monitor (C; SSN/params/stacks; no hooks/driver)
- [EtwExplorer](entities/etw-explorer.md) — GUI browse of ETW providers / event manifests
- [EtwWatcher](entities/etw-watcher.md) — web UI browse/diff ETW provider manifests across Windows builds (ETWInspector-backed)
- [EtwKeyboardDetection](entities/etw-keyboard-detection.md) — Windows C++ ETW PoC detecting emulated vs physical keyboard input via USB telemetry paths; manual setup + keyboard tuning (Oliver-1-1; input integrity research; README [ETW])
- [EtwLeakKernel](entities/etwleakkernel.md) — ETW stack-trace PoC leaking kernel pointers (Idov31; C++; Administrator ETW consumer; exploitation / kernel address exposure research)
- [EyYoEtwWhereYouAt](entities/eyyoetwwhereyouat.md) — ETW process monitor PoC: kernel driver + krabs user-mode engine; correlate kernel notifications with missing ETW events to detect ETW patching; injection/hollowing heuristics (0xjbb; CMake/MSVC)
- [InfinityHook](entities/infinityhook.md) — original C ETW syscall hooking library; patches ETW trace callback pointer without SSDT/ntoskrnl inline hooks (everdox; Some Tricks / ETW Hook)
- [InfinityHook Pro Max](entities/infinityhook-promax.md) — C++ InfinityHook successor; driver hook management + disassembly; multi-Windows compatibility; VM-tested; kernel security / AC research (ThomasonZhao; ETW Hook WIN11)
- [InfinityHook Pro](entities/infinityhook-pro.md) — C/C++ VS InfinityHook modernization; Win7–Win11 compatibility via version-specific kernel offsets; low-level internals + comments; kernel security / AC / EDR RE (FiYHer; ETW Hook Ex)
- [InfinityHookPro Main](entities/infinityhookpro-main.md) — C/C++ InfinityHook derivative with physical-machine support; ETW/CKCL syscall interception, SSDT context handling, kernel pattern scanning; callback-based dispatch monitoring; Win7–Win11; AC telemetry / hook detection research (DearXiaoGui; ETW Hook WIN11)
- [InfinityHook Latest](entities/infinityhook-latest.md) — C/C++ VS kernel driver; ETW + HalPrivateDispatchTable syscall interception for newer Windows; PMC/trace RE notes; AC bypass / kernel security research (Oxygen1a1; ETW Hook WIN11)
- [ETWHOOK-InfinityHookClass](entities/etwhook-infinityhookclass.md) — C++ InfinityHook wrapper; ETW-backed syscall interception without SSDT patches (gmh5225; Some Tricks / ETW Hook Ex)
- [EUPMAccess](entities/eupmaccess.md) — C/C++ memory analysis (cheat / RPM; waryas)
- [EvCommunication](entities/evcommunication.md) — named-event kernel↔UM channel (NtTokenManager; vs IOCTL)
- [Evader](entities/evader.md) — KooroshRZ Windows PE packer/crypter (C++ packer + unpack stub; configurable key size/keyspace; runtime key recovery + in-memory execution; payload obfuscation, resource embedding, staged decryption; packer development / evasion-focused RE; Anti Cheat → Binary Packer `[PE]`)
- [executor](entities/executor.md) — PTE.User page-table injection (C/C++; kernel driver; cheat / injection:windows; gmh5225)
- [ethersplay](entities/ethersplay.md) — Binary Ninja EVM bytecode disassembler (Solidity smart-contract CFG/xrefs; blockchain auditor lane; gmh5225)
- [egui-d3d11](entities/egui-d3d11.md) — Rust egui renderer for D3D11 Present-hook overlay menus (HLSL + Win32 input; gmh5225; README [Menu])
- [eHook](entities/ehook.md) — Android ARM64 uprobe eBPF hook framework (Go orchestration + C eBPF; on-enter/on-leave handlers; memory R/W wrappers; rooted mobile game RE / runtime tracing; ShinoLeah; cheat / eBPF hook)
- [Egret Engine](entities/egret-core.md) — HTML5 game engine (modular 2D/3D rendering, GUI, audio, resource management; Game Engine / HTML5)
- [EC (ekknod)](entities/ec.md) — CS:GO kernel/driver/OpenGL cheat research (C/C++; cheat / game:csgo; README → EC_PRO-LAN)
- [EC_PRO-LAN (ekknod)](entities/ec-pro-lan.md) — FACEIT AC exploration (C++/C; driver development / OpenGL; Win10 1607 LTSB + Ryzen B350–B450 + Logitech G HUB)
- [Echinoidea](entities/echinoidea.md) — M3351AN lightweight external CS:GO cheat (C#; bunnyhop, overlay ESP, trigger bot; offset-driven workflow; write-signal reduction + VAC-era detection tradeoff notes; educational external cheat design; cheat / game:csgo [External C#])
- [echoac-poc](entities/echoac-poc.md) — echo.ac `echo_driver.sys` LPE PoC (read IOCTL → EPROCESS token theft → SYSTEM; anti-cheat-adjacent screenshare driver; gmh5225)
- [evil-mhyprot-cli](entities/evil-mhyprot-cli.md) — CLI PoC for `mhyprot2.sys` BYOVD (Genshin Impact; kernel/user R/W; gmh5225 + kkent030315 forks)
- [EvilKaspersky](entities/evil-kaspersky.md) — abuse Kaspersky signed kernel-mode drivers for unauthorized privileged ops; kernel code exec masquerading as AV activity (gmh5225)
- [ms-io-exploit](entities/ms-io-exploit.md) — `msIo64.sys` physmem-mapping BYOVD research (kkent030315; anycall for full client/driver)
- [msrexec](entities/msrexec.md) — C++ MSR write→kernel-exec library (`IA32_LSTAR` syscall redirect; VDM/bluepill backends; backengineering)
- [msynth](entities/msynth.md) — Python MBA deobfuscation framework (mrphrazer; pre-computed oracle tables + algebraic simplification + Smir stochastic synthesis; Miasm + optional SMT verify; SiMBA/GAMBA lineage; Cheat Mixed boolean-arithmetic)
- [MS Vulnerable Driver List](entities/ms-vulnerable-driver-list.md) — Microsoft-acknowledged vulnerable kernel drivers; blocklist hash list for BYOVD research (gmh5225)
- [MSFT DriverBlockList](entities/msft-driverblocklist.md) — Microsoft Recommended Driver Block Rules mirror (AC / black-signature defensive research)
- [MSSymbolsCollection](entities/mssymbolscollection.md) — pre-downloaded Microsoft kernel debug symbols (PDB; ntoskrnl, CI.dll, kernel-mode binaries; Kernel Symbols; gmh5225)
- [event_replay](entities/event-replay.md) — Android `/dev/input` touch/key record-replay Magisk module (game input sim)
- [EWS (Emulator Wrapper Solution)](entities/ews.md) — IDA Pro Unicorn emulation plugin (ARM/x86/x64; Keystone/Capstone trace + asm/disasm; embedded/Android/automotive firmware; cheat / Emulation)
- [Execution Trace Viewer](entities/execution-trace-viewer.md) — view/edit/analyze execution traces (obfuscated-code RE; cheat / debugging)
- [ExecutiveCallbackObjects](entities/executive-callback-objects.md) — Windows executive callback object research collection (0xcpu; C kernel PoCs + notes; register/inspect/analyze callback activity across networking, system state, boot, and security families; telemetry visibility / AC+EDR analysis; README Callback)
- [Exception-Ret-Spoofing](entities/exception-ret-spoofing.md) — x64 return-address spoofing via exception-handler flow (Peribunt; C++ PoC; gadget-chained spoofed call paths; calling-convention reliability/performance tradeoffs; anti-cheat evasion / control-flow research; Cheat Spoof Stack)
- [ExpoMon](entities/expomon.md) — x64dbg Qt GUI: live DLL export-table monitor (names/ordinals/addresses; Cheat x64dbg Plugins / Exports monitoring)
- [exengine](entities/exengine.md) — minimal C99 OpenGL 3D engine (IQM / lighting / scene; Game Engine source)
- [exploits](entities/exploits.md) — Windows kernel driver exploit collection (Bad-Jubies; AMD uProf `AmdPowerProfiler.sys` CVE-2025-61969/2026-0466; ASIO64; MS-BKRP padding oracle; cheat / [AmdPowerProfiler.sys])
- [explosion](entities/explosion.md) — cross-platform ECS C++ game engine (ExplosionEngine; Vulkan/DX12/Metal; editor + runtime modules; CMake/Conan; Qt/web-stack tooling; production-style workflows; game teams and rendering researchers)
- [exe_packer](entities/exe-packer.md) — C/C++ x86/x64 PE packer (Huffman compression; custom stub; NTDLL/KERNEL32 resolve; import decrypt; relocs; Anti Cheat → Binary Packer; andrew9382)
- [exrop](entities/exrop.md) — Python automatic ROP chain generator (constraint-driven gadget synthesis from binary; Cheat / ROP Generation)
- [EtherealEngine](entities/ethereal-engine.md) — cross-platform C++ engine (ECS + PBR + asset pipeline + editor; gmh5225; Game Engine source)
- [Ether-Uprotector](entities/ether-uprotector.md) — Unity IL2CPP + asset protection (C#; XXTEA/custom metadata crypto; asset parsing; key-function obfuscation; config-driven asset/code workflows; Game Engine Protection:Unity; Ether2023)
- [ExtendedCameraSettings](entities/extended-camera-settings.md) — gameplay camera mod (FOV / distance / rotation / viewpoint params beyond engine defaults; gmh5225)
- [External ImGui Android](entities/external-imgui-android.md) — external ImGui mod menu (OpenGL ES 3.0; SurfaceView overlay + NDK JNI; UE memory tools; gmh5225)
- [External Imgui Cheat Menu Example 2023](entities/external-imgui-cheat-menu-example-2023.md) — external ImGui menu template (SDL+OpenGL; `SDL_GL_SwapWindow` hook; GL context anti-flicker; gmh5225)
- [external-cheat-v3](entities/external-cheat-v3.md) — external CS:GO C++ framework (ImGui + D3D9; aimbot, glow, bhop, no-flash; runtime config modules; educational external tooling; Enzo0721; cheat / game:csgo [External])
- [external-dayz-cheat](entities/external-dayz-cheat.md) — DayZ external ESP (D3D9 transparent overlay; kernel driver entity reads; Enfusion SDK offsets; gmh5225)
- [external-esp-hack-assaultcube](entities/external-esp-hack-assaultcube.md) — beginner AssaultCube external ESP (GDI overlay; RPM boxes / names / health; gmh5225)
- [external-il2cpp](entities/external-il2cpp.md) — external C++ IL2CPP metadata navigator (WinAPI + RPM; assembly/class/field resolution; GameAssembly offset abstractions; Unity IL2CPP RE + external tooling; Compiled-Code; [Il2Cpp])
- [external-r6s-cheat](entities/external-r6s-cheat.md) — R6 external: kernel driver + shared memory section; ESP + aimbot (cheat / game:r6 [External]; gmh5225)
- [external-warzone-cheat](entities/external-warzone-cheat.md) — COD Warzone external: manually mapped kernel driver + overlay hijack ESP; C++ client/driver VS projects + game SDK/offset scaffolding (NMan1; driver-assisted external RE; cheat / game:cod warzone [External])
- [EzApexDMAAimbot](entities/ez-apex-dma-aimbot.md) — Apex Legends KVM/DMA aimbot + glow: KVM memory reader; Linux host reads game state; guest-side control; recoil randomization, smoothing, bone randomization, team-aware glow (C/C++; cheat / game:apex legends [KVM]; Y33Tcoder)
- [Encryptix Crypter](entities/encryptix-crypter.md) — Ezmatehw Windows GUI .NET/native PE crypter (C# .NET 4.8 WinForms; AES256/XOR + configurable stub; RegAsm/RegSvcs/MSBuild LOLBin injection; anti-VM/AntiCRACK; dnlib obfuscator; KeyAuth; crypter/packing/evasion research; Anti Cheat → Binary Packer)
- [ez-drv-bak](entities/ez-drv-bak.md) — Windows kernel driver backup & restore (gmh5225; driver development / AC lab baselines)
- [Evelion](entities/evelion.md) — CS 1.6 external ESP cheat (3a1; C++; ImGui overlay; configurable visuals; stream-proof presentation outside normal capture paths; Visual Studio; windowed-mode legacy target; external cheat architecture + overlay rendering + basic AC evasion; cheat / game:cs1.6 [External])
- [ezfrags](entities/ezfrags.md) — legacy FPS cheat IDA decompilation reconstruction (ALittlePatate; C++; incremental module reimplementation—glow ESP, radar, no-flash, bunny hop, memory/signature utilities; cheat internals, obfuscation patterns, practical reversing study; cheat / game:cs1.6)
- [FakeEye](entities/fakeeye.md) — BattlEye-style launcher emulator (Hypercall; lightweight C++ VS; launcher-side lab testing; mexploitui fork: BEService SCM + BE-style game launch; [Emulator])
- [FakerAndroid](entities/fakerandroid.md) — APK→Android Studio project translator; javaScaffolding + fakeCpp JNI `.so` hooks + IL2CPP C++ scaffolding (gmh5225; cheat / game engine explorer:Unity)
- [FakePDB](entities/fakepdb.md) — synthetic PDB generation from IDA analysis (stripped PE symbol recovery; PDB Generation From IDA; gmh5225)
- [FakeSign](entities/fakesign.md) — fake Authenticode signatures on PE binaries (superficial cert validation bypass; Fake Cert; gmh5225)
- [FakeEnclave](entities/fake-enclave.md) — VBS enclave abuse PoC (Some Tricks / Windows Ring0; gmh5225)
- [FairCount](entities/faircount.md) — Fabric server/client mod/resource-pack whitelist AC (join-time mod inventory incl. nested jar-in-jar; SHA-256 hash verification; auto-permits Fabric API modules; admin commands + localized kicks; XuJun05; Anti Cheat / game:minecraft)
- [Fatpack](entities/fatpack.md) — Fatmike-GH Windows x64 PE packer (C++ LZMA compression + custom loader stub; resource/section packing; icon/manifest; relocation/import/TLS; helper tooling for stub embed + post-build integration; executable protection research / manual-map loader experimentation; Anti Cheat → Binary Packer)
- [Faultline](entities/faultline.md) — usermode WS page-fault AC PoC (manual-map/shellcode; C++23)
- [FastPFHook (brew02)](entities/fast-pf-hook.md) — #PF page-fault hook: parse/relocate target instructions to shadow page; exception-handler dispatch (Some Tricks / Windows Ring0)
- [Fedoraware](entities/fedoraware.md) — TF2 training software (SE-Owned lineage; rendering / networking / animation; C/C++; cheat / game:team fortress 2; gmh5225)
- [Fenrir](entities/fenrir.md) — kernel rootkit/driver framework (process hide, memory access, callbacks; jmp rdi stack spoof; gmh5225; Cheat Spoof Stack / Ring0)
- [FF3 MMO](entities/ff3mmo.md) — browser NES FF3 MMO (Node.js WebSocket; server arbiters; inventory mirror anti-dup; wire validation)
- [FF ACE Anti-Cheat Analysis](entities/ff-ace-anticheat-analysis.md) — Tencent ACE Free Fire byte-level RE post-mortem (Lixense; libanogs/libanort on armeabi-v7a; IDA decompilation + Python/JS automation; APK hash, cert parsing, inline-hook scans, self-integrity checksum catalog + SQLite findings index; Explore AntiCheat System:ACE)
- [G-Presto Anti-Cheat Reverse-Engineered](entities/g-presto-anti-cheat-reverse-engineered.md) — mobile native AC RE study (ARandomPerson7; reconstructed C/C++ CPU/emulator checks, Dex handling, utility routines, encrypted loading; detection-path triggers and anti-tamper structure; Android AC internals research)
- [FightingGame-UE5](entities/fightinggame-ue5.md) — UE5 fighting game (root motion / anim BP / montage combat; Game Develop / Unreal source)
- [FileRecoveryTool](entities/file-recovery-tool.md) — NTFS/FAT32/ExFAT disk forensics (MFT/USN/carving; Win32)
- [FTK Imager OSX](entities/ftk-imager-osx.md) — macOS forensic disk imaging package (MrMugiwara; CLI drive acquisition, split outputs, MD5/SHA1 verify, E01/SMART, fragmentation/compression/evidence metadata; DFIR on macOS)
- [FlagSecurePatcher](entities/flagsecurepatcher.md) — Android FLAG_SECURE + screenshot-listener disable (Cheat / Magisk reference)
- [Force Page Protection](entities/force-page-protection.md) — x64dbg plugin: force page protection on mapped views when NtProtectVirtualMemory fails; SEC_NO_CHANGE remap bypass (changeofpace; Bypass Remap Memory)
- [Forensia](entities/forensia.md) — Windows anti-forensics utility (C++; file shredding, event-log/prefetch suppression, USN journal handling, timestamp cleanup, shell/cache artifact removal, Defender quarantine clearing, self-removal; post-exploitation trace reduction; red-team / IR validation; PaulNorman01)
- [Fibratus](entities/fibratus.md) — Go Windows kernel ETW observability (rules / Elasticsearch; exploration & tracing)
- [Fiano](entities/fiano.md) — Go UEFI firmware parse/edit toolkit (Firmware Volumes, FFS, PE32, LZMA/Tiano; flash extract/replace/remove)
- [Fox Magisk Module Manager](entities/fox-magisk-module-manager.md) — Kotlin Android app; Magisk module discovery/download/install from online repos; update checks, custom repos, local vs remote views (Fox2Code; Cheat / Magisk)
- [FuckCertVerifyTimeValidity](entities/fuck-cert-verify-time-validity.md) — Detours signtool import hook; bypass cert time validity for leaked/expired Authenticode (Sign Leaked Cert)
- [fix-arxan](entities/fix-arxan.md) — Arxan PE protector dump/decrypt (loader info + working image; Dump Fix)
- [findcrypt-yara](entities/findcrypt-yara.md) — IDA Pro FindCrypt plugin (YARA crypto-constant scan; AES/DES/SHA/CRC signatures; algorithm annotation; gmh5225; cheat / Yara)
- [findfunc](entities/findfunc.md) — IDA Pro function pattern search (byte patterns, instruction sequences, operand types, xrefs; Recognizing Function By Pattern; gmh5225; cheat / IDA Plugins)
- [find-xrefs](entities/find-xrefs.md) — IDA Pro plugin: materialize missing string/data xrefs on large binaries (RIP-relative/absolute scan; optional raw 32-bit sliding window; NumPy-accelerated sweeps; TheCruZ; cheat / IDA Plugins)
- [xrefgen](entities/xrefgen.md) — IDA Pro plugin: Mandiant XRefer-extending indirect/complex control-flow xref generator (data-flow taint, call-graph, CFF/opaque-predicate detection; confidence-scored XRefer export; x86/x64/ARM/ARM64/MIPS/WASM; seifreed; cheat / IDA Plugins)
- [xrefxpert](entities/xrefxpert.md) — IDA Pro dockable xref navigation panel (Python/PyQt; real-time function xref list, click-to-jump, hotkeys; immediates/parameter-count/signature filters; 0xGotcha; cheat / IDA Plugins)
- [findyara-ida](entities/findyara-ida.md) — IDA Pro YARA scan plugin (match highlight + disasm navigation; custom malware/crypto/packer rules; gmh5225; cheat / Yara)
- [figma-context-mcp](entities/figma-context-mcp.md) — Framelink MCP for Figma (TypeScript; simplified design metadata + image download; stdio/HTTP; model-friendly layout/style context; design-to-code UI automation; Game Develop / MCP server)
- [face-injector-v2](entities/face-injector-v2.md) — C++ mapped-kernel-driver injector framework (KANKOSHEV; payload dropper + privilege elevation + randomized staging paths + mapper execution flow; multiple game targets; ban warnings; Injection/Testing; educational driver-backed injection)
- [NoScreen](entities/noscreen.md) — kernel-assisted window protection (KANKOSHEV; custom driver + device interface; display-affinity-like anti-capture without target process memory modification; privacy / anti-capture / AC research; Hide Window)
- [Finger](entities/finger.md) — cloud function symbol recognition (Python SDK + IDA 7+ plugin; feature extraction → recognition backend → rename/highlight; Recognizing Function By Cloud; aliyunav; cheat / IDA Plugins)
- [firmeye](entities/firmeye.md) — IDA Pro IoT firmware vuln hunter (Python; argument tracing into sensitive functions; static + debugger-assisted dynamic checks; overflow/command-exec/format-string rules; CLI batch; Vu1nT0tal; cheat / IoT / IDA Plugins)
- [FRIEND](entities/friend.md) — IDA plugin: register/instruction docs in disasm + Hex-Rays (Capstone extensions; contextual hints; external links; function summaries; C++/CMake; cheat / IDA Plugins)
- [FlatRedBall](entities/flatredball.md) — C# / .NET 2D engine (editor + runtime; Game Engine)
- [FallGuys](entities/fall-guys.md) — Fall Guys kernel cheat (driver communication + memory manipulation; speed/fly/physics exploits; Unity; gmh5225)
- [FallGuysSharp](entities/fall-guys-sharp.md) — Fall Guys C# IL2CPP cheat (managed injection; movement/gameplay mods; gmh5225)
- [fallguys-frida-modmenu](entities/fallguys-frida-modmenu.md) — Fall Guys Android Frida mod menu (TypeScript; frida-il2cpp-bridge + frida-java-menu; Objection/APKEditor; repinek)
- [fARM64](entities/farm64.md) — pure-Rust no_std AArch64 disassembler/encoder (iced-x86-shaped API; zero-heap decode; SVE/SME/SIMD/FP; semantic round-trip encode; wasm/bare-metal friendly; binsnake; cheat / RE tools)
- [fastDbg](entities/fastdbg.md) — Go x64 ELF Linux debugger (ptrace breakpoints/memory/registers/disasm; CLI; eBPF tracing + QEMU kernel-debug modules; Yayoi-cs; x86_64 native/qemu kernel debugger)
- [fastlogs](entities/fastlogs.md) — Unity/GameMaker remote debug engine (AitiX; log/device/screenshot/scene snapshot ingest → short shareable links; WebGL/mobile/console; self-hosted Node.js/SQLite; agent/QA remote command channel; Game Develop / debug)
- [Flying-Guys-fully-modified](entities/flying-guys-fully-modified.md) — Fall Guys fully modified cheat suite (kernel driver + KdMapper + ImGui; fly/movement hacks; gmh5225)
- [FlyingGuys](entities/flying-guys.md) — Fall Guys kernel cheat (KdMapper custom driver + ImGui overlay; zlib network manipulation; gmh5225)
- [FPGA DMA Multi Tool](entities/fpga-dma-multi-tool.md) — Artix-7 FPGA DMA board detect/flash/speedtest (Go/Fyne; openFPGALoader)
- [fps-movement](entities/fps-movement.md) — Unity C# beginner FPS controller (OguzKaira; Rigidbody player; mouse look, walk/jump/dash/crouch; README setup/bindings; learner movement prototype; Game Engine / Unity FPS)
- [FPSSample](entities/fpssample.md) — Unity official production FPS sample (character animation, weapons, networked multiplayer, asset pipelines; Game Engine / Unity Game; Unity-Technologies)
- [Freedom](entities/freedom.md) — Android Google Play billing IAP bypass (billing-service hook; fake purchase confirmations; gmh5225)
- [frida-android-hook](entities/frida-android-hook.md) — Frida class/function trace + return-value modify (cheat / Frida)
- [frida-boot](entities/frida-boot.md) — Beginner Frida binary instrumentation workshop (YouTube stream; gmh5225; cheat / Frida)
- [frida-ceserver](entities/frida-ceserver.md) — Frida Cheat Engine ceserver (mobile/desktop remote CE scan/write; non-rooted Android attach; gmh5225)
- [frida-detection](entities/frida-detection.md) — Java/C++ Frida detection (hooking; Anti Cheat → Detection:Frida)
- [FridaDetectionBypass](entities/frida-detection-bypass.md) — Android Frida detection bypass techniques (debugger/port/protocol/memory checks; JS + CLI + native JNI; aimardcr; Debugger Detection Bypass)
- [Ultimate Frida Bypass](entities/ultimate-frida-bypass.md) — Layered Frida JS script; nineteen Java/native hooks; Talsec/freeRASP/PairIP RASP bypass; port/netstat Frida detection, SSL pinning, Crashlytics suppression (Ishanoshada; Android anti-instrumentation)
- [frida-find-jni-native-methods](entities/frida-find-jni-native-methods.md) — Frida runtime JNI native-method discovery (JavaScript hooking + memory analysis; cheat / Frida)
- [frida-ide](entities/frida-ide.md) — Web-based Frida IDE; Python/FastAPI + React/Monaco; device/process management, JADX decompilation, Claude Code hook assistant, codeshare import (MrOplus; cheat / Frida)
- [frida-mobile-kit](entities/frida-mobile-kit.md) — Organized Frida script toolkit for Android dynamic analysis; cert pinning bypass (OkHttp, Flutter, React Native), traffic/crypto logging, root-detection bypass, runtime memory inspection; Python CLI (unrandoms; cheat / Frida)
- [vscode-frida](entities/vscode-frida.md) — Unofficial VS Code Frida workbench; target selection, script dispatch, REPL, device logs, iOS/Android helper tooling; TypeScript + Python; frida-tools integration (ChiChou; cheat / Frida)
- [frida-il2cpp-bridge](entities/frida-il2cpp-bridge.md) — Frida dump Il2Cpp (Unity 5.3–6000.1.x; game engine explorer:Unity)
- [frida-il2cpp-datacollector](entities/frida-il2cpp-datacollector.md) — Frida IL2CPP runtime metadata harvester (Android/iOS; CE MonoDataCollector port; SDK generation)
- [Frida-RS](entities/frida-rs.md) — KernelSU module wrapping official frida-server; Rust supervisor + Material 3 WebUI; multi-ABI; loopback + token-gated TCP (MiChongs)
- [Frida-Scripts](entities/frida-scripts.md) — Frida JS/Python scripts (editor tooling / hooking; cheat / Frida)
- [frida-seccomp](entities/frida-seccomp.md) — Android syscall tracing/hooking (Frida + seccomp trap; SVC capture, stack/reg args; Python orchestration + CModule; Abbbbbi)
- [frida-smali-trace](entities/frida-smali-trace.md) — Frida ART smali instruction tracer (SeeFlowerX; JS/TS agents; interpreter-path hooks; execution logs; IDA offset prep; Android RE / runtime behavior; cheat / Smali trace)
- [frida-stealth](entities/frida-stealth.md) — AsenOsen Frida stealth patch set; Android fingerprint reduction (ports, sockets, thread names, loop labels, frida-core/frida-gum markers; patch files + build instructions; anti-instrumentation RE)
- [FridaScript](entities/fridascript.md) — Frida game/app hook scripts (call intercept, API trace, runtime modify; Android/iOS/desktop; gmh5225; iOS low-level scripting)
- [frida-stack](entities/frida-stack.md) — Frida stack/backtrace helpers (cheat / Frida)
- [frida-ue4dump](entities/frida-ue4dump.md) — Frida script for Android UE4 SDK dump (reflection hook; UObject / offsets / headers)
- [frida-vmp-bypass](entities/frida-vmp-bypass.md) — Frida boundary-hook harness for stacked Android VMProtect+OLLVM (libc/JNI/Java exit monitoring; caller-address cross-ref; spawn-mode; tomhamidi97-arch; Fix VMP / Fix OLLVM)
- [frida-watchpoint-tutorial](entities/frida-watchpoint-tutorial.md) — Frida `setHardwareWatchpoint` tutorial (hardware data breakpoints; cheat / Frida)
- [frida_usb_dump](entities/frida-usb-dump.md) — Frida macOS USB traffic sniff/dump (Big Sur offsets; cheat / Frida)
- [fridare](entities/fridare.md) — Frida repackaging / anti-detection (iOS+Android; string/symbol hex-replace)
- [Florida](entities/florida.md) — Ylarod Frida patch/build automation; anti-detection Android frida-server (string/symbol/artifact renaming)
- [strongR-frida-android](entities/strongr-frida-android.md) — CrackerCat Android frida-server patch automation; upstream tracking; strings/pipes/symbols/protocol patches; anti-instrumentation RE
- [FlavorTown](entities/flavortown.md) — multi-language shellcode execution techniques (C/C#/MATLAB; process/memory execution paths; evasion tradecraft; Wra7h; Shellcode Engine & Tricks)
- [FlowGraph](entities/flowgraph.md) — UE event-flow graph plugin (MothCocoon; C++; async nodes, custom pins, visual debugging; design-agnostic gameplay/narrative scripting; Plugins:Unreal)
- [flirtnite](entities/flirtnite.md) — External Fortnite cheat framework (NurdAlert; C++; Hyper-V memory interface + Unreal structure handling; entity/aim modules; DirectX 9 ImGui menu/ESP overlay; cheat / game:fortnite [External])
- [florida-zygisk](entities/florida-zygisk.md) — Magisk/KernelSU/APatch boot module; auto-starts Florida anti-detection frida-server
- [magisk-hluda](entities/magisk-hluda.md) — Magisk boot module; stealth-modified frida-server + WebUI lifecycle (Exo1i; cheat / Magisk / Frida)
- [flutter-re-demo](entities/flutter-re-demo.md) — Guardsquare Flutter RE experiment kit (Python IDA scripts; reFlutter/DWARF Dart rename, VM memory import, object/xref recovery; Frida capture; sample APKs)
- [frank](entities/frank.md) — JavaScript LoL assistant / WeGame replacement (rendering, animation, asset pipelines; gmh5225; cheat / game:lol)
- [FrankensteinAPCInjection](entities/frankenstein-apc-injection.md) — low-footprint Windows APC injection PoC (leaked handles + natural RWX + NtQueueApcThreadEx2; avoids VirtualAllocEx/CreateRemoteThread; S12cybersecurity; injection:windows)
- [frinja](entities/frinja.md) — Binary Ninja Frida plugin (BinRida continuation; static+dynamic RE bridge; dzervas; cheat / Binary Ninja plugins)
- [frinet](entities/frinet.md) — IDA Pro plugin: Frida dynamic instrumentation ↔ static analysis sync (memory/args/returns; cheat / Frida-based tracer)
- [flare-vm](entities/flare-vm.md) — Mandiant Windows analysis VM (Chocolatey/Boxstarter; malware/IR/RE lab provisioning)


- [fdlibm](entities/fdlibm.md) — portable C libm (Sun fdlibm transcendental/elementary math; Mathematics)
- [file-explorer](entities/file-explorer.md) — Kotlin/Compose rooted Android file manager (dual-pane, Shizuku/libsu, APK analyzer, hex editor, Magisk/KernelSU/APatch module browser; Cheat Android File Explorer; SysAdminDoc)
- [FreeDirect](entities/free-direct.md) — DX3 DirectDraw/DirectSound/DirectPlay subset on SDL3 (legacy 2D; DirectX Compatibility)
- [Freeplay](entities/freeplay.md) — Rust Windows trainer (TOML configs; CE `.CT` import + Auto Assembler; Tauri overlay + CLI; Steam/Epic/GOG; refuses EAC/BE/Vanguard; offline single-player)
- [FreeType](entities/freetype.md) — portable C font rasterization (TrueType/OpenType/CFF/Type 1/bitmap; hinting, anti-aliasing, subpixel; pluggable drivers; Render fonts)
- [Free-RASP-Community](entities/free-rasp-community.md) — Community hub for freeRASP mobile RASP SDK (Talsec; root/Magisk/Frida/hook/emulator/tamper/integrity; Android/iOS/Flutter/RN/Unity/Unreal/KMP/Cordova/Capacitor)
- [Free-RASP-Android](entities/free-rasp-android.md) — Native Android freeRASP sample (Talsec; Kotlin; root/Magisk/Frida/emulator/tamper/integrity)
- [Free-RASP-Capacitor](entities/free-rasp-capacitor.md) — Capacitor freeRASP plugin (Talsec; root/jailbreak/Frida/Shadow/tamper/integrity; Android+iOS)
- [Free-RASP-Cordova](entities/free-rasp-cordova.md) — Cordova freeRASP plugin (Talsec; root/jailbreak/Frida/tamper/integrity; Android+iOS)
- [Free-RASP-Flutter](entities/free-rasp-flutter.md) — Flutter freeRASP plugin (Talsec; root/jailbreak/Frida/debugger/emulator/tamper; Android+iOS)
- [Free-RASP-iOS](entities/free-rasp-ios.md) — Native iOS freeRASP SDK (Talsec; TalsecRuntime XCFramework; jailbreak/Frida/hook/simulator/tamper/signature; Swift SPM)
- [Free-RASP-KMP](entities/free-rasp-kmp.md) — Kotlin Multiplatform freeRASP plugin (Talsec; shared Kotlin; root/jailbreak/Frida/hook/emulator/tamper/integrity; Android+iOS)
- [Free-RASP-ReactNative](entities/free-rasp-reactnative.md) — React Native freeRASP plugin (Talsec; Magisk/KernelSU/Frida/tamper/integrity; Android+iOS)
- [Free-RASP-Unity-POC](entities/free-rasp-unity-poc.md) — Unity freeRASP plugin (Talsec; root/jailbreak/Frida/tamper/integrity; Android+iOS)

- [fn-dma-cheat](entities/fn-dma-cheat.md) — Fortnite DMA cheat sample (C++; Unreal Engine; cheat / game:fortnite [DMA])
- [fortnite-3.5](entities/fortnite-3.5.md) — Fortnite 3.50 internal DLL (memory aimbot + ESP; zgui menu; user-generated UE SDK; gmh5225; [Internal])
- [fortnite-cheat-leak](entities/fortnite-cheat-leak.md) — Leaked Fortnite internal cheat source (C++; MinHook + Detours hooks; gameplay/render/utility modules; no-spread / movement / vehicle / teleport; cheat architecture RE; Waihbe; cheat / game:fortnite [Internal])
- [fortnite-cheat-source-internal](entities/fortnite-cheat-source-internal.md) — Fortnite internal: SDK generation + hooking (C++; cheat / game:fortnite)
- [fortnite-cheato-ud-eac-be](entities/fortnite-cheato-ud-eac-be.md) — Fortnite external cheat prototype (JeanToBinks; C++; process memory R/W + Unreal transform math + DirectX overlay; player structure extraction + entity ESP visualization; cheat dev + EAC evasion research; cheat / game:fortnite [External])
- [function-collections](entities/function-collections.md) — C PoCs for uncommon Ring3 paths (memory analysis; AC callback lane)
- [FunctionInliner](entities/function-inliner.md) — IDA Pro plugin: reverse clang function outlining (`--moutline`); inline outlined helpers per caller; restore Hex-Rays on ARM size-optimized binaries (Cellebrite Labs; cheat / IDA Plugins)
- [fumo-loader](entities/fumo-loader.md) — PTE.User page-table injection loader (C/C++; kernel driver; anti-cheat research; cheat / injection:windows; dumbasPL)
- [Fusion AntiCheat](entities/fusion-anti-cheat.md) — FusionGuard server-side LabFusion/BONELAB MelonLoader AC (Harmony network policy; crash-barcode blocklist; avatar allowlist; SteamID lists; Discord webhooks; irembo337)
- [furikuri](entities/furikuri.md) — C/C++ obfuscation engine (jnastarot; AC Obfuscation Engine)
- [Flax Engine](entities/flax-engine.md) — full-source C++/C# 3D game engine and editor (FlaxEngine; mixed native rendering/platform + .NET managed scripting; Vulkan; Windows/Linux/macOS; engine runtime, editor, build scripts; Game Engine / source [C++/C# 3D])
- [Fyrox](entities/fyrox.md) — production-ready Rust 2D/3D game engine (FyroxEngine; modular crates + integrated scene editor; editor-driven iteration; examples and learning resources; Game Engine / source [Rust])
- [fuzzable](entities/fuzzable.md) — C/C++ source + binary fuzz-target discovery framework (Binary Ninja plugins lane; ex0dus-0x; Anti Cheat > Fuzzer)
- [FortKit](entities/fortkit.md) — Fortnite dump / SDK generation (C++; cheat / game:fortnite [Dump])
- [FortConsole](entities/fortconsole.md) — Fortnite UE in-game console re-enable DLL (Makk5; C++ x64; pattern scan + engine object construction; UObject enums + memory helpers; internal injection; UE internals / game security research in AC-disabled environments; cheat / game:fortnite)
- [forti-research](entities/forti-research.md) — FortiClient **`fortimon3_74.sys`** minifilter PoC (mein-0; C; Filter Manager port → unauthenticated 8-byte kill message; kernel terminate incl. PPL Defender/lsass; missing caller auth + handle-table misuse; Fortinet-signed BYOVD; anti-exploit product security research; cheat)
- [Fortnite](entities/fortnite.md) — Fortnite mechanics tutorial series + code (loqix; Game Develop / source; video walkthrough)
- [Fortnite-External-P2C](entities/fortnite-external-p2c.md) — Fortnite external: shader-oriented sample (C++; [External])
- [fortnite-esp-aimbot-exploits-hwid-spoofer-cleaner-hack-cheat](entities/fortnite-esp-aimbot-exploits-hwid-spoofer-cleaner-hack-cheat.md) — Fortnite external: ESP/aimbot + HWID spoofer; DiscordHook64.dll overlay hijack via pattern scan (gmh5225; [External])
- [fortnite-exploits](entities/fortnite-exploits.md) — Fortnite exploit collection + EAC bypass techniques (client vulns; UE4 features; cheat injection / memory access; gmh5225; [Exploits])
- [fortnite-efi-external](entities/fortnite-efi-external.md) — Fortnite external: UEFI runtime services + NtSetSystemEnvironmentValueEx memory reads; no Windows kernel driver (gmh5225; [External])
- [fortnite-external](entities/fortnite-external.md) — Fortnite external: custom kernel-driver memory access / DX9 overlay / UE offset utilities (gmh5225; [External])
- [keyzp1337-fortnite](entities/keyzp1337-fortnite.md) — Fortnite internal cheat base (Keyzp1337; C++ x64 Visual Studio; ESP/aimbot/no recoil + ImGui menu; BYO injection; offset-dependent UE integration; cheat development + client internals RE; cheat / game:fortnite [Internal])
- [keyzpon-thefluxxx-fortnite-external](entities/keyzpon-thefluxxx-fortnite-external.md) — Fortnite external learning sample (KeyzpOnTheFluxxx; C++ Visual Studio; offset updates + external process interaction; typical external cheat structure; anti-cheat interaction analysis; cheat / game:fortnite [External])
- [fortnite-external-4](entities/fortnite-external-4.md) — Fortnite external: circa 2019; socket-based kernel driver RPM; Capcom.sys driver mapper; ESP/aimbot (gmh5225; [External])
- [fortnite-external-5](entities/fortnite-external-5.md) — Fortnite external: integrated HWID spoofer (kernel disk serial) + ImGui overlay + FNV-1a obfuscation; ESP/aimbot RPM (gmh5225; [External])
- [fortnite-external-cheat-base](entities/fortnite-external-cheat-base.md) — Fortnite external starter template (bootmgfw): kernel-driver IOCTL phys mem R/W + CR3 bypass + mouse input; UE SDK + UWorld decrypt; bone W2S ESP; DX11 ImGui overlay (C++; cheat / game:fortnite [External])
- [fortnite-external-cheat-leak](entities/fortnite-external-cheat-leak.md) — Leaked Fortnite external cheat source (C++; DirectX 9 ImGui overlay; driver-assisted RPM; camera/bone W2S + configurable aim/ESP menu; Waihbe; cheat / game:fortnite [External])
- [fortnite-external-cheat-winsense-leak](entities/fortnite-external-cheat-winsense-leak.md) — WinSense leaked Fortnite external (kernel driver comm; ImGui DX9; KeyAuth; CryptoPP API encryption; gmh5225; [External])
- [fortnite-external-exploits](entities/fortnite-external-exploits.md) — External Fortnite exploit PoC snippets: C++ direct memory writes for position manipulation and spin-style logic; raw external memory manipulation fragments (Zetolac; cheat / game:fortnite [External Exploits])
- [fortnite-external-w2s](entities/fortnite-external-w2s.md) — Fortnite external W2S PoC: camera/viewpoint memory read + decrypt; matrix construction + perspective projection for ESP overlays (Zetolac; cheat / game:fortnite)
- [fortnite-external-cheat-source-code](entities/fortnite-external-cheat-source-code.md) — Fortnite external: Vaselinikives lineage; DX9 ImGui; W2S ESP + aimbot via Win32 RPM (gmh5225)
- [fortnite-evo-cc-source-external-cheat](entities/fortnite-evo-cc-source-external-cheat.md) — Fortnite external: leaked Evo.cc source; DX9 overlay; W2S ESP + aimbot via Win32 RPM (gmh5225; [External])
- [fortnite-external-evo.gj](entities/fortnite-external-evo-gj.md) — Fortnite external: kernel-driver RPM / ESP / aimbot (C++; [External])
- [fortnite-external-base-source](entities/fortnite-external-base-source.md) — Fortnite external: IOCTL RPM / CR3 stub / ImGui DX11 Discord Overlay (C++; [External])
- [Fortnite-External-Source](entities/fortnite-external-source.md) — Fortnite external: driver / SDK generation (C++)
- [Fortnite-CameraCachePOV](entities/fortnite-camera-cache-pov.md) — Fortnite camera-cache POV sample (C++; cheat / game:fortnite)
- [Fortnite-FNameEntry](entities/fortnite-fnameentry.md) — Fortnite FName/FNameEntry sample (C++; cheat / game:fortnite)
- [Fortnite-Fltokens-and-offsets](entities/fortnite-fltokens-and-offsets.md) — Fortnite FLToken/offset grabber (stale / offline)
- [Fortnite-Hack-Esp-Exploits-With-Menu](entities/fortnite-hack-esp-exploits-with-menu.md) — Fortnite internal cheat (C++; DirectX 9 ImGui menu; box/line ESP + silent aim + FOV/teleport exploits + panic key; injection/hooking/overlay RE practice; YMY1666527646; cheat / game:fortnite [Internal])
- [fortnite-internal-updated-ritz](entities/fortnite-internal-updated-ritz.md) — Updated Ritz internal Fortnite cheat (UE4 hooking; ESP/aimbot/exploits; refreshed offsets + EAC bypass; gmh5225; [Internal])
- [fortnite-internal-cheat-fixed-and-updated](entities/fortnite-internal-cheat-fixed-and-updated.md) — Fixed/updated Fortnite internal DLL (memory + silent aimbot; box/skeleton/distance/snapline/FOV/chest/ammo ESP; DX11 ImGui overlay; gmh5225; cheat / game:fortnite)
- [fortnite-leak5](entities/fortnite-leak5.md) — Leaked INFARCTED.CC base Fortnite internal (SDK generation + hooking; gmh5225; cheat / game:fortnite)
- [fortnite-masterpasta-ihack-source-leak](entities/fortnite-masterpasta-ihack-source-leak.md) — Leaked Masterpasta/iHack Fortnite internal (Detours hooking; UObject array; bone matrix + GetViewpoint; engine-rendered ESP; gmh5225; [Internal])
- [zerogui-fortnite-internal](entities/zerogui-fortnite-internal.md) — ZeroGui internal Fortnite cheat (visuals-only ESP enabled; aimbot/exploits disabled; gmh5225; [Internal])
- [Fortnite Offset Dumper](entities/fortnite-offset-dumper.md) — Fortnite live-process offset dumper (class layouts; regex-cleaned names; hierarchical offsets; gmh5225; cheat / game:fortnite [Offset & Dump])
- [fortnite-offsets](entities/fortnite-offsets.md) — Fortnite memory offset / UE4 SDK structure tables (player/camera/bones/weapons/globals; gmh5225; cheat / game:fortnite [Offset])
- [fortnite-offsets (Android1337)](entities/android1337-fortnite-offsets.md) — Fortnite memory offset dump for cheat/RE tooling (Android1337; upstream repo offline; README-listed offset reference; cheat / game:fortnite [Offset])
- [fortnite-offsets (Trydos)](entities/trydos-fortnite-offsets.md) — Lightweight JSON Fortnite offset database (engine pointers, entity/camera/weapon fields; data-only feed; Trydos; cheat / game:fortnite [Offset])
- [fortnite-offsets-and-sigs](entities/fortnite-offsets-and-sigs.md) — Compact Fortnite offsets + signatures reference with C++ pattern-scan examples, global offset notes, address derivation and string-decryption helpers (Zetolac; cheat / game:fortnite [Offset])
- [Fortnite-Offsets-Sigs-and-more](entities/fortnite-offsets-sigs-and-more.md) — Compact C/C++ header reference for Fortnite UE pointer chains, structure offsets, and signature values (ReallReaper; quick external-tool integration; cheat / game:fortnite [Offset])
- [fortnite-w2s-offset-fortnite](entities/fortnite-w2s-offset-fortnite.md) — Fortnite world-to-screen offset collection (view/projection + camera; gmh5225; cheat / game:fortnite [Offset])
- [fortnite-sigs (F0NDO)](entities/f0ndo-fortnite-sigs.md) — Compact plain-text Fortnite/UE signature dump (world/name pool/event dispatch/visibility/aiming patterns; updater-pipeline friendly; F0NDO; cheat / game:fortnite [Signature])
- [fortnite-sigs](entities/fortnite-sigs.md) — Fortnite IDA-style byte-pattern signatures (GObjects/GNames/ProcessEvent; gmh5225; cheat / game:fortnite [Offset])
- [fortnite-sigs-updated-every-update](entities/fortnite-sigs-updated-every-update.md) — Per-patch Fortnite byte-pattern signatures (Season 2 Chapter 3+; UWorld/GObjects/FnFree/GetNameByIndex; pattern-mask notation; gmh5225; cheat / game:fortnite [Offset])
- [fortnite-triadz](entities/fortnite-triadz.md) — Triadz internal Fortnite cheat (UE4 hooking; ESP/aimbot/exploit; gmh5225; EAC-protected internal architecture reference)
- [fortnite-ud-external](entities/fortnite-ud-external.md) — undetected external Fortnite cheat (stealthy memory reads; ESP/aimbot; BattlEye+EAC bypass framing; gmh5225; [External])
- [fortnite-voyagertf](entities/fortnite-voyagertf.md) — VoyagerTF external Fortnite cheat (ESP/aimbot/UE game-state reads via out-of-process memory; gmh5225; [External])
- [fortnite-virtual-offsets](entities/fortnite-virtual-offsets.md) — Fortnite vtable/view offset dump (text; gmh5225; cheat / game:fortnite [Virtual Table Offsets])
- [game-cheating-exploit-detection-agent-skill (dungnotnull)](entities/game-cheating-exploit-detection-agent-skill.md) — Claude Code skill + Python engine; six-step statistical/invariant aimbot, wallhack, macro, memory-tamper, and exploit detectors with CI-tested harness (Anti Cheat → Detection)
- [game-design-documents](entities/game-design-documents.md) — curated classic game design docs and PDFs (Doom, GTA, Fallout, Planescape: Torment, etc.; Game Develop / guide)
- [game-engine-detector](entities/game-engine-detector.md) — Python APK/IPA game-engine detector (Mobile Game)
- [gamedev](entities/gamedev.md) — Chinese-language curated gamedev resource index (tools, mixed reality, engine frameworks, learning; README [Unity]; Game Develop / guide)
- [GameDev MCP Server](entities/gamedev-mcp-server.md) — engine-agnostic C# ASP.NET Core MCP proxy host for Unity-MCP, Godot-MCP, and Unreal-MCP plugins; SignalR bridge; stdio/streamableHttp; OAuth/session handling; Docker/.NET tool (IvanMurzak; Game Develop / MCP)
- [GameDev Resources](entities/gamedev-resources.md) — curated index across art/code/engines/tooling/design/monetization; paid/free/OSS availability labels (Kavex; Game Development resources / Game Develop / guide)
- [bgfx](entities/bgfx.md) — cross-platform rendering library (D3D9/11/12, Metal, OpenGL/ES, Vulkan, WebGPU; shaderc GLSL cross-compiler; Rendering library)
- [GDevelop](entities/gdevelop.md) — open-source cross-platform 2D/3D game engine (GDCore C++ + GDevelop.js + Pixi.js GDJS + React newIDE; visual events; HTML5/Electron export; Game Engine / source)
- [GPlayEngine](entities/gplayengine.md) — GamePlay 3D v3.0 fork (BGFX replaces OpenGL 2.x; SDL2 + deferred pipeline + Bullet + ImGui editor; DirectX/Vulkan/Metal/OpenGL; Game Engine / source [C++ 2D/3D])
- [GameEngineFromScratch](entities/game-engine-from-scratch.md) — Zhihu from-scratch next-gen engine sample (DirectX/OpenGL; Game Engine / guide)
- [Gameplay](entities/gameplay.md) — cross-platform C++ 3D game framework (OpenGL ES 2.0/3.0, Bullet, OpenAL, Lua; CMake; Win/macOS/Linux/iOS/Android; FBX/Collada→.gpb encoder; Game Engine / source [2D/3D])
- [CRYENGINE (GameEngine-CRYENGINE)](entities/gameengine-cryengine.md) — Crytek CRYENGINE source mirror (renderer/physics/audio/AI/animation/editor; AAA; Game Engine / source; gmh5225)
- [Far Cry (leaked source)](entities/farcry.md) — Far Cry 1 leaked CryEngine 1 full archive (renderer/physics/AI/game logic/editor; Game Engine / source; gmh5225; FarCry + Far-Cry-1-Source-Full)
- [CX3D Framework](entities/gameengine-cx3d.md) — easy-to-use C++ 3D game framework (Game Develop / source; README [3D]; gmh5225)
- [MapleEngine](entities/gameengine-mapleengine.md) — MapleStory-inspired custom game engine (rendering/networking/game logic; 2D side-scrolling MMORPG; Game Develop / source / game:maplestory; gmh5225)
- [gamedev_libraries](entities/gamedev-libraries.md) — data-oriented C/C++ gamedev library collection (POD/flat arrays; Game Develop / guide)
- [gamedevguide](entities/gamedevguide.md) — personal UE4/gamedev onboarding notes site (rendering/shaders/networking/Houdini; MkDocs/Obsidian; Game Engine / guide)
- [game-reversing](entities/game-reversing.md) — curated game RE learning materials (Windows PC; x86-first; cheat / guide)
- [game-reversed-study](entities/game-reversed-study.md) — Chinese CE guide documentation (cheat / guide; reference, not runtime)
- [game-hacking](entities/game-hacking.md) — curated game hacking tool index by type (disassemblers/debuggers/hex/memory/.NET/graphics debuggers/RE tutorials; CE/x64dbg/IDA/Ghidra/dnSpy/RenderDoc; dsasmblr; cheat / guide)
- [game-hacking-code](entities/game-hacking-code.md) — No Starch Press *Game Hacking* book companion code (Visual Studio Win32 chapter demos; C++; memory scan/injection/NOP/IAT/vfunc/call hooks, Adobe AIR + D3D Present overlays, Lua forensics; cheat / guide)
- [game-lag-reducer](entities/game-lag-reducer.md) — cross-API D3D11/GL/Vulkan shader capture/flatten/replace for FPS (WPF launcher + C++ HookDll; user-consented GPU visual reduction; DirectX / hook)
- [game-networking-sockets](entities/game-networking-sockets.md) — Valve cross-platform game networking transport (C++/C; reliable/unreliable messaging; ack vectors, bandwidth lanes, network simulation; encrypted transport + P2P NAT traversal; desktop/mobile/console; README [Steam]; ValveSoftware)
- [game-networking-resources](entities/game-networking-resources.md) — curated multiplayer game networking knowledge base (articles, talks, libraries, tools; netcode: latency compensation, rollback, prediction, replication; MFatihMAR; Game Network / guide)
- [game-overlay-ui-hook](entities/game-overlay-ui-hook.md) — Steam overlay VGUI UI hook example (C++; PaintTraverse hook + shared-memory render comms; fallback shape drawing; overlay rendering constraints; README [Steam]; Unkn0wnH4ck3r)
- [game-programmer-study-notes](entities/game-programmer-study-notes.md) — QianMo graphics/rendering study notes (GPU Gems, shaders, ray tracing, post-processing; Markdown + diagrams; Game Engine / guide)
- [gamehacking-cheatsheet](entities/gamehacking-cheatsheet.md) — game-hacking RE cheatsheet (memory / injection / AC; cheat / guide)
- [GameAI-paper-list](entities/gameai-paper-list.md) — zh curated game-AI research papers (modding / tooling; AI category)
- [gamesneeze](entities/gamesneeze.md) — Linux CS:GO cheat research (seksea; cheat / game:csgo)
- [GamesoftACS](entities/gamesoftacs.md) — Knight Online Gamesoft server-side AC (speed/teleport/damage/inventory + client integrity)
- [GarHal CSGO](entities/garhal-csgo.md) — CS:GO kernel cheat driver + IOCTL usermode controller (KM entity R/W; planned kernel DirectX overlay; dretax; cheat / game:csgo)
- [gan-aimbots](entities/gan-aimbots.md) — Miffyli academic ML-aimbot research (Python; ViZDoom; data collection, GAN training/evaluation, classifier plots, experiment orchestration; cheat generation + detection research; cheat / Machine Learning)
- [gamba](entities/gamba.md) — Python MBA expression simplifier (DenuvoSoftwareSolutions; linear/nonlinear MBA + bitwise expression factory; NeuReduce/QSynth/Syntia experiment datasets; research paper + slides; obfuscation/deobfuscation research; Cheat Simplify MBA)
- [garble](entities/garble.md) — Go build-time obfuscator (wraps `cmd/go`; identifier/path hash rename, metadata strip, optional literals, tiny mode, experimental CFF; `garble reverse`; AC Obfuscation Engine)
- [garlic](entities/garlic.md) — C multi-format binary analysis / Fast APK/DEX/JAR Java decompiler (PE/ELF/Mach-O/DEX/APK + ARM)
- [GlacierW MBA (Malware Behavior Analyzer)](entities/glacierw-mba.md) — QEMU whole-system dynamic binary analysis (memory forensics, API tracing, behavioral monitoring; Windows/Linux guests; GlacierW; Cheat QEMU/KVM / DBI)
- [Glass](entities/glass.md) — Rust multi-arch binary analysis toolkit (ARM64/x86-64; ELF/Mach-O/DEX/PE; disasm/CFG/xrefs/patch; built-in MCP for mobile RE; `glass mcp`)
- [Glotus Client](entities/glotus-client.md) — TypeScript/Bun Tampermonkey Moomoo.io userscript (document-start WebSocket/game-object/input hooks; modular combat/bot automation; Altcha PoW bypass via Web Workers; Cheat / Debugging)
- [Ghost Anti-Cheat](entities/ghost-anticheat.md) — Nukkit Bedrock prediction AC (Java Gradle; ECS BDS movement/collision/physics simulation; latency-compensated packet checks; phase/no-slow/anti-knockback, reach/hitbox, elytra, bad packets; GhostNgEnd; Anti Cheat / game:minecraft)
- [GhostJoin](entities/ghostjoin.md) — pure Python headless Minecraft Java protocol client (stdlib Handshake→Login→Configuration→Play; offline-mode UUID, compression, Keep Alive; protocol ~773–776; authorized anti-bot/anti-cheat stress testing; KuryCat; cheat / game:minecraft)
- [GhostLock App](entities/ghostlock-app.md) — Android one-tap root (CVE-2026-43499 pselect race; NDK + Java UI; Rust boot/OTA offset extractor; per-kernel JSON; KernelSU/ReSukiSU; cheat / Android root)
- [GhostLock OnePlus](entities/ghostlock-oneplus.md) — native CVE-2026-43499 futex PI UAF exploit (pselect6 stack overlay + rb-tree writes; NDK C + Python per-SoC/GKI offset tables; locked-bootloader OnePlus/OPPO/realme/Xiaomi + KernelSU; JoinChang; cheat / Android Root)
- [gba-ghidra-loader](entities/gba-ghidra-loader.md) — Ghidra GBA ROM loader (memory/IO map + cartridge header; GameBoy)
- [gb-studio](entities/gb-studio.md) — Game Boy adventure game creator (TypeScript/JS; driver/render/animation; Mac/Linux/Windows; GameBoy)
- [gfred](entities/gfred.md) — Ghidra Command Palette extension (keyboard action search; prebuilt Ghidra 9.2.0 dist; cheat / Ghidra Plugins)
- [ghinterfacescsgo](entities/ghinterfacescsgo.md) — Linux CS:GO interface/hook scaffold (C++; shared-object loader; minimal interface interaction; educational Linux hook base; VitorMob; cheat / game:csgo [Internal])
- [ghidra](entities/ghidra.md) — Full NSA Ghidra RE framework source (Java decompiler, debugger integrations; gmh5225 mirror/fork)
- [ghidra-bridge](entities/ghidra-bridge.md) — Python 3 bridge to Ghidra scripting (CPython outside Jython; external automation / gpt-wpre)
- [ghidra-coffparser](entities/ghidra-coffparser.md) — Python Ghidra COFF object parser (headers/symbols/string tables/relocations with type info; applies relocations and xrefs beyond default loader; MEhrn00; cheat / COFF)
- [ghidra-cpp-class-analyzer](entities/ghidra-cpp-class-analyzer.md) — Ghidra C++ class/RTTI analyzer (GCC/Clang/MSVC RTTI, vtables, ctors/dtors, inheritance; class hierarchy views; Java/Gradle; astrelsky)
- [ghidra-decompiler-plugins](entities/ghidra-decompiler-plugins.md) — runtime-loadable Ghidra decompiler plugins (Bazel; RISC-V vector Rules/Actions; datatest; embedded/firmware RE)
- [ghidradboy](entities/ghidradboy.md) — Ghidra Game Boy extension (Kotlin/Java; Sharp SM83 Sleigh; banked/unbanked ROM load, boot ROM variants, memory map blocks, hardware register symbols; Gekkio; cheat / Game Boy)
- [ghidrust](entities/ghidrust.md) — Ghidra Rust binary analyzer (Java extension; Rust detection heuristics, Function ID stdlib matching, experimental C→Rust decompiler output; stripped executables; paused maintenance; DMaroo; cheat / Rust decompiler)
- [ghidra-findcrypt](entities/ghidra-findcrypt.md) — Ghidra analyzer for cryptographic constants (Java Gradle extension; JSON signature DB; AES/DES/MD5/SHA-1/TEA/Salsa/CRC32 labeling; TorgoTorgo; cheat / Ghidra Plugins)
- [ghidra-frida-hook-gen](entities/ghidra-frida-hook-gen.md) — Ghidra extension generates Frida hook scripts from disassembly context (Java; right-click full scripts, reusable snippets, advanced hook config; function-level and arbitrary address hooks; CENSUS; static→dynamic RE bridge; cheat / Ghidra Plugins)
- [ghidra-gradle-plugin](entities/ghidra-gradle-plugin.md) — archived Gradle plugin for Ghidra extension builds (classpath wiring, IDE setup; Java/Groovy; astrelsky)
- [ghidra-hexagon-sleigh](entities/ghidra-hexagon-sleigh.md) — Ghidra SLEIGH processor module for Qualcomm Hexagon QDSP6 (Hexagon v81 p-code decomp, hardware loops/predicates, System/Monitor+Guest; Java analyzers, QDB log viewer, Python QMI/QuRT/RTTI scripts, Q6Zip/DLPager emulation decompression; CUB3D; Qualcomm firmware/binary RE)
- [ghidra-hexeditor](entities/ghidra-hexeditor.md) — dockable hex editor Ghidra script plugin (Java/Swing; in-place byte edit, binary search, BinaryExporter save; dark mode; sengi12; cheat / Ghidra Plugins)
- [Scalpel](entities/scalpel.md) — dockable dark-mode Ghidra hex/ASCII editor (Java 21/Swing; Listing-synced cursor; 256 B–64 KiB read window; wildcard hex/UTF-8 search; inline transaction patching; ntdlll; cheat / Ghidra Plugins)
- [ghidra-minidump-loader](entities/ghidra-minidump-loader.md) — Windows minidump Ghidra extension (Java/Gradle; runtime module mapping, private memory/thread stacks, thread-view stack walking; crash-dump / post-mortem RE; Rantanen; cheat / Ghidra Plugins)
- [ghidra-manager](entities/ghidra-manager.md) — cross-platform Python CLI Ghidra toolchain manager (release-pinned install, SHA-256 verify, curated extensions incl. GhidraMCP, project launch, MCP bridge, binary compare, rollback; alexbevi)
- [ghidra-headless-mcp](entities/ghidra-headless-mcp.md) — headless Ghidra MCP server (40+ RE tools; fake backend + CLI; Cursor/Claude agents)
- [ghidra-mcp](entities/ghidra-mcp.md) — Ghidra MCP server/plugin (Java extension + Python bridge; 200+ AI-assisted RE tools; GUI/headless; BSim; HTTP/stdio; Docker; bethington)
- [ghidramcp](entities/ghidramcp.md) — Ghidra MCP server/plugin (Java extension + Python bridge; decompile, symbol/method enum, automated renaming; LaurieWired; MCP for Ghidra)
- [ghidra-nativeaot](entities/ghidra-nativeaot.md) — Ghidra .NET Native AOT analyzer/UI plugin (type hierarchy, frozen objects, vtable redirections, ReadyToRun metadata recovery, metadata browser + rename refactor; .NET 8+; Washi1337)
- [ghidra-obfuscation-detection](entities/ghidra-obfuscation-detection.md) — Ghidra script for obfuscated/complex function triage (Java; heuristic function-body feature extraction; malware/game protected-code prioritization; Deatty; cheat / Ghidra Scripts)
- [GptHidra](entities/gpthidra.md) — Ghidra ChatGPT plugin (selected-function explanation to console; cheat / Ghidra Plugins)
- [ghidra-orbis](entities/ghidra-orbis.md) — Ghidra PS4 Orbis extension (loaders, analyzers, syscall/NID data; Java/Gradle; astrelsky)
- [ghidra-openai](entities/ghidra-openai.md) — Ghidra OpenAI GPT plugin (decompiled-function explain/rename/vuln hints; ChatGPT lane)
- [ghidra-scripts](entities/ghidra-scripts.md) — CTF-oriented GhidraScript collection (automated common RE challenge patterns; cheat / Scripts)
- [ghidra-struct-importer](entities/ghidra-struct-importer.md) — GhidraScript targeted C struct importer (Java; per-struct dependency resolution beyond Parse C Source; SDK-leak/decompiled-header layout reconstruction; Katharsas; cheat / Struct Importer)
- [pagalaxylab-ghidra-scripts](entities/pagalaxylab-ghidra-scripts.md) — Python Ghidra scripts (P-Code param tracing, ObjC msgSend, error-print rename, OLLVM CFF deobfuscation; shared helpers; firmware/binary RE; PAGalaxyLab; cheat / Scripts)
- [ghidrascripts](entities/ghidrascripts.md) — Maintained ATR GhidraScript automation (Java; AI rename, complexity viz, Golang, BSim/FunctionID, SHAREM/Malpedia; advanced-threat-research; cheat / Some scripts)
- [ghidra-vxd-tools](entities/ghidra-vxd-tools.md) — Ghidra Jython Windows 9x VxD INT 20h annotator (VxDCall struct + VMDisp9x service decode; legacy kernel driver / historical game-protection RE; andrew-hoffman)
- [ghidr-orean](entities/ghidr-orean.md) — Ghidra Python Oreans unvirtualizer (Deathway port; CISC/TIGER/RISC/FISH VM configs; Themida/WinLicense/Code Virtualizer; Marisa-Chan; Fix Themida / Ghidra Scripts)
- [ghidriff](entities/ghidriff.md) — Python CLI Ghidra binary diffing engine (headless two-binary analysis; graph/BSim matching; Markdown decomp/call-graph reports; PE/Mach-O/ELF; Docker CI; clearbluejar)
- [ghiradec](entities/ghiradec.md) — programmatic Ghidra decompiler (integration or standalone; Ghidra analysis engine; automated binary analysis; Cheat Ghidra Decompiler)
- [GhidrAssist](entities/ghidrassist.md) — Ghidra LLM extension (OpenAI v1-compatible APIs; local/cloud; cheat / Ghidra Plugins)
- [ghidrassist-mcp](entities/ghidrassist-mcp.md) — Ghidra MCP extension (AI assistants / automation / scripts → Ghidra analysis APIs)
- [ghidra-svr-bridge](entities/ghidra-svr-bridge.md) — BN ↔ Ghidra Server bidirectional sync (symbols/comments/types; Java bridge + Qt6 sidebar)
- [GH AntiDebug Bypass Practice Tool](entities/gh-anti-debug-bypass-practice-tool.md) — Win32 ImGui/DX11 anti-debug bypass training lab (toggle checks → DETECTED; Anti Debugging)
- [GH D3D11 Hook](entities/gh-d3d11-hook.md) — Guided Hacking DX11 hook sample (heavily commented; no external libs; DirectX Hook)
- [GH Entity List Finder](entities/gh-entity-list-finder.md) — Guided Hacking entity-list discovery (x64/x86 live-process scan for likely list addresses; cheat / RE tools)
- [GH Injector Library](entities/gh-injector-library.md) — Broihon C++ Windows DLL inject library (x86/x64/WOW64; Ldr/manual-map loaders; NtCreateThreadEx/APC/thread hijack/SetWindowsHookEx/kernel callbacks; cloaking + .NET assembly load; inject library and tool)
- [GH Offset Dumper](entities/gh-offset-dumper.md) — Windows signature/netvar offset dumper (C++; live process scan → headers/JSON; Source engine; `[Offset dumper]`)
- [GuidedHacking Injector](entities/guided-hacking-injector.md) — Qt GUI Windows DLL injector (LoadLibrary/manual map/APC/KM driver; cloaking; Injection Testing)
- [GuardAC](entities/guardac.md) — Spigot/Paper/Folia Minecraft **1.21.x** AI-assisted server-side AC (Kotlin; cloud API aim-check verdicts; local alerts/violations/punishment ladders; alert-only mode; cross-server reputation; Geyser/WorldGuard exemptions; PalassCQ; Anti Cheat / game:minecraft)
- [guardian-rs](entities/guardian-rs.md) — Rust x86-64 code/PE virtualizer (three-component VM obfuscation; AC Obfuscation Engine `[VM]`)
- [gdb-mcp](entities/gdb-mcp.md) — lightweight GDB MCP (FastMCP + SSE; gdb-command proxy; breakpoints / memory / step)
- [gdbghidra](entities/gdbghidra.md) — live GDB ↔ Ghidra bridge (Python client + Java extension; cursor/stack sync, register propagation, breakpoints, relocations; Comsecuris; GDB session)
- [gdbserver9x](entities/gdbserver9x.md) — GDB RSP stub for 32-bit Win98SE/XP (VC6; Binary Ninja adapter)
- [gdrv-loader](entities/gdrv-loader.md) — Gigabyte `gdrv64.sys` unsigned driver mapper (BYOVD; DSE bypass; kernel research)
- [gdrv-sys-exploit](entities/gdrv-sys-exploit.md) — Gigabyte `gdrv.sys` PoC exploit toolkit (C++ Visual Studio; arbitrary-write and shellcode examples; Win11; educational BYOVD research; AmitMoshel1)
- [gdriver-lib](entities/gdriver-lib.md) — C++ library wrapping Gigabyte `gdrv64.sys` (physmem R/W, physical mapping, kernel ops via IOCTLs; BYOVD access primitive)
- [gdrv-loader-v2](entities/gdrv-loader-v2.md) — Gigabyte `gdrv.sys` loader v2 (C/C++; cheat / vulnerable-driver driver development)
- [gdrv-loader-updated](entities/gdrv-loader-updated.md) — Updated Gigabyte `gdrv.sys` unsigned loader (C/C++; Win10/11; CLI load/unload; kernel research; 1337kenzo)
- [GDB-Windows-Binaries](entities/gdb-windows-binaries.md) — portable Windows GDB (mingw-w64; TUI/Python; Cheat Debugging)
- [GDDumper](entities/gddumper.md) — Cheat Engine Lua: Godot 3.x/4.x SceneTree / GDScript runtime dump (Win x86/x64)
- [GDPatch](entities/gdpatch.md) — cross-platform Godot 3.x/4.x mod loader (Rust; runtime GDScript patching, Lua hooks, filesystem virtualization; Win/Linux/macOS; runtime mod loading without modifying game files)
- [GDMaim](entities/gdmaim.md) — Godot 4.x export plugin: GDScript obfuscation (rename/inlining/strip/shuffle; GDBC strings; source maps; Game Engine Protection:Godot)
- [Gatling](entities/gatling.md) — Scala/JVM load-testing framework (Akka/Netty async; HTTP/WebSocket/gRPC/MQTT scenarios; percentile HTML reports; Game Testing / Server Testing)
- [gd-internal](entities/gd-internal.md) — Geometry Dash internal cheat (ImGui menu; Comfortaa font; signatures in hookmgr.cpp; gmh5225)
- [gatewarden-public](entities/gatewarden-public.md) — Godot 4.7 tower defense prototype with published PathValidator placement-abuse rejection codes and deterministic 30 Hz sim (Game Develop / source)
- [godot-sandbox](entities/godot-sandbox.md) — Godot addon: sandboxed mod code for safe player extensions (all platforms; Plugins:Godot)
- [godot-plush-character](entities/godot-plush-character.md) — Godot 4.x plush/soft-body character rendering (fabric shaders, soft deformation, procedural animation; stylized stuffed-animal aesthetic)
- [godot-resource-remaps](entities/godot-resource-remaps.md) — Godot editor export plugin: platform-specific resource remapping via feature tags (textures/audio/scenes; Windows/Android/iOS/Web; Plugins:Godot)
- [godot](entities/godot.md) — Godot Engine OSS source (GDScript/C#; scene graph, scripting, rendering; Game Engine / source)
- [godot-demo-projects](entities/godot-demo-projects.md) — official Godot demos + template projects (GitHub Pages exports; Game Develop / source)
- [godogen](entities/godogen.md) — autonomous Godot/Bevy/Babylon.js game dev with Claude Code and Codex (feature planning, asset gen, screenshot self-repair; Game Develop / AI Agents)
- [godfather-fortnite-cheat-cracked](entities/godfather-fortnite-cheat-cracked.md) — Leaked/modified Fortnite external cheat (CheaterRehab; C++ DX9 Dear ImGui overlay + kernel driver with callback comm; loader/mapper deployment + detection-status notes; pasted-cheat infrastructure RE; cheat / game:fortnite [External])
- [goldberg-emulator](entities/goldberg-emulator.md) — Goldberg Steam Emulator (offline Steamworks API; LAN; preservation / Steam DRM+API RE)
- [GoldSourceRebuild](entities/goldsource-rebuild.md) — decompiled/reconstructed GoldSource engine rebuild (HL1; rendering / networking / game systems; modding / research; Game Engine / RE)
- [go-detection-hyper-v](entities/go-detection-hyper-v.md) — Go Hyper-V VM detection (CPUID feature checks, timing, hypervisor presence; gmh5225; Hyper-v)
- [GoDefender](entities/godefender.md) — Windows Go security toolkit (EvilBytecode; anti-debug, anti-VM, anti-DLL-injection, hook detection; modular internal components; low-level WinAPI; security-sensitive Go app hardening; Anti Debugging)
- [goesp](entities/goesp.md) — cross-platform CS:GO ESP (danielkrupinski; modern C++; Dear ImGui overlay; memory-read entity ESP via game render path; Windows/Linux; cheat / game:csgo [Cross-platform])
- [gojo-the-spire](entities/gojo-the-spire.md) — Java Slay the Spire Gojo Satoru character mod (cards/deck, assets, mod config; gameplay customization and character-mod dev learning; Bratah123; Slay The Spire Remastered Mod / Game Develop)
- [goomba](entities/goomba.md) — Hex-Rays decompiler plugin; linear/non-linear MBA simplification; algebraic heuristics + optional fingerprint-oracle; Z3 soundness verification; IDA Pro / Hex-Rays workflows (HexRaysSA; Cheat Simplify MBA)
- [goose-goose-duck-hack](entities/goose-goose-duck-hack.md) — Goose Goose Duck Unity IL2CPP internal cheat (ImGui overlay; dumped Assembly-CSharp + ACTk bypass; ESP/role reveal; gmh5225)
- [GOverlay](entities/goverlay.md) — DirectX 9–12 hook overlay framework (Electron/Qt/CEF/WPF composite; IPC + shared memory; companion/stats UI)
- [GOWTool](entities/gow-tool.md) — God of War (2018) Windows asset extractor/converter (HitmanHimself; C++ Visual Studio; DirectXTex + glTF; proprietary format RE / modding; God of War 2018)
- [GamePlug](entities/gameplug.md) — Multi-API (D3D9–12/Vulkan) proxy-DLL framework for ImGui overlays and game plugins on Windows (C++23; plugin API; x86/x64)
- [GoodEye](entities/goodeye.md) — BEDaisy APC instrumentation kernel driver (BE per-thread APC callback RE; cheat / explore anticheat system:be)
- [unturned-godot](entities/unturned-godot.md) — Godot 4.7 port: reverse-engineers Unturned Unity formats from Steam install (Game Engine / asset extraction)

- [gemini-genius](entities/gemini-genius.md) — IDA Python 3 graph-embedding binary function similarity (Jackiemin233; CFG/ACFG extraction, model training/inference, cross-binary matching; cheat / IDA python 3 plugin and binary file similarity comparison)
- [genmc](entities/genmc.md) — IDAPython Hex-Rays microcode IR viewer (decompiler-plugin debug; cheat / IDA Plugins)
- [genpatch](entities/genpatch.md) — Python binary-patch script generator (dialog on success; cheat / IDA Plugins)
- [gecko](entities/gecko.md) — Rust GB/GBC cycle-accurate emulator (CPU/PPU/APU; wgpu; desktop library GUI)
- [gecit](entities/gecit.md) — cross-platform transparent proxy (Go; eBPF sock_ops on Linux; TUN + DNS on macOS/Windows; fake TLS ClientHello desync + DoH; DPI bypass research)
- [Goodmans Kernel](entities/goodmans-kernel.md) — signed WDM driver with wasm3; hot-load unsigned wasm32 kernel modules via IOCTL (NT/HAL FFI, InfinityHook, HVCI-compliant; zer0condition)
- [gexec](entities/gexec.md) — register-machine bytecode VM for Windows kernel drivers (gasm, gvmlift PE lifter, host API for kernel memory/MSR/physical access; zer0condition)
- [genshin-akebi-gc](entities/genshin-akebi-gc.md) — Genshin Impact Akebi-framework cheat client (teleport, god mode, speed, auto-play; Grasscutter server; gmh5225)
- [genshin-cheat](entities/genshin-cheat.md) — Genshin Impact IL2CPP/memory gameplay cheat (god mode, stamina, teleport, speed; gmh5225)
- [genshin-cheetos](entities/genshin-cheetos.md) — Genshin Impact menu cheat codename Cheetos (speed, teleport, infinite stamina; client memory; gmh5225)
- [genshin-debugger-bypass](entities/genshin-debugger-bypass.md) — Genshin Impact anti-debug bypass (Detours API hooks + `mhyprot2` unload; gmh5225)
- [genshin-easy-peasy-bypass](entities/genshin-easy-peasy-bypass.md) — Genshin Impact EasyPeasy/`mhyprot2` AC bypass (circumvent kernel driver checks; modified clients; gmh5225)
- [genshin-genshin-data](entities/genshin-genshin-data.md) — Genshin Impact live-game data dump (GenshinData client config/content tables; gmh5225)
- [genshin-impact-base](entities/genshin-impact-base.md) — Genshin Impact cheat/mod base framework (memory access, SDK structures, IL2CPP hooks; gmh5225)
- [genshin-impact-script](entities/genshin-impact-script.md) — TypeScript Genshin Impact script (cheat / game:genshin impact)
- [genshinjumpfixer2](entities/genshinjumpfixer2.md) — Genshin Impact Decode CFG (jump-target calc + code simplify; khang06)
- [genshin-remove-banner](entities/genshin-remove-banner.md) — C++ Genshin Impact in-game banner removal (cheat / game:genshin impact; gmh5225)
- [genymotion-kernel](entities/genymotion-kernel.md) — Genymotion Android emulator Linux kernel source (full tree; Android configs + virtual-device patches; emulator dev and virtualized Android kernel RE; Genymobile)
- [grapefruit](entities/grapefruit.md) — Frida-powered iOS/Android runtime exploration toolkit; web UI; method/crypto hooks, filesystem/SQLite, logs/crash reports, keychain/keystore, traffic capture, Java/ObjC introspection (ChiChou; cheat / Frida)
- [grasscutter](entities/grasscutter.md) — Genshin Impact open-source private-server emulator (Java; server logic, progression, world simulation, network protocol; Grasscutters)
- [ghost](entities/ghost.md) — Rust cross-platform process injection detector (RWX, shellcode, hooks, hollowing, threads; CLI/TUI; Detection:Injection)
- [ghostbusters](entities/ghostbusters.md) — C++ senior-design modding-oriented anti-cheat detection system (Anti Cheat / guide; gmh5225)
- [GhostVEH](entities/ghostveh.md) — C++ PoC stealth VEH chain manipulation (EvilBytecode; direct `LdrpVectorHandlerList` edit via `LdrProtectMrdata`; RtlEncodePointer/RtlDecodePointer; bypasses RtlAddVectoredExceptionHandler; VEH internals / anti-debug research)
- [ghostdebug](entities/ghostdebug.md) — Windows x64 VEH stealth debugger (native DLL + .NET CLI; named-pipe JSON; INT3/single-step without Win32 Debug API; Iced disasm; TestTarget anti-debug validation; VollRagm; cheat / debugging)
- [Ghost Recon Wildlands First-Person (No EAC)](entities/ghost-recon-wildlands-first-person-no-eac.md) — first-person camera mod for Ghost Recon Wildlands via dxgi.dll proxy, ThunkHook, and in-process memory writes on current EAC builds (Firejumper93; AnvilNext 2.0; modding / RE)
- [GenericGraph](entities/generic-graph.md) — UE4 generic graph data-structure plugin (editor tooling / asset pipelines; Plugins:Unreal)
- [Generic Game Detour API Hook](entities/generic-game-detour-api-hook.md) — Modular Microsoft Detours AC-bypass framework (~130 API hooks / 16 modules; dinput8.dll proxy; x86/x64)
- [Gepetto](entities/gepetto.md) — Python IDA Pro LLM plugin: explain decompiled functions + variable rename + comments; cloud/local providers; menu + hotkeys (JusticeRage; cheat / IDA Plugins / `[ChatGPT]`)
- [gina_public](entities/gina-public.md) — IRP Null hijack kernel driver (C/C++; cheat / driver communication)
- [get-unity](entities/get-unity.md) — JS CLI: Unity Editor download URL (latest/pinned; Game Tools)
- [GetPixel vs BitBlt GetDIBits](entities/getpixel-vs-bitblt-getdibits.md) — Win32 GDI capture benchmark: GetPixel vs BitBlt+GetDIBits; switchable modes; BitBlt bulk read much faster; external frame capture for game tooling / security research (PierreCiholas; [GetPixel])
- [GhidraMetrics](entities/ghidrametrics.md) — Ghidra native-code metrics (cyclomatic / size / call depth; headless JSON)
- [GreyM](entities/greym.md) — PE-focused C/C++ debugging/packing (Anti Cheat → Binary Packer `[PE]`)
- [glfm](entities/glfm.md) — GLFW-inspired single-header C API for OpenGL ES/Metal mobile windowing (iOS/tvOS/Android/Emscripten; touch/keyboard/sensors; Write OpenGL ES code in C/C++)
- [glTF](entities/gltf.md) — Khronos royalty-free runtime 3D asset delivery spec (core spec, extensions, conformance assets, JSON/GLB samples; Runtime 3D Asset Delivery)
- [gltut](entities/gltut.md) — OpenGL tutorial (C++ / XML docs; Renderer / OpenGL Render)
- [gnn-deobfuscation](entities/gnn-deobfuscation.md) — GNN-based MBA deobfuscation (LostOxygen; Python; training/testing pipelines; Loki/MBABlast/MBAObfuscator datasets by variable count and operation depth; ML simplification research; Cheat Mixed boolean-arithmetic)
- [gpt-wpre](entities/gpt-wpre.md) — Ghidra+GPT whole-program RE (ghidra_bridge decomp/call graph → bottom-up function summaries; ChatGPT)
- [GPU_ShellCode](entities/gpu-shellcode.md) — NVIDIA GPU-resident shellcode staging PoC (CUDA + MinHook; payload in VRAM during idle; VEH restore to RX pages; memory hiding / AC evasion research; H1d3r)
- [grafana-final-scanner](entities/grafana-final-scanner.md) — Grafana CVE scanner (path traversal/SSRF/auth bypass/info disclosure; version fingerprinting + config analysis; HTML/CSV/JSON reports; Cheat / RE Tools)
- [GRR Rapid Response](entities/grr.md) — Google remote live forensics (Python server + HTTP agents; fleet artifact/memory/registry collection; IS forensics)
- [Grim (GrimAC)](entities/grim.md) — open-source Minecraft Java anticheat (Java/Kotlin; movement simulation, world replication, latency-aware validation; async multithreaded checks; modern server versions; GrimAnticheat; Anti Cheat / game:minecraft)
- [gta4-rtx](entities/gta4-rtx.md) — GTA IV RTX Remix compatibility (DirectX / ASI Loader remaster)
- [gtaiv-eflc-fusionfix](entities/gtaiv-eflc-fusionfix.md) — GTA IV Complete Edition ASI fix patch (rendering/graphics/FPS/QoL/scripting/widescreen; ThirteenAG)
- [Game-GTA-re3](entities/game-gta-re3.md) — Reverse-engineered GTA III & Vice City engines (re3/reVC; decompiled portable C++; cross-platform incl. PS Vita; CMake; gmh5225)
- [grand-theft-auto-modding-source](entities/grand-theft-auto-modding-source.md) — GTA modding source collection (re3/reVC; GTA III/Vice City RE; platform ports; DirectX/OpenGL; mod infrastructure; gmh5225)
- [GrandTheftAutoV-Cheat](entities/grandtheftautov-cheat.md) — GTA V PC mod-menu cheat (money / vehicle spawn / teleport / player mods; scripting + memory manipulation; gmh5225)
- [gta-5-sigs-1.59](entities/gta-5-sigs-1.59.md) — GTA V v1.59 byte-pattern signatures (World/ReplayInterface/Viewport/Ammo/Clip; gmh5225; cheat / game:gta5 [Offset])
- [gta5cheat](entities/gta5cheat.md) — GTA V Python cheat (memory analysis; cheat / game:gta5; gmh5225)
- [gta5cheat-qt](entities/gta5cheat-qt.md) — GTA V Qt cheat (C/C++; memory analysis; cheat / game:gta5)
- [GTA5-DMA-CHEAT](entities/gta5-dma-cheat.md) — GTA V DMA cheat (MemProcFS/VMMDLL + ImGui/DX11; god mode / teleport / vehicle edits; Legacy + Enhanced; CE offset tables incl. BattlEye patches; cheat / game:gta5 [DMA]; fmc999)
- [gta5view](entities/gta5view.md) — GTA V snapmatic photo & save viewer/editor (proprietary format parse; Viewer/Editor)
- [gta-reversed-modern](entities/gta-reversed-modern.md) — GTA:SA 1.0 US binary-compatible C++ reimplementation (decompilation / RenderWare-era engine study)
- [GTAIII-DE-GoldHook](entities/gtaiii-de-goldhook.md) — GTA III Definitive Edition internal hook cheat (ImGui overlay via DirectX hook; gameplay mods / visual enhancements; gmh5225)
- [GTAV_DragResize](entities/gtav-dragresize.md) — GTA V drag-to-resize mod (in-game UI/HUD overlay resizing; rendering + input hooks; gmh5225)
- [gtav-sourcecode-build-guide](entities/gtav-sourcecode-build-guide.md) — GTA V source code build tutorial (VM recommended; Game Develop / guide)
- [regta](entities/regta.md) — Reverse-engineered GTA III & Vice City (Switch / PS Vita / Wii U ports; Game Develop / source)
- [reGS](entities/regs.md) — reverse-engineered GoldSource engine (HL1; networking / rendering / physics; Game Engine / RE)
- [rehlds](entities/rehlds.md) — reverse-engineered HLDS dedicated server (builds 6152/6153; DWARF-guided Linux RE; GoldSource protocol / HLTV / mod compatibility; Game Engine / RE)
- [gunyah-hypervisor](entities/gunyah-hypervisor.md) — Qualcomm Type-1 ARM64 HV (trusted/dependent VMs; Cheat QEMU/KVM + Android Emulator)
- [gvmp-anticheat](entities/gvmp-anticheat.md) — GVMP.de alt:V GTA V client AC (C++; ENet, DirectX hooks, MinHook, pattern scan, process integrity; Anti Cheat; divodeuxsevres)
- [HelloIommuPkg](entities/helloiommupkg.md) — sample DXE DMA-remapping (IOMMU) driver (tandasat; Detection:DMA)
- [H5GG](entities/h5gg.md) — iOS modding engine (JavaScript + HTML5 UI; memory edit, scripts/plugins, pointer chains, h5frida hook/patch; jailbroken and non-jailbroken modes; cheat / IOS cheat engine)
- [Hawkeye](entities/hawkeye.md) — Windows kernel security research console for anti-cheat analysis and live forensics (hawkeye-Leo; host-native driver Win10/11 x64; `!probe`/`!etw`/`!kernel_region`; Hawkeye Lab `!analyze` scored reports; GPL Community + paid Lab; Anti Cheat)
- [hdd_serial_spoofer](entities/hdd-serial-spoofer.md) — HDD serial spoof (C/C++; cheat / HWID; namazso)
- [hacking-online-games](entities/hacking-online-games.md) — curated online/multiplayer game hacking resources (network protocol RE, server-side emulation, packet encryption, AC bypass; GameGuard/MMORPG papers; dsasmblr; cheat / guide)
- [hacksysextremevulnerabledriver](entities/hacksysextremevulnerabledriver.md) — HackSys Team vulnerable-driver exploitation guide (Cheat / Guide)
- [Handle-Ripper](entities/handle-ripper.md) — user-mode handle hijack via SystemHandleInformation + DuplicateHandle (gmh5225; DuplicateHandle)
- [HappyIDA](entities/happyida.md) — IDAPython Hex-Rays decompiler utilities (parameter labels, SEH, Rust strings; cheat / IDA Plugins)
- [hARMless](entities/harmless.md) — ARM64 Linux ELF packer/loader (encrypt; custom stub; fileless `memfd_create`; Anti Cheat → Binary Packer `[ELF]`)
- [hazedumper](entities/hazedumper.md) — auto-updating CS:GO offset/netvar repository (frk1; signatures for engine.dll/client.dll; JSON/TOML/YAML/C++/C#/VB; cheat / game:csgo [Offset])
- [hayday-bot](entities/hayday-bot.md) — Frida-based Hay Day in-memory crop automation on LDPlayer 9 (AshrafMorningstar; guest ARM64 libg.so hooks; Promon SHIELD gadget bypass, Quago telemetry block, emulator/root fingerprint spoof; cheat / Frida)
- [hashdb-ida](entities/hashdb-ida.md) — OALabs IDA Pro plugin; HashDB API/string hash lookup; bulk module import; XOR-aware matching; hash-algorithm hunt + enum annotation (cheat / IDA Plugins)
- [hazel](entities/hazel.md) — TheCherno C++ interactive app + rendering engine (engine/editor/sandbox; Vulkan SDK setup; educational engine architecture + real-time rendering prototyping; Game Engine / source)
- [headless-ida](entities/headless-ida.md) — Python toolkit for headless IDA Pro workflows (IDAPython scripts/one-liners/interactive sessions; RPyC remote server; idat64/idalib; malware/binary/game-security RE automation; DennyDai)
- [headless-ida-mcp-server](entities/headless-ida-mcp-server.md) — MCP for IDA Pro (headless; binary analysis; function/variable MCP tools; Game Develop / MCP server; cnitlrt)
- [heck_csgo_external](entities/heck-csgo-external.md) — external CS:GO; SDK generation / memory analysis (C++; cheat / game:csgo)
- [Herpaderping](entities/herpaderping.md) — process/file obfuscation via write→map→modify→execute (SEC_IMAGE; on-disk decoy vs mapped image; cheat / hide)
- [hekate](entities/hekate.md) — GUI Nintendo Switch bootloader and maintenance toolkit (CTCaer; multi-environment boot, payload launch, firmware patches; eMMC/emuMMC backup-restore, partition tools, hardware diagnostics; console modding / firmware research; README [A GUI based Nintendo Switch Bootloader])
- [hex2dec-mcp](entities/hex2dec-mcp.md) — MCP hex↔decimal conversion for AI agents (JavaScript/TypeScript; Game Develop / MCP; gmh5225)
- [HexWalk](entities/hexwalk.md) — Qt cross-platform hex editor / binary workbench (Capstone, entropy, binwalk, file diff, YAML PE/ELF overlays; Hex Viewer/Editor/Analyzer)
- [Hexze Anticheat](entities/hexze-anticheat.md) — Starfish Lua Cheater Detector (NoSlow/AutoBlock/Eagle/Scaffold/Tower/LagRange/NoBreakDelay; movement/equipment/animation/block-break heuristics; staff alerts; Minecraft-style; Hexze; Anti Cheat / game:minecraft)
- [hex-rays-deob](entities/hex-rays-deob.md) — Hex-Rays microcode plugin; pattern-based expr simplify + CFF unflatten; obfuscated game/malware RE (RolfRolles; Hex-Rays Microcode)
- [hrtng](entities/hrtng.md) — KasperskyLab IDA Pro plugin; Hex-Rays deobfuscation/decryption/patching transforms; CFF unflatten, API-hash scan, microcode sigs (cheat / IDA Plugins)
- [hi3-ace-b](entities/hi3-ace-b.md) — Honkai Impact 3rd ACE bypass (integrity-check / detection circumvention; modified clients; explore anticheat; gmh5225)
- [hide-file](entities/hide-file.md) — C kernel file-hide driver (cheat / hide; Detection:Hide-adjacent)
- [hideroot](entities/hideroot.md) — Android root-hide sample (C/C++; Cheat / Magisk)
- [hiearchy-eac](entities/hiearchy-eac.md) — EAC self-integrity bypass PoC (call-hierarchy + memory-read manipulation; verification hooks; cleaned-image redirect; stack/register spoofing; Sinclairq [Integrity Checks])
- [HikariSystem HexCore](entities/hikarisystem-hexcore.md) — VS Code-based native RE IDE (AkashaCorporation; Capstone/Unicorn/Remill/Rellic lift-decompile, PE/ELF emulation, YARA/IOC/entropy, HQL anti-analysis queries, headless `.hexcore_job.json` automation + agent integration; malware/binary RE)
- [HideDriver](entities/hide-driver.md) — hide driver via Flink/Blink unlink (cheat / hide; AC enum evasion)
- [HideMyAndroid](entities/hidemyandroid.md) — LSPosed/Xposed profile-based Android ID/GAID/IMEI/Widevine/SIM/Wi-Fi/GPS/browser fingerprint and root/LSPosed/VPN environment spoofing with per-profile backup (Cheat / Xposed)
- [HideDriver (ExpLife0011)](entities/hidedriver.md) — ExpLife0011; ETW symbol discovery; PatchGuard-aware `DriverObject->DriverSection` removal via `MiProcessLoaderEntry`; post-load cleanup thread; driver forensics / AC evasion research; README [Hide Driver By MiProcessLoaderEntry]
- [HideDriverTesting](entities/hide-driver-testing.md) — multi-artifact driver hide (MmUnloadedDrivers, PsLoadedModuleList, PiDDBCacheTable; Win11 21H2; gmh5225)
- [Hidden](entities/hidden.md) — WDK kernel driver + user-mode CLI/library; configurable hide for files/directories/registry keys/processes + process protection; RE lab environment masking (JKornev)
- [HiddenModuleDetector](entities/hidden-module-detector.md) — hidden module/DLL detector for Windows apps (C/C++; Detection:Hide; mq1n)
- [Hidden-Thread-Finder](entities/hidden-thread-finder.md) — KTHREAD field-spoof detector via APC vs NMI callback comparison (Win10 20H2; gmh5225)
- [DLLThreadInjectionDetector](entities/dll-thread-injection-detector.md) — kernel-level DLL thread injection detector (C/C++; Detection:Injection; mq1n)
- [HijackLibs](entities/hijacklibs.md) — disclosed Windows DLL hijack DB (YAML + web UI; exports / conditions)
- [HintInject](entities/hintinject.md) — PE import-table shellcode staging (Hint/Name Table chunks; loader IAT resolution; Hint/Name Table; frkngksl)
- [hint-break](entities/hint-break.md) — RE-tool ghost opcodes `0F 1A`/`0F 1B` (Anti Debugging / anti-disasm)
- [Hooking-via-InstrumentationCallback](entities/hooking-via-instrumentation-callback.md) — Ring3 Instrumentation Callback hook (NtSetInformationProcess; no ntdll patch)
- [HiveWE](entities/hivewe.md) — WC3 World Editor alternative (large-map editor; cheat / game:warcraft iii)
- [Holodori-Kernel-Bypass](entities/holodori-kernel-bypass.md) — userspace emu of Hololive Dreams usrdrv017964.sys (Wine/Proton; MinHook)
- [halflife](entities/halflife.md) — Half-Life 1 GoldSrc engine and SDK source (C/C++; client/server/shared interfaces; Windows + Linux builds; modding-oriented architecture; Game Engine / source; ValveSoftware)
- [halflife-unified-sdk](entities/halflife-unified-sdk.md) — consolidated Half-Life SDK for HL/OpFor/Blue Shift mods (SamVanheer; C++; CMake cross-platform builds; bug fixes, deduplicated shared systems, docs/tooling; classic FPS architecture study; README [Half-Life SDK])
- [hl-mods](entities/hl-mods.md) — Half-Life / GoldSrc mods (Cold Ice Remastered + historical; Modification For Half-Life)
- [hlmaster](entities/hlmaster.md) — reverse-engineered Half-Life Master Server (closed master-server protocol RE; Game Engine / source; ezhangle)
- [hl2sdk](entities/hl2sdk.md) — AlliedModders Half-Life 2 Source SDK (C/C++; client/server/game logic + mod/plugin build infra; Game Engine / source)
- [hl2aimbot](entities/hl2aimbot.md) — Half-Life 2 aimbot cheat sample (C/C++; internal hooking; codereversing; cheat / game:half-life 2)
- [hl2esp](entities/hl2esp.md) — Half-Life 2 ESP cheat sample (C/C++; hooking; codereversing; cheat / game:half-life 2)
- [hLunaaa.github.io](entities/hlunaaa-github-io.md) — Driver Trace Cleaner blog (CI.dll + BigPool cache; CR3 abuse + physical R/W; cheat / hide)
- [hidden_syscall_monitoring](entities/hidden-syscall-monitoring.md) — monitor hidden syscalls from COD anticheat (C/C++; hooking / memory)
- [HIGU_ntcall](entities/higu-ntcall.md) — direct system calls (jnastarot; Some Tricks / Windows Ring3; Windows/Linux/mobile)
- [hardware_bypass](entities/hardware-bypass.md) — game-side GPU hardware-check bypass DLL (Ke4ton; post-launch inject; client integrity / GPU check bypass)
- [hook-buster](entities/hook-buster.md) — C/Python Detection:hook research (hook integrity / bust; Anti Cheat)
- [Hook-Detector](entities/hook-detector.md) — Windows usermode inline/IAT hook detector (0x6461726B; C++20 DX11/ImGui; remote PE parse + manual PEB traversal; module/process scan; x86/x64; anti-cheat / game-security RE; Detection:hook)
- [hook-updater](entities/hook-updater.md) — Python auto-update Frida hook scripts (cheat / Frida)
- [hh-lol-prophet](entities/hh-lol-prophet.md) — Go LoL modding sample (hh lol prophet; gmh5225; cheat / game:lol)
- [HookHunter](entities/hookhunter.md) — Windows process hook/patch scanner + hook destination tracing (Detection:hook; mike1k)
- [HookSigntool](entities/hooksigntool.md) — Detours hook DLL for Windows code-signing utilities; certificate validity + timestamp API interception; custom timestamp endpoints and signing-time control (Sign Leaked Cert; Jemmy1228)
- [HookGuard](entities/hook-guard.md) — global exception-hook chain driver; CR3 address-space switch monitor/obfuscation; protected-context switch logging; PatchGuard-aware/HVCI-compatible AC research (SamuelTulach; Global exception/KdpDebugRoutineSelect)
- [Hook KdTrap](entities/hook-kdtrap.md) — KdTrap global exception-handler hook via `HalpStallCounter` hijack (null-deref / reserved CR3-bit fault intercept; gmh5225; Some Tricks Ring0)
- [Hook HvlSwitchVirtualAddressSpace](entities/hook-hvl-switch-virtual-address-space.md) — `HvlSwitchVirtualAddressSpace` hook; CR3 transition manipulation hides pages from AC process memory scans during address-space switches (gmh5225; HvcallCodeVa)
- [HookHvcallCodeVa](entities/hook-hvcall-code-va.md) — HvcallCodeVa hypercall code callback hook during address-space switching; pattern-scan internals, custom callback, enlightenment flags, CR3 + per-CPU hypercall page setup (1401199262; C++ kernel PoC; README HvcallCodeVa)
- [HookSwapContext](entities/hook-swap-context.md) — ETW/CKCL SwapContext scheduling-path hook; custom stack-frame checks invoke handler during selected thread scheduling flow (1401199262; C++ kernel PoC; README SwapContext hook)
- [HITCON 2023 Demo CVE-2023-20562](entities/hitcon-2023-demo-cve-2023-20562.md) — HITCON 2023 `AMDCpuProfiler.sys` CVE-2023-20562 demo (AMD driver LPE / kernel code exec; gmh5225)
- [HP Hardware Diagnostics PoC](entities/hp-hardware-diagnostics-poc.md) — HP `etdsupp.sys` diagnostics driver IOCTL LPE (OEM BYOVD / privilege escalation; gmh5225)
- [hpp-hack](entities/hpp-hack.md) — CS1.6 HPP hack (C/C++; OpenGL + modding + SDK generation; cheat / game:cs1.6; gmh5225)
- [HPCS2](entities/hpcs2.md) — external CS2 cheat test project (Half-People; C++ Visual Studio; process memory utilities + handle hijacking + CS2 offset headers; INI-configured aim/RCS/ESP; educational cheat and anti-cheat behavior study; cheat / game:cs2 [External])
- [Hyapk](entities/hyapk.md) — Android APK/game protection packer (beto2-dev; Kotlin CLI + C runtime; per-method HyVm VMP or Dex2C, ChaCha20-Poly1305 opcode encryption, smali renaming, resource encryption, signature/DEX integrity, anti-tamper/anti-debug, anti-Frida/root/emulator heuristics; Anti Cheat Binary Packer)
- [hygieia](entities/hygieia.md) — Deputation WDK kernel driver; paging-structure scan for vulnerable-driver traces; 1 GB/2 MB/4 KB page mappings; low-level memory forensics for prior unsigned-driver activity; anti-cheat / kernel security research
- [hyper-reV](entities/hyper-rev.md) — Hyper-V memory introspection / RE (structures / hypercalls / partitions)
- [HyperDbg](entities/hyperdbg.md) — open-source VT-x/EPT hypervisor-assisted Windows debugger (C/C++; user/kernel; stealth breakpoints, hidden hooks, memory-access monitoring; RE / fuzzing / malware / anti-cheat research; README [VT debuger])
- [hyperion-disassembler](entities/hyperion-disassembler.md) — Sidenai; native C++ multi-arch disassembler/decompiler (PE/ELF/Mach-O/.NET; x86/x64/ARM/AArch64/MIPS/PPC; CFG, FLIRT, PDB, BinDiff, RTTI, SSA decompiler, packer detection, Lua, ImGui UI; cheat / RE tools)
- [HyperHide](entities/hyperhide.md) — Air14; open-source hypervisor-based x64dbg/x32dbg anti-anti-debug plugin; kernel driver + Intel VT-x/EPT; sanitizes PEB, thread/process flags, Nt* queries; 64-bit Windows; RE / game-security research (README [VT debuger])
- [HyperDeceit](entities/hyperdeceit.md) — C++ Hyper-V impersonation library; intercepts selected kernel hypercalls (TLB flush, sleep/shutdown, address-space switch, spinlock; reusable hooks; Xyrem; HvcallCodeVa)
- [Hypervisor-Detection](entities/hypervisor-detection.md) — C++ hacked-hypervisor detection (four techniques; Detection:HV)
- [Hypervisor-Phantom](entities/hypervisor-phantom.md) — Scrut1ny; Bash-automated Linux VM lab with anti-detection QEMU/EDK2/kernel/VFIO patches (Hidden QEMU; cheat / QEMU/KVM/PVE/VBOX)
- [Hypervisor From Scratch](entities/hypervisor-from-scratch.md) — SinaKarvandi; tutorial x86 hypervisor (VMX, VMCS, EPT, OS virtualization; C/C++/asm; educational HV internals; README [Hypervisor])
- [hypervisor](entities/hypervisor.md) — experimental Intel VT-x Type-2 HV (EPT page hooks, violation watchpoints, per-process cleanup; integrity-check bypass research)
- [ept-hook-detection](entities/ept-hook-detection.md) — usermode EPT hook detector (timing / write-compare / cross-core consistency; Detect EPT)
- [ermsb-meme](entities/ermsb-meme.md) — REP MOV / ERMSB side-channel EPT hook detector (C; everdox; Detection: Hacked Hypervisor)
- [rep-mov-ept-detecc](entities/rep-mov-ept-detecc.md) — REP MOVS fault-pattern EPT hook/access monitor detector (Windows C++; JustasMasiulis; overwrite-pattern signal + exception handling; REP MOV based EPT detection)
- [rhabdomancer](entities/rhabdomancer.md) — Rust idalib headless IDA plugin; locates insecure API calls (strcpy/sprintf/system/ioctl); tiered badness, bookmarks, backtrace audit paths; binary vulnerability triage (0xdea; cheat / IDA Plugins)
- [vmdtstr](entities/vmdtstr.md) — STR-exit VMM fault detector (cryotb; nested HVPP test harness; Detection: Hacked Hypervisor)
- [honor-of-kings-RE-research](entities/honor-of-kings-re-research.md) — Honor of Kings Android RE (ACE / libtersafe / IL2CPP / KernelPatch KPMs)
- [Hotkeybased Keylogger Detector](entities/hotkeybased-keylogger-detector.md) — win32kfull global hotkey-table scanner; detects keyloggers abusing RegisterHotKey (AsuNa-jp; KMDF; defensive endpoint research; Detect RegisterHotKey API)
- [Horizon Engine](entities/horizon-engine.md) — Windows 3D rendering engine (D3D12 / Vulkan / Metal; Game Engine source)
- [HoudiniEngineForUnreal](entities/houdini-engine-for-unreal.md) — SideFX Houdini Engine UE plugin (HDAs / procedural workflow; Plugins:Unreal)
- [How to Download and Install WSA](entities/how-to-download-and-install-wsa.md) — step-by-step Win11 WSA manual install guide (Developer Mode + Virtual Machine Platform; dependency packages; Explorer/PowerShell; K3V1991; Cheat WSA / Guide)
- [HowTo-Palworld](entities/howto-palworld.md) — Palworld Linux dedicated-server deployment guide (shell scripts + SteamCMD + systemd; install/update/backup/restore; Debian/Ubuntu; Server on Linux)
- [Huan](entities/huan.md) — encrypted PE loader generator (per-run keys; payload in new loader section; PE structure/loading study; Anti Cheat → Binary Packer; frkngksl)
- [hXOR-Packer](entities/hxor-packer.md) — C++ PE pack/unpack (Huffman + XOR; in-memory self-unpack stub; PE internals / packer behavior study; Anti Cheat → Binary Packer `[PE XOR]`)
- [hm-pe-packer](entities/hm-pe-packer.md) — tutorial-oriented C++ x64 PE packer/protector (Visual Studio; load-time wrap/protect; PE structures, packing stubs, protection mechanics; Anti Cheat → Binary Packer `[PE X64]`; TheAenema)
- [HydraHook](entities/hydrahook.md) — DX9–12 API-hook + overlay framework (Detours; ImGui/DirectXTK/OpenCV samples)
- [HybridCLR](entities/hybridclr.md) — Unity IL2CPP hot-update runtime (C/C++; live-update / game hot-patch; modding + IL2CPP analysis; focus-creative-games)
- [Hyara](entities/hyara.md) — multi-platform YARA rule generation (IDA Pro, Ghidra, Binary Ninja, Cutter; cheat / Yara)
- [HumanMouseMovement](entities/human-mouse-movement.md) — human-like mouse movement (C/C++; cheat / triggerbot & aimbot)
- [hv-detect](entities/hv-detect.md) — hypervisor IDT detections SIDT/LIDT (gmh5225; controlled context + restore; Detection: Hacked Hypervisor)
- [hvdetecc](entities/hvdetecc.md) — x86-64 HV/VMM detection collection (can1357; PMC/TLB/timing/MSR/interrupt; VMX/SVM + Type-1 SMBIOS/ACPI/PCI; Detection: Hacked Hypervisor)
- [hv](entities/hv.md) — minimal Intel VT-x Type-2 hypervisor (VMX/VMCS learning)
- [HVCI-loldrivers-check](entities/hvci-loldrivers-check.md) — PowerShell HVCI LOLdrivers check (Trail of Bits; vulnerable-driver lane)
- [hw3d](entities/hw3d.md) — C++ 3D DirectX tutorial (Planet Chili; DirectX / guide)
- [hardware-breakpoint](entities/hardware-breakpoint.md) — ARM64 Linux kernel HWBP module (APIs + proc; exec/watch breakpoints; trigger stats; Android/embedded debugging; Ylarod; HWBP on linux/android)
- [hw-call-stack](entities/hw-call-stack.md) — Fortra HWBP call-stack spoofer for syscalls/API calls (C/C++; Cheat Spoof Stack / HWBP)
- [hwid](entities/hwid.md) — BTBD kernel HWID spoofer (IOCTL hooks for disk/volume/NIC/ARP/SMBIOS/boot/GPU; usermode registry/tracking cleanup; Win10 1507–1903 x64)
- [hwid-checker-mg](entities/hwid-checker-mg.md) — SMBIOS manufacturer/model/serial HWID checker (Detection:HWID)
- [Full-Hwid-Spoofer-V6](entities/full-hwid-spoofer-v6.md) — comprehensive HWID spoofer v6 via KdMapper kernel driver + ImGui (disk/NIC/GPU/SMBIOS/registry; AMD/Intel Win10/11; gmh5225)
- [hwid-spoofer](entities/hwid-spoofer.md) — EAC/BattlEye HWID spoofer (C/C++; Cheat HWID; gmh5225)
- [Hwid--Spoofer (Theordernarkoz)](entities/hwid--spoofer.md) — Windows KMDF kernel-mode HWID spoofer driver; disk/mount/network control-path hooks; disk/NIC/SMBIOS/GPU identifier rewrite (Theordernarkoz; cheat / HWID)
- [Hwid-Spoofer-EAC-BE](entities/hwid-spoofer-eac-be.md) — EAC/BE HWID spoofer via kernel driver hooks (disk serial / NIC MAC / SMBIOS; gmh5225)
- [HWIDSpooferEAC](entities/hwid-spoofer-eac.md) — Windows ImGui HWID spoofing toolkit with kernel driver mapper/loader + service handling; low-level hardware ID changes for EAC testing (BuzzerFelix; cheat / HWID)
- [HWID-EclipsedSpoofer-EAC-BE](entities/hwid-eclipsed-spoofer-eac-be.md) — Eclipsed kernel HWID spoofer for EAC/BE (disk serial / NIC / other HWIDs; gmh5225)
- [HWID-Kernel-Spoofer](entities/hwid-kernel-spoofer.md) — kernel-mode HWID spoofer via `IRP_MJ_DEVICE_CONTROL` dispatch hooks (disk serial / MAC / SMBIOS / GPU; gmh5225)
- [HWID-SteamSpywareTerminator](entities/hwid-steam-spyware-terminator.md) — block Steam client HWID fingerprinting and telemetry to Valve servers (gmh5225; README [Steam])
- [HWID-Spoofer-for-Fortnite-and-Valorant](entities/hwid-spoofer-for-fortnite-and-valorant.md) — kernel-level HWID spoof for Fortnite/Valorant (C/C++; Cheat HWID)
- [HWID-Permanent-HWID-Spoofer](entities/hwid-permanent-hwid-spoofer.md) — permanent reboot-persistent HWID spoofer via kernel driver or registry (firmware-level IDs; gmh5225)
- [HWID-Pasted-Hwid-Spoofer](entities/hwid-pasted-hwid-spoofer.md) — compiled HWID spoofer from public spoofing snippets (disk serial / NIC MAC; cheat / HWID; gmh5225)
- [HWID-Spoofer-UD-Fortnite-WarZone-Apex-Rust-Escape-From-Tarkov-and-all-EAC-BE-Games-IMGUI-Loader-Base](entities/hwid-spoofer-ud-fortnite-warzone-apex-rust-escape-from-tarkov-and-all-eac-be-games-imgui-loader-base.md) — universal ImGui-loader HWID spoofer for EAC/BE titles (disk/NIC/SMBIOS/GPU; gmh5225)
- [hwinfo](entities/hwinfo.md) — cross-platform C++ hardware inventory library (CPU/RAM/GPU; Detection:HWID)
- [hwidspoofer](entities/hwidspoofer.md) — Windows HWID spoof + tracking-trace clean (Cheat HWID)
- [HumptyLock](entities/humptylock.md) — iOS 14.0–14.4.2 XNU kernel R/W exploit app (Coruna Pendulum PE; lockf/OOL-port/pipe primitives; wh1te4ever)
- [Ib Input Simulator](entities/ib-input-simulator.md) — Windows multi-backend driver input library (Logitech/Razer/MouClassInputInjection/DD virtual devices; C/C++ + AHK; automation / game tooling / AC evasion research; Chaoses-Ib)
- [ice9](entities/ice9.md) — C/C++ open-source anti-cheat research (modding/hooking; Anti Cheat → Open Source Anti Cheat System; jnastarot)
- [ICUAC](entities/icuac.md) — Paper/Folia server-side rule enforcement plugin (Java 21 Gradle; command/inventory/combat integrity checks; blocked commands, NBT/enchantment validation, stack/potion limits, end-crystal cooldowns; bilingual CN/EN; Folia scheduling; SHA-256-verified updater; Lazyzouo; Anti Cheat / game:minecraft)
- [Inertia](entities/inertia.md) — open-source Minecraft anti-cheat foundation (InertiaOrg; Java; version-neutral player-behavior engine; movement/packet/world/collision contracts; evidence accumulation with confidence/decay; version profiles + movement-prediction skeleton; inertia-api/core/testkit; scenario tests without live server; Anti Cheat / game:minecraft)
- [iaito](entities/iaito.md) — official radare2 GUI (Qt5/6; RE workflow / editor tooling; Cheat Radare)
- [idaxex](entities/idaxex.md) — IDA Pro 9 XEX/Xenon loader (XEX parse, PE extraction, import/export + kernel naming; Xbox 360 RE)
- [ida2llvm](entities/ida2llvm.md) — IDA→LLVM IR lifting (loyaltypollution cursor-sync disassembly lift; Sandspeare microcode→IR via llvmlite; cheat / IDA Plugins)
- [ida2obj](entities/ida2obj.md) — IDA Pro database → linkable COFF/ELF object export (relocations, symbols, sections; binary patching / recompilation; cheat / COFF Relink; gmh5225)
- [ida-android-breakpoint](entities/ida-android-breakpoint.md) — IDA plugin: Android native `.so` breakpoint setup (Python; cheat / IDA Plugins)
- [ida-bochs-windows](entities/ida-bochs-windows.md) — IDA Pro + Bochs debugger backend on Windows (software CPU emulation; full-system + kernel-mode stepping; cheat / guide)
- [ida_bitfields](entities/ida-bitfields.md) — IDA plugin: bitfield structure visualization (register/structure bit flags; driver IOCTL / flag-heavy RE; Windows Kernel Enhance)
- [ida-bridge](entities/ida-bridge.md) — Python WebSocket agent bridge for IDA Pro 9+ (IDAPython/SQL; UI + headless idalib; supervisor lifecycle; bundled agent skill; macOS; Game Develop / MCP + IDA Plugins)
- [ida-buddy](entities/ida-buddy.md) — Python WinDbg-style idalib CLI (`idb`) for agents (JustasMasiulis; persistent headless worker per database; compact stdout; disasm/decompile/xrefs/types + DB mutations with undo)
- [ida-cli](entities/ida-cli.md) — headless IDA Pro MCP server for AI-assisted binary analysis (idalib; Rust/C++; cheat / IDA Plugins)
- [ida-claude-code-plugins](entities/ida-claude-code-plugins.md) — Hex-Rays Claude Code plugin/skill collection (Python tooling + Markdown docs; plugin dev, automated scripting, sandboxed code-evaluation; automation-heavy IDA RE pipelines)
- [ida-codex-mcp](entities/ida-codex-mcp.md) — IDA Pro MCP bridge (Python plugin + stdio server; functions, call graphs, decompile/disasm, xrefs, strings, memory, rename/type helpers)
- [ida-copilot](entities/ida-copilot.md) — Antelcat IDA Pro GPT copilot (Python IDAPython + Hex-Rays + LangChain; pseudocode analysis, symbol inspection, comment/rename suggestions; menu + shortcut function-level investigation; cheat / IDA Plugins / [ChatGPT])
- [ida-cyberchef](entities/ida-cyberchef.md) — Hex-Rays IDA Pro CyberChef-style Qt plugin (Python; decode/encode/transformation pipelines in-IDA; malware analysis / binary triage)
- [IDAComments](entities/idacomments.md) — IDA Pro plugin: capture, organize, and review user comments (Python; IDA 7.x/8.x; dedicated view; keyboard/menu access; NoneShell; cheat / IDA Plugins)
- [ida-dark-plus](entities/ida-dark-plus.md) — IDA Pro Dark+ theme (modern dark palette; disassembly/hex/structures/all windows; cheat / IDA themes)
- [IDA DataExportPlus](entities/ida-data-export-plus.md) — IDA Pro plugin: extend/replace data export window; integer/float formats + assembly text (Python; hotkey-driven; Krietz7; cheat / IDA Plugins)
- [IDA Easy Life](entities/ida-easy-life.md) — IDA Pro deobfuscation plugin (Python; cheat / IDA Plugins)
- [IDA-Fusion](entities/ida-fusion.md) — Fast Signature scanner & creator (cheat / IDA Plugins)
- [IDA-For-Delphi](entities/ida-for-delphi.md) — Coldzer0 IDAPython script; recover Delphi function names from event constructor patterns (live debug; 64-bit; malware/legacy Delphi RE; cheat / IDA Plugins)
- [IDArling](entities/idarling.md) — collaborative IDA Pro / Hex-Rays plugin (real-time multi-user IDB sync; cheat / IDA Plugins)
- [ida-efiutils](entities/ida-efiutils.md) — IDA UEFI firmware annotator (GUIDs / Boot·Runtime Services / PEI·DXE; Python)
- [ida-enums-helper](entities/ida-enums-helper.md) — IDA plugin: Hex-Rays enum rename/add hotkeys (N/A/Shift-A; tinfo_t chooser; cheat / IDA Plugins)
- [ida-export-functions](entities/ida-export-functions.md) — IDA Pro plugin: export function list to Markdown at a specified path (documentation/reporting; cheat / IDA Plugins)
- [ida-evm](entities/ida-evm.md) — IDA Pro EVM processor module (Crytic; PUSH/POP/SLOAD/SSTORE/CALL/JUMPI decode; operand formatting + xrefs; Python plugin; smart-contract bytecode RE)
- [ida-find-.data-ptr](entities/ida-find-.data-ptr.md) — IDAPython `.data` pointer lookup script (locate/xref globals; cheat / IDA Plugins)
- [idafind](entities/idafind.md) — IDA Pro plugin: Ctrl+F find-in-text for Hex-Rays Pseudocode windows (cristeigabriela; cheat / IDA Plugins)
- [ida_functioncolor](entities/ida-functioncolor.md) — IDA plugin: colorize function defs in pseudocode (Python; cheat / IDA Plugins)
- [IDAFuncOutline](entities/ida-func-outline.md) — IDA plugin: function outline / call hierarchy (iOS ARM64 decomp; cheat / IDA Plugins)
- [ida-function-string-associate](entities/ida-function-string-associate.md) — IDA Pro 9.X plugin: associate string refs with functions; auto-generate function comments from literals (cheat / IDA Plugins)
- [ida-genpatch](entities/ida-genpatch.md) — IDA PatchGen: export grouped patched bytes, disassembly, C# SinglePatchHunk (Alt-F8; cheat / IDA Plugins)
- [ida-gpt](entities/ida-gpt.md) — IDAPython ChatGPT helper (function descriptions + auto-rename variables/locations/symbols; writes comments/identifiers into IDA DB; cheat / IDA Plugins / [ChatGPT])
- [IDA-Assistant](entities/ida-assistant.md) — IDA Pro Claude-3 chat assistant (cheat / IDA Plugins)
- [ida-ios-helper](entities/ida-ios-helper.md) — IDA plugin for iOS reversing (vtable symbols required)
- [ida-kcpp](entities/ida-kcpp.md) — IDAPython: C++ virtual-call resolution for iOS kernelcaches (ida_kernelcache hierarchy; vcall xrefs; cheat / IDA Plugins)
- [ida-kernelcache-ng](entities/ida-kernelcache-ng.md) — IDA plugin: iOS kernelcache analysis (pip + cli.py; cheat / IDA Plugins)
- [pplorer](entities/pplorer.md) — IDA Pro plugin: resolve PPL gate calls to underlying PPL functions in iOS/macOS kernelcaches (Ctrl-Shift-X navigation; ida-netnode; cheat / IDA Plugins)
- [ida-ps4-helper](entities/ida-ps4-helper.md) — IDA helper plugin for PS4 module loader (ps4-module-loader companion)
- [ida-ps5-elf-plugin](entities/ida-ps5-elf-plugin.md) — IDA Pro PS5 ELF loader (PS5 ELF extensions, segments, dynamic linking; console security RE)
- [ps2-ida-vu-micro](entities/ps2-ida-vu-micro.md) — IDA Python plugin: PS2 VU microcode search/disassembly (VIF MPG auto-discovery; vector-unit program RE)
- [spu2c](entities/spu2c.md) — IDA Python plugin: PS3 Cell SPU opcode C-style annotation (vector lanes; shuffle masks; function scan; firmware/library/anti-cheat RE)
- [ida-jm-xorstr-decrypt-plugin](entities/ida-jm-xorstr-decrypt-plugin.md) — IDA Pro JM Xorstr decrypt (x64; Python)
- [ida-gameguard-str-dec](entities/ida-gameguard-str-dec.md) — IDA Pro nProtect GameGuard string decrypt (Python; modding; cheat / IDA Plugins; crtdll)
- [SpiritIDAPlugin](entities/spirit-ida-plugin.md) — IDA Pro MapleStory packet analysis (Python IDAPython; structure/header extraction, function output, text export; protocol RE; Bratah123; cheat / IDA Plugins)
- [Spirit-PTCGO](entities/spirit-ptcgo.md) — Python PTCGO private-server emulator (card rules/effects, account/inventory/economy, versus/tournaments, protobuf client protocol, bundle RE helpers, nginx/Caddy deploy; Bratah123; Private Server / game:ptcgo)
- [IDA KMDF](entities/ida-kmdf.md) — IDA Pro KMDF/WDF driver annotator (structures / callbacks / queues; Python)
- [ida-llm-explainer](entities/ida-llm-explainer.md) — local llama.cpp IDA plugin: explain/rename/struct inference + HITL accept (cheat / IDA Plugins)
- [IDA Gepetto](entities/ida-gepetto.md) — local LLM IDA plugin: explain decompiled functions + variable rename suggestions (IDAPython; pseudocode UI; cheat / IDA Plugins)
- [IDAssist](entities/idassist.md) — AI-powered IDA 9.0+ plugin: LLM explain/rename, semantic knowledge graph, RAG, MCP (PySide6; cheat / IDA Plugins)
- [ida-plugins](entities/ida-plugins.md) — IDA register cross-references (vs Oregami value-use; cheat / IDA Plugins)
- [IDAPlugins](entities/idaplugins.md) — curated IDA Pro plugin pack (deobf / bin-diff / crypto; cheat / IDA Plugins)
- [idaplugins-list](entities/idaplugins-list.md) — community IDA Pro plugin catalog (version categorization; cheat / IDA Plugins)
- [List of IDA Plugins](entities/list-of-ida-plugins.md) — categorized IDA Pro plugin index (language / last-updated / categories; gmh5225; cheat / IDA Plugins)
- [Libre Hardware Monitor](entities/libre-hardware-monitor.md) — OSS hardware telemetry (C# WinForms + .NET library; CPU/GPU/storage temps, fans, voltages, loads, clocks; game performance / environment-aware tooling; LibreHardwareMonitor)
- [LibreMaple Client](entities/libremaple-client.md) — MapleStory GMS v83 custom C++17 client (JourneyClient fork; Roboto fonts; classic protocol/mechanics; Game Develop / source / game:maplestory; gmh5225)
- [Lost Ark](entities/lost-ark.md) — Lost Ark MMORPG client cheat/mod tool (ESP, automation, memory manipulation; gmh5225)
- [Lost Ark Dumper](entities/lost-ark-dumper.md) — Lost Ark UE client memory/SDK dumper (classes, entity layouts, offsets; gmh5225)
- [LOST-ARK-SDK](entities/lost-ark-sdk.md) — Lost Ark generated full-game UE SDK (GObjects/GNames/ProcessEvent/UEngine/UWorld for EFEngine.dll; LA_Basic/LA_Core headers; KN4CK3R sdkgen; gmh5225)
- [Lost Ark Logger](entities/lost-ark-logger.md) — Lost Ark network packet logger/decoder (client–server protocol; events/items/combat; gmh5225)
- [IDARustCargo](entities/ida-rust-cargo.md) — IDA plugin: display potentially installed Cargo dependencies (Python; cheat / IDA Plugins)
- [IDARustDemangler](entities/ida-rust-demangler.md) — IDA Rust demangler & normalizer (`rs-dml`; cheat / IDA Plugins)
- [IDARustHelper](entities/ida-rust-helper.md) — IDA plugin: Rust demangle/normalize, type defs, x86/ARM/RISC-V string recovery (Python; cheat / IDA Plugins)
- [ida-search](entities/ida-search.md) — IDA Pro 9.x plugin: 010 Editor–style type-aware binary search (`ida-plugin.json`; cheat / IDA Plugins)
- [ida-screenshot](entities/ida-screenshot.md) — IDA Pro high-resolution screenshot capture plugin (Python; macOS/Linux install; cheat / IDA Plugins)
- [ida-semray](entities/ida-semray.md) — 19h Python IDA Pro Gemini plugin (semantic binary analysis; function/variable rename + detailed comments from decompiler/assembly context; interactive caller/callee/reference-aware analysis; security analyst triage; cheat / IDA Plugins)
- [ida-security-scanner](entities/ida-security-scanner.md) — IDA Pro SAST plugin: semgrep-style YAML rules on decompiled pseudocode; interactive findings; optional AI triage (SymbioticSec; cheat / IDA Plugins)
- [ida-settings](entities/ida-settings.md) — Python library + Qt GUI Plugin Settings Manager for IDAPython plugin config via Hex-Rays HCLI/ida-config.json; legacy scoped IDASettings module; IDA Pro 9.0+ (williballenthin; cheat / RE Tools)
- [ida-sigmaker](entities/ida-sigmaker.md) — IDA Pro signature maker plugins (mahmoudimus: 9+ maker/searcher + SIMD; gmh5225: IDA/code-style pattern generation; cheat / IDA Plugins)
- [ida-slides](entities/ida-slides.md) — IDA Pro Marp/Slidev live RE presentation plugin (dockable tab; @name/@addr IDB links; embed decompiled lines; cheat / IDA Plugins)
- [ida-spotlight](entities/ida-spotlight.md) — IDA Pro workflow-centric function triage and prioritization plugin (large-binary RE; cheat / IDA Plugins)
- [ida-taskr](entities/ida-taskr.md) — IDA Pro parallel computing library (Python; Qt + multiprocessing; cheat / IDA Plugins)
- [IdaThemer](entities/ida-themer.md) — VS Code theme JSON → IDA Pro color theme converter (Long Night/Celestial base; cheat / IDA themes; gmh5225)
- [ida-unity-pdb-downloader](entities/ida-unity-pdb-downloader.md) — IDA Pro plugin: download PDB symbols from Unity symbol server (C++; automates matching debug-symbol retrieval; game/Unity RE; cheat / IDA Plugins; SamuelTulach)
- [ida-vtable-explorer](entities/ida-vtable-explorer.md) — IDA Pro 9.x C++ plugin: GCC/MSVC vtable detection, class extraction, virtual-function index/offset annotation, RTTI inheritance analysis, override comparison, hierarchy visualization (K4ryuu; cheat / IDA Plugins)
- [ida-vtable-tools](entities/ida-vtable-tools.md) — IDA 9.X vtable ops: `.hpp` skeleton / rename / `this` type / slot index (Python; IDA Plugins)
- [ida-vmware-windows-gdb](entities/ida-vmware-windows-gdb.md) — IDA Pro + VMware GDB stub Windows kernel debugging guide (live breakpoints/memory/step; cheat / guide)
- [ida-wakatime-py](entities/ida-wakatime-py.md) — IDA Pro WakaTime plugin (Python; background heartbeats; tracks analyzed binaries and RE session time; es3n1n; cheat / IDA Plugins)
- [ida-wpp-remover](entities/ida-wpp-remover.md) — IDA Pro plugin: Hex-Rays microcode pass strips WPP_SF* trace-call noise from Windows PE pseudocode (L4ys; Python; cheat / IDA Plugins)
- [ida-zvm-disassembler](entities/ida-zvm-disassembler.md) — IDA Pro processor module + loader for Zeus VM (ZVM) custom bytecode; 69 instructions; XOR key-chain decrypt; branch-target xrefs + semantic auto-comments (Duntss; OALabs ZVM; cheat / IDA Plugins)
- [idac](entities/idac.md) — Trail of Bits IDA Pro CLI/client (Unix socket → GUI/idalib; JSON; agents; not MCP)
- [IDACode](entities/idacode.md) — IDA Pro ↔ VS Code bridge (execute/debug IDAPython from editor; early alpha; cheat / IDA Plugins)
- [IdaClu](entities/idaclu.md) — IDA Pro plugin: cluster/group similar functions in large binaries (Qt GUI; i18n; visual navigation; cheat / IDA Plugins)
- [idacpp](entities/idacpp.md) — IDA Pro C++ REPL plugin (Cling/Clang 20; native IDA SDK + Hex-Rays types; snippet editor + REPL tab; Windows/macOS; cheat / IDA Plugins)
- [idapcode](entities/idapcode.md) — IDA Pro plugin: display Hex-Rays P-Code for the current function (Python; cheat / IDA Plugins; binarly-io)
- [IDA Kallsyms Symbol Renamer](entities/ida-kallsyms-symbol-renamer.md) — IDA Pro plugin: import `/proc/kallsyms` Linux kernel symbols; auto-rename functions/data in kernel/LKM IDBs (IDA kallsyms Renamer; gmh5225; cheat / IDA Plugins)
- [IDA Map Symbol Parser](entities/ida-map-symbol-parser.md) — IDA Pro plugin: parse linker MAP files; apply function/global/segment names to stripped IDB (IDA Map File Symbol Renamer; gmh5225; cheat / IDA Plugins)
- [ida-mcp-server](entities/ida-mcp-server.md) — MCP for IDA Pro (Python standalone server + IDA plugin; bidirectional disassembly-context queries; MxIris-Reverse-Engineering)
- [ida-mcp-server-plugin](entities/ida-mcp-server-plugin.md) — IDA Pro MCP server plugin (disasm/decompile/xrefs/types for LLM clients)
- [ida-mcp-rs](entities/ida-mcp-rs.md) — Headless IDA Pro MCP server (Rust; RE/modding/memory analysis; Game Develop / MCP server; blacktop)
- [ida-rpc](entities/ida-rpc.md) — IDA Pro JSON-RPC daemon (decompile/xrefs/types/patches; headless & GUI; ghidra-rpc-compatible CLI; LLM/agent RE; bkerler)
- [ida-medigate](entities/ida-medigate.md) — IDA Pro Python: GCC RTTI hierarchy/vtable recovery from stripped binaries (Hex-Rays union disambiguation; xref tracker; cheat / IDA Plugins)
- [ida-missinglink](entities/ida-missinglink.md) — IDA plugin: fill missing indirect CALL/JMP targets (C++ OOP RE; cheat / IDA Plugins)
- [ida-migrator](entities/ida-migrator.md) — Python IDA plugin: migrate IDB/database between IDA versions or environments (cheat / IDA Plugins)
- [ida-minsc](entities/ida-minsc.md) — IDA Pro plugin: IDAPython namespace replacement (DWIM interface; tagging/filtering; database/function automation; cheat / IDA Plugins)
- [ida-multi-mcp](entities/ida-multi-mcp.md) — Multi-instance IDA Pro MCP (Python; one endpoint for many GUI/idalib sessions; parallel routing; BCSD cross-binary function similarity; Claude Code/Cursor)
- [ida-names](entities/ida-names.md) — IDA Pro plugin: batch rename, pattern match, prefix/suffix, import/export for function/symbol names (pseudocode window titles; cheat / IDA Plugins)
- [ida-nexus-docker](entities/ida-nexus-docker.md) — Disposable Docker harness for IDA Pro 9.4+ with Pi and IDA Nexus; ordered LLM analysis prompts in isolation; ZIP audit trails (mrexodia)
- [ida-nexus-events](entities/ida-nexus-events.md) — Textual TUI viewer for live IDA Nexus `/idb_events` streams; database discovery, execution provenance, color-coded event families (mrexodia)
- [ida-no-mcp](entities/ida-no-mcp.md) — IDA plugin + Rust/idalib CLI: export Hex-Rays decompilation, disasm fallback, strings/imports/exports/memory as files for AI IDEs without MCP (P4nda0s; cheat / IDA Plugins)
- [ida-nord-theme](entities/ida-nord-theme.md) — IDA Pro Nord-palette dark color theme (disassembly/hex/graph/editor; cheat / Skins)
- [ida-phnt-types](entities/ida-phnt-types.md) — PHNT Native API headers → IDA TIL/IDC (Dump-GUY; idaclang/tilib; 32/64-bit; Windows SDK + PHNT types for driver/AC binary RE)
- [IDASkins](entities/idaskins.md) — IDA Pro custom theme/skin plugin (CSS-like Qt GUI styling; disassembly/hex/output; cheat / Skins; gmh5225)
- [ida-pro-agent](entities/ida-pro-agent.md) — IDA Pro 9.4 Windows plugin: built-in AI console + MCP gateway; Hex-Rays pseudocode, bounded caller tracing, guard-evidence extraction, preview/apply/rollback IDB ChangeSets (ackwrap; cheat / IDA Plugins)
- [ida-pro-loadmap](entities/ida-pro-loadmap.md) — IDA plugin: import linker .MAP symbols (VC/Borland/Dede/GCC/IDA; section:offset → names; cheat / IDA Plugins)
- [IDA-Pro-SigMaker](entities/ida-pro-sigmaker.md) — IDA Pro plugin: wildcard-masked byte-pattern signatures from selected code for runtime scan (gmh5225; cheat / IDA Plugins)
- [ida-pro-mcp](entities/ida-pro-mcp.md) — IDA Pro MCP: full IDAPython API for agents (rename/types/xrefs/decompile/structs; plugin + test harness)
- [ida-sdk](entities/ida-sdk.md) — mirrored IDA Pro SDK (headers/libs/docs; plugin + processor-module dev; multi-version; cheat / IDA SDK)
- [idasdk-collection](entities/idasdk-collection.md) — archived IDA Pro SDK releases (headers/libs/examples; multi-version plugin dev; cheat / IDA SDK)
- [idasql](entities/idasql.md) — IDA database SQL virtual tables + AI natural-language RE queries (CLI on `.i64` or in-IDA plugin; remote query; cheat / IDA Plugins)
- [ida-plugin-antidebugseeker](entities/ida-plugin-antidebugseeker.md) — IDA Pro plugin: rule-based Windows API + keyword anti-debug detection; match highlighting, address annotation, navigation; configurable rules + in-IDE editor (LAC-Japan; Extract anti-debugging)
- [ida-plugin-pcodegpt](entities/ida-plugin-pcodegpt.md) — ChatGPT IDA PCode assistant (Chinese UI; cheat / IDA Plugins)
- [IDLE-Abuse](entities/idle-abuse.md) — Windows idle-state injection PoC (`RegisterWaitForInputIdle` callback; shellcode + process manipulation; process-lifecycle abuse detection study; RixedLabs)
- [IDontLikeFileLocks](entities/idontlikefilelocks.md) — C++ locked-file extraction via memory-mapped section handle theft (EvilBytecode; duplicate/close remote handles; browser DB reads without stopping browser; file-lock evasion / info-stealer forensics; Dump locked files by stealing memory-mapped section handle)
- [IAT Obfuscation](entities/iat-obfuscation.md) — Windows PE import obfuscation (C++; same-DLL IAT entry swap + TLS pre-main restore; static API-sequence obfuscation; import-hiding educational research; MahmoudZohdy)
- [IUM-Debugger](entities/ium-debugger.md) — .NET debugger for Windows IUM/VTL1 trustlets; Hyper-V hypercalls for trustlet memory R/W + disassembly; LiveCloudKd host patch for guest WinDbg attach (ReverseWarrior)
- [iida-mcp](entities/iida-mcp.md) — faster IDA Pro MCP (77 tools; multi-instance; optional KM mem via iida-mcp-ioctl)
- [ioctl-helper](entities/ioctl-helper.md) — Qt GUI for custom Windows driver IOCTLs (C++/Qt Widgets; hex editor; multi-handle DeviceIoControl; driver reversing / kernel comm testing; RomanRybachek)
- [ioctldump](entities/ioctldump.md) — Windows kernel IOCTL hook/dump driver (Kharos102; WDK driver + client; IOCTL metadata + deduplicated input buffers; target device selection; proprietary driver / AC interface RE; Monitor IRP)
- [ioctlpus](entities/ioctlpus.md) — Windows DeviceIoControl repeater (C# WinForms + CLI; craft/replay/save/edit IOCTL payloads; driver security research / interface auditing / fuzzing prep; VoidSec)
- [IoCreateDriver](entities/iocreatedriver.md) — custom IoCreateDriver load-path implementation (Th3Spl; C/C++ Visual Studio + WDK; bypass standard driver-load visibility/logging; manual-map + entry-point notes; kernel / AC evasion research)
- [idarem](entities/idarem.md) — IDA Pro remote browser UI (Flask REST/SSE + React; live IDB sync)
- [IdaRef](entities/idaref.md) — IDA plugin: full x86-64/ARM/MIPS/Xtensa insn docs at cursor (SQLite; cheat / IDA Plugins)
- [idawilli](entities/idawilli.md) — Willi Ballenthin IDA Pro scripts/plugins/utils (function analysis, string decrypt, struct/xref automation; cheat / IDA Plugins)
- [idenLib](entities/idenlib.md) — IDA plugin: static library function ID (VC++/STL sigs; FLIRT-adjacent; Cheat IDA Plugins)
- [idenLibX](entities/idenlibx.md) — x64dbg plugin: static library function ID (signatures → live names; Cheat x64dbg Plugins)
- [idov31-venom](entities/idov31-venom.md) — Windows covert networking library (Idov31; single-header C++; hidden detached browser + stolen socket; Winsock handle discovery/duplication; evasion-oriented networking research; slug disambiguated from [[venom]])

- [IDADeflat](entities/idadeflat.md) — IDA Pro CFF deflatten (angr; OLLVM-style)
- [IL22CPP](entities/il22cpp.md) — C++ IL2CPP internal reflection remake (metadata resolution, managed type reconstruction, VM interface; gmh5225)
- [IL2CPP_Resolver](entities/il2cpp-resolver.md) — C++ Unity IL2CPP resolver (cheat / game engine explorer:Unity)
- [IL2CPP_Resolver_External](entities/il2cpp-resolver-external.md) — external C++ IL2CPP runtime resolver (`global-metadata.dat` + RPM; no injection; cheat / game engine explorer:Unity)
- [Il2CppAssemblyUnhollower](entities/il2cpp-assembly-unhollower.md) — IL2CPP metadata → proxy .NET assemblies for C# modding (unhollower; cheat / game engine explorer:Unity)
- [Il2CppRuntimeDumper](entities/il2cpp-runtime-dumper.md) — IL2CPP runtime dump via reflection (reconstruct DLLs; cheat / game engine explorer:Unity)
- [Il2CppSDKGenerator](entities/il2cpp-sdk-generator.md) — Android IL2CPP C++ SDK generator (Octowolve; dnlib C# generator + C++ runtime helpers; DummyDll → typed headers/wrappers for native modules; [Il2Cpp SDK generator for Android])
- [Il2Cpp Version (4ch12dy)](entities/il2cpp.md) — Unity IL2CPP runtime source archive across Unity generations; libil2cpp C/C++ internals (runtime, metadata, GC, platform layers); version mapping notes; game engine explorer:Unity [Il2Cpp Version]
- [Il2CppVersions](entities/il2cpp-versions.md) — multi-version Unity IL2CPP headers/metadata (structure/API drift; game engine explorer:Unity)
- [Il2cppSpy](entities/il2cpp-spy.md) — Unity IL2CPP APK disassembler / two-APK diff
- [Il2CppDumper](entities/il2cppdumper.md) — canonical Unity IL2CPP static dump (Perfare; C#; ELF/Mach-O/PE/NSO/WASM; dummy DLLs + IDA/Ghidra/BN scripts; [Il2Cpp Dump])
- [IL2CPPDumper (kp7742)](entities/il2cppdumper-kp7742.md) — Android IL2CPP static dump fork (C/C++; libil2cpp.so + metadata; cheat / game engine explorer:Unity)
- [Il2CppDumper-YuanShen](entities/il2cppdumper-yuanshen.md) — Genshin Impact IL2CPP static dump (khang06; cwd output; cheat / game engine explorer:Unity)
- [Il2cppDumpDroidGUI](entities/il2cppdumpdroidgui.md) — Android on-device Il2CppDumper GUI (APK releases; Android 6–14; armeabi-v7a/arm64-v8a; Poko-Apps; [Il2Cpp Dump GUI])
- [Il2cppEncrtypt](entities/il2cpp-encrtypt.md) — Unity IL2CPP encryption (C++; asset pipelines + plugin dev; Game Engine Protection:Unity; badApple001)
- [il2cpp-finder](entities/il2cpp-finder.md) — Unity IL2CPP metadata locator (global-metadata.dat / CodeRegistration / MetadataRegistration scan; obfuscated binaries; cheat / game engine explorer:Unity)
- [il2cpp-pdb](entities/il2cpp-pdb.md) — Il2CppDumper fork with Rust PDB generator for x64 PE GameAssembly.dll (function names, struct types, typed prototypes; IDA auto-load; [Il2Cpp Dump])
- [Il2Cpp-HookScripts](entities/il2cpp-hook-scripts.md) — Android Unity IL2CPP/Mono hook script templates (Frida + native; method intercept / logic patch / runtime data)
- [Il2CppHookScripts](entities/il2cpp-hookscripts.md) — Frida IL2CPP runtime parse/hook framework (TypeScript il2cpp-hooker npm; batch hooks, QBDI emulation, MCP; axhlzy)
- [Il2CppInspector](entities/il2cpp-inspector.md) — C# IL2CPP RE tool/library (`global-metadata.dat` + IL2CPP binaries → IDA/Ghidra/BN scripts, C++ headers, DLL injection scaffolds; all versions/platforms; [Il2Cpp Dump])
- [ilhook-rs](entities/ilhook-rs.md) — Rust x86 HOOK (function intercept → user handlers; cheat / hook)
- [ILSpy](entities/ilspy.md) — open-source .NET assembly browser/decompiler (C#/VB/IL; .NET Framework/Core/5+; async/LINQ/generics; For Unity)
- [image-blaster](entities/image-blaster.md) — image→3D mesh/splat/SFX skillset (World Labs+FAL; React/Three.js; AI / 3D Graphics)
- [image-cockpit-for-codex-workflows](entities/image-cockpit-for-codex-workflows.md) — local Codex imagegen cockpit (pixel art, region edit, animation frames/sprite sheets; codex-handoff inbox/outbox; Game Develop / AI Agents)
- [ImHex](entities/imhex.md) — C++ cross-platform hex editor / binary analysis platform (pattern-language parsing, disassembly, diff/hash, plugins; firmware/file/memory/game binary RE)
- [Dear ImGui](entities/imgui.md) — bloat-free immediate-mode C++ GUI (DX/GL/Vulkan/Metal; overlays / tool UIs / cheat menus)
- [ImGUI Advanced Cheat Menu](entities/imgui-advanced-cheat-menu.md) — Windows ImGui cheat-menu framework (C++ SFML; ESP/aim/recoil/HUD modules; hotkey panels; custom widgets + in-memory fonts; starter template; RequestFX; README `[Imgui Menu]`)
- [ImGui External Overlay](entities/imgui-external-overlay.md) — C++ DX9 external overlay template (3r4y; Visual Studio; ready-made overlay window + ImGui rendering flow; DirectX SDK setup notes; ESP/HUD/RE overlay starter; README `[imgui overlay]`)
- [ImGui Standalone](entities/imgui-standalone.md) — D3D11 external ImGui framework (EXE/DLL; own render window; VS x86/x64; game tooling / menu prototyping; adamhlt)
- [ImGuiRDR2Hook](entities/imgui-rdr2-hook.md) — RDR2 Vulkan + DirectX 12 ImGui hook framework (Halen84; MinHook + Kiero + Dear ImGui; render-path intercept; hook entry points, config handling, stable menu/input notes; overlay development / graphics API hooking practice; cheat / render-draw)
- [imgui_club](entities/imgui-club.md) — official Dear ImGui extensions (hex mem editor / multi-context / threaded draw)
- [imgui-ios-mod-menu](entities/imgui-ios-mod-menu.md) — iOS ImGui mod menu (cheat / render-draw)
- [iHide](entities/ihide.md) — iOS per-app jailbreak-hiding tweak (MobileSubstrate/ObjC hooks; Settings-panel toggle; common jailbreak-detection bypass; Kc57)
- [ImGui-Spoofer-Leaked](entities/imgui-spoofer-leaked.md) — leaked Windows HWID spoofer with ImGui GUI; C++ loader/mapper kernel components + WinAPI routines; debugger/process anti-analysis (Veuqx0; cheat / HWID)
- [iOS Jailbreak — Fugu15](entities/ios-jailbreak-fugu15.md) — iOS 15 untethered jailbreak (Fugu15 kernel exploit chain; root, codesign bypass, full-privilege code execution; gmh5225)
- [iOS Mod Menu Template for Theos](entities/ios-mod-menu-template-for-theos.md) — Theos tweak mod-menu template (Logos; 50×50 icons; cheat / IOS mod menu)
- [iOS Packager](entities/ios-packager.md) — Python CLI for repackaging/signing iOS app bundles (Info.plist/entitlements, provisioning profiles, codesign; mobile game security testing)
- [iOS UE4Dumper](entities/ios-ue4dumper.md) — iOS Unreal Engine dumper MobileSubstrate tweak (C++/ObjC++; arm64/arm64e; pattern-based structure discovery; offsets/classes/structs/enums/functions + symbol JSON for IDA/Ghidra; MJx0; cheat / [SDK Dump For IOS])
- [iOS Location Spoofer](entities/ios-location-spoofer.md) — non-jailbreak iOS network location spoof (MITM Apple map lookups; Surge/Shadowrocket/Loon/Stash/QX modules; motion-state spoof; web UI)
- [wloc](entities/wloc.md) — non-jailbreak iOS gs-loc WLOC spoof (MITM protobuf patch; Surge/QX/Loon/Stash/Shadowrocket; online picker + Shortcuts; GCJ-02→WGS84; indoor/WiFi positioning; Yu9191)
- [Imgui-Native-ModMenu](entities/imgui-native-modmenu.md) — Android native ImGui mod menu (OpenGL ES + JNI; cheat / Menu for Android)
- [Imgui-Unity](entities/imgui-unity.md) — Android Unity ImGui mod menu (OpenGL ES + IL2CPP/Mono; cheat / render-draw)
- [ImGui-Unity-With-Layout](entities/imgui-unity-with-layout.md) — Android Unity ImGui mod menu + layout tabs/save-load (C++; cheat / render-draw)
- [ImGui-Unity-Android](entities/imgui-unity-android.md) — gmh5225 Unity Android ImGui overlay (OpenGL ES in render pipeline; mod menus / debug UI)
- [ImGUI-Zygisk-Unity](entities/imgui-zygisk-unity.md) — Zygisk Unity ImGui mod menu template (OpenGL ES + render-pipeline hook; cheat / render-draw)
- [ImOverlay-DX11](entities/imoverlay-dx11.md) — C++20 Win32/DX11 transparent multi-window overlay framework (Dear ImGui; smart click-through; parent-child hierarchy)
- [immortal-rust](entities/immortal-rust.md) — Facepunch Rust OpenGL + SDK generation cheat source (C/C++; cheat / game:rust; gmh5225)
- [imxyvimapper](entities/imxyvimapper.md) — BYOVD driver mapper via AsUpIO.sys (PE manual map; sections/imports/relocs/entry; gmh5225)
- [shared-flushfilebuffers-communication](entities/shared-flushfilebuffers-communication.md) — shared buffer + `FlushFileBuffers`-triggered `IRP_MJ_FLUSH_BUFFERS` KM↔UM comm; no worker thread (UCFoxi; C++; cheat / driver communication)
- [uc-apex-remastered](entities/uc-apex-remastered.md) — Apex Legends hybrid UM+KM cheat framework: C++ Visual Studio/WDK kernel driver + user-mode client; privileged memory ops, gameplay modules, DirectX 9 + ImGui overlay (BaconToaster; cheat / game:apex legends)
- [ucfoxi-shared-flushfilebuffers-communication-update](entities/ucfoxi-shared-flushfilebuffers-communication-update.md) — `\Driver\PEAUTH` `IRP_MJ_FLUSH_BUFFERS` hijack + registry-seeded shared buffer KM↔UM comm (gmh5225; cheat / driver communication)
- [ucmapper](entities/ucmapper.md) — BYOVD kernel driver manual mapper via nvaudio.sys (EncodePayLoad reuse; runtime-list cleanup; gmh5225)
- [ucmiraka-valorant-external](entities/ucmiraka-valorant-external.md) — Valorant external PoC (Chase1803; C++; win32k NtUserGetPointerProprietaryId hook + kernel driver; process memory R/W + PML4 retrieval; user client reads UWorld/ULevel/GameState; driver comm / external data extraction research; cheat / game:valorant [External])
- [ingsoc](entities/ingsoc.md) — Windows Intel PT toolkit (CristiNacu; KM driver + user-mode controller + Python decoder; Kafka trace streaming; execution reconstruction + control-flow/timing analytics; exploit/malware + code-reuse research; Intel PT)
- [in-memory-mutation-demo](entities/in-memory-mutation-demo.md) — C++23 in-memory polymorphic payload mutation demo (VirtualProtect/mprotect; ProtectedData XOR + key rotation; secure wipe; alekzandren)
- [import-kallsyms](entities/import-kallsyms.md) — IDA Pro plugin: import kallsyms dump → Linux kernel symbol names/addresses in IDB (Python; stripped/partial kernel RE; XMCVE; cheat / IDA Plugins)
- [inject](entities/inject.md) — CLI network protocol craft/inject/sniff tool (wide protocol range; cheat / Packet Sniffer&Filter; fksvs)
- [inject-all-the-things](entities/inject-all-the-things.md) — Educational Visual Studio DLL injection samples (DanielRTeixeira; seven techniques in isolated source files; CreateRemoteThread through reflective load; x86/x64; Injection Testing)
- [InjectARM64](entities/inject-arm64.md) — no-root ARM Android inject platform (Java/Kotlin + C/C++ hooks; virtualized app space; ARM32/ARM64; configurable flows; cheat / Non-root injection; NepMods)
- [InjectFix](entities/injectfix.md) — Tencent Unity C# logic hotfix (IL inject/route patched gameplay at runtime; broad Unity version/platform; Game Hot Patch / live bugfix)
- [Injectors](entities/injectors.md) — injection-testing harness (C/C++; AC stress)
- [injection](entities/injection.md) — Windows injection-testing corpus (Conhost/PROPagate/ALPC/KernelCallbackTable/KnownDlls and related PoCs; Injection Testing; gmh5225)
- [ImpulsiveDLLHijack](entities/impulsive-dll-hijack.md) — automated Windows DLL hijack research workflow (stages orchestration; cheat / DLL Hijack)
- [Ironwall](entities/ironwall.md) — open-source AC protocol stack (TEE attestation, ZK human-input proofs, Hedera HCS match receipts; Unity/Unreal)
- [IW4MAdmin SebzAntiCheat](entities/iw4madmin-sebzanticheat.md) — IW4X server-side suspicion telemetry + IW4MAdmin review dashboard; GSC aim/visibility checks; Discord case workflow; no auto-ban (crazythecoder)
- [Iris](entities/iris.md) — cross-platform C++ game engine (component-based; multi-backend render; CMake; Game Engine source)
- [injdrv](entities/injdrv.md) — kernel APC DLL injector (process notify → LdrLoadDll; C)
- [intel-pcm](entities/intel-pcm.md) — Intel Performance Counter Monitor (CPU/memory/PCIe/power PMU telemetry; Docker/CXL)
- [int_fastdiv](entities/int-fastdiv.md) — header-only C++ magic-number integer division (CPU/CUDA; ~2× vs hardware div; Mathematics)
- [integrity-experiments](entities/integrity-experiments.md) — header-only C/C++ memory-integrity experiment corpus (gmh5225; Anti Cheat → Detection:Memory Integrity)
- [integrity](entities/integrity.md) — header-only C PE section checksum library (non-writable baseline hashes, SSE4.2 CRC32, compile-time algorithm config; tamper detection / AC hardening; afulsamet; Detection:Memory Integrity)
- [inline-syscall](entities/inline-syscall.md) — header-only C++ inline direct syscall x64 + x86/x64 wrappers (JustasMasiulis / gmh5225; AC Compile Time; anti-hooking)
- [integrated-kernel-module](entities/integrated-kernel-module.md) — Dispa1r Android ARM64 lsdriver LKM + wxshadow + Zygisk rfrida_zygisk; PTE-remap R/W, stealth breakpoints, syscall monitor, virtual touch/gyro/GNSS; ptrace-less Frida agent; game RE
- [irontrace](entities/irontrace.md) — Windows hardware and forensic integrity scanner for game-server administrators (codedevdev; C# WPF/CLI + optional ASP.NET Core server; PCI/PCIe/USB/driver inventory, DMA masquerade indicators, BYOVD/HWID/execution-artifact layers, LOLDrivers correlation; explainable JSON verdicts without auto-ban; optional self-hosted admin triage; Detection:DMA / hardware integrity auditing)
- [IPAPatch](entities/ipapatch.md) — patch iOS apps without jailbreak (C/C++/ObjC; cheat / IOS jailbreak)
- [irql](entities/irql.md) — Rust compile-time IRQL safety / pool Box·Vec (Windows KM drivers)

- [Infosec_Reference](entities/infosec-reference.md) — infosec wiki with Games / Game Hacking draft (cheat / guide)
- [input-overlay](entities/input-overlay.md) — OBS plugin: keyboard/mouse/gamepad livestream overlay (C++; Keyboard Mapper)
- [intro-to-dx11-revisited](entities/intro-to-dx11-revisited.md) — Frank Luna DX11 modernized samples (C++ inline modules; standard D3D11 + HLSL; DirectX / guide)
- [intro-to-dx12-2nd-edition-revisited](entities/intro-to-dx12-2nd-edition-revisited.md) — Frank Luna DX12 2nd ed. modernized chapter demos (C++20 modules; DirectX / guide)
- [intro-to-gamehacking](entities/intro-to-gamehacking.md) — beginner game-hacking tutorial + lab (CE → C++ external/internal; memory scan / pointer chains / injection / hooks / patterns; cheat / guide)
- [introvirt](entities/introvirt.md) — KVM guest introspection framework (patched KVM + C++ userland; runtime memory/execution control; process/thread APIs, breakpoints, syscalls; Windows/Linux guest analysis; out-of-guest monitoring / malware RE)
- [interactive-feedback-macos-mcp](entities/interactive-feedback-macos-mcp.md) — native macOS HITL feedback MCP (AppleScript dialogs + image support; fork of interactive-feedback-mcp; Game Develop / MCP)
- [interactive-feedback-mcp](entities/interactive-feedback-mcp.md) — HITL user-feedback MCP (input/confirm/select prompts; Game Develop / MCP)
- [interic-fortnite-external-cheat](entities/interic-fortnite-external-cheat.md) — Interic Fortnite external cheat (Saxmason; C++ VS; driver-assisted RPM; DX9 ImGui overlay; visibility ESP + hitbox aimbot; KeyAuth + anti-debug/anti-dump/string obfuscation; cheat / game:fortnite [External])
- [intraceptor](entities/intraceptor.md) — NT API interception + kernel-driver redirect to bypass process/thread handle protections (crvvdev; cheat / access)
- [Interep Driver Leak](entities/interep-driver-leak.md) — leaked cheat kernel driver; covert process memory R/W via `NtGdiPolyPolyDraw` win32k GDI channel; anti-cheat driver-detection evasion (gmh5225)
- [internal-rainbow-six-cheat-v3](entities/internal-rainbow-six-cheat-v3.md) — R6 internal: kernel injector + manually mapped user-mode DLL; D3D11 menu; ESP/aimbot/recoil/spread/movement/FOV (NMan1; kernel-assisted injection + detection-surface RE; cheat / game:r6 [Internal])
- [internal-valorant-cheat](entities/internal-valorant-cheat.md) — Valorant internal: aimbot + ESP via in-process render/game-logic hooks; bypasses Vanguard user-mode protections (gmh5225; cheat / game:valorant [Internal])
- [InstrumentationCallbackSyscallLogger](entities/instrumentation-callback-syscall-logger.md) — Ring3 Instrumentation Callback on syscall return (AC / Windows)
- [InstrumentationCallbacks](entities/instrumentation-callbacks-lib.md) — 1027565 user-mode Instrumentation Callback library PoC (C++/asm; syscall/APC/exception/user-mode-callback/thread-init kernel→user transitions; NTDLL-only; x64; Windows internals + EDR telemetry research; Instrumentation Callback)
- [instrumentation_callbacks](entities/instrumentation-callbacks.md) — Deputation Windows Instrumentation Callback demo (C++/asm; TLS recursion mitigation; syscall + exception interception; telemetry/runtime-control research; Instrumentation Callback)
- [Island](entities/island.md) — experimental hot-reloading Vulkan renderer (C/C++; Linux+Windows; Renderer / Vulkan)
- [JADX](entities/jadx.md) — DEX→Java decompiler (APK/DEX/AAR; CLI+GUI; mobile RE)
- [JDBG](entities/jdbg.md) — Java/JVM attach debugger (JDWP; method hooks / breakpoints; cheat RE)
- [jackbail4-vac-bypass](entities/jackbail4-vac-bypass.md) — archived C++ Detours VAC bypass PoC (Jackbail4; signature scan + API spoofing; `VirtualQuery`/enumeration/debugger/memory-read hooks; Steam service context; non-working historical research; slug disambiguated from [[vac-bypass]])
- [JarAnalyzer](entities/jaranalyzer.md) — Windows Minecraft screenshare cheat forensics (NTFS MFT JAR scan; constant-pool blacklist; obfuscation flags; recycle-bin + Java process probes; nested JAR unpack; GUI/CLI text/JSON/HTML reports; winzysss)
- [Jektor](entities/jektor.md) — Windows shellcode injection toolkit (CreateThread/CreateRemoteThread/APC/EnumTimeFormatsEx/CreateFiber; GetProcAddress resolve; XOR msfvenom + NOP sled; Injection/Shellcode Testing; gavz)
- [JavaScript Obfuscator](entities/javascript-obfuscator.md) — JS/Node.js source obfuscator (TypeScript; CLI + API; CFF / string arrays / self-defending / domain lock; browser games)
- [JS Debugger Bypass UserScript](entities/js-debugger-bypass-script.md) — JavaScript UserScript; bypass browser DevTools/debugger/timing/window-size anti-debug (web/JS RE)
- [jazz2-native](entities/jazz2-native.md) — C++ Jazz Jackrabbit 2 remake (custom engine; OpenGL ES; cross-platform; actors/levels/tilesets/mechanics; Game Engine / source)
- [jit-dumper](entities/jit-dumper.md) — Windows .NET CIL method-body dumper (Anonym0ose; C# analysis app + C++ Detours JIT hook; symbol/PDB support; multi-generation .NET; metadata reconstruction for compiled-method inspection; managed-code RE / software-protection analysis; README A CIL method body dumper)
- [jmap](entities/jmap.md) — UE4/UE5 .uasset/.umap dependency graphs (reflection data / asset structure)
- [joshoengine-native](entities/joshoengine-native.md) — C++ native 2D OpenGL engine (vectors/rectangles/circles; cross-platform API; VS build artifacts; roadmap shaders/physics/mobile; Game Engine / source; Sirkles)
- [job_communication](entities/job-communication.md) — job-object / silo `NtQueryInformationJobObject` Ring0↔Ring3 PoC (gmh5225; cheat / driver communication)
- [JinYongLegend](entities/jynew.md) — Unity wuxia RPG framework with modding (Game Develop / Unity source)
- [jumpy](entities/jumpy.md) — Rust tactical 2D multiplayer shooter (asset-driven maps/characters/items; cross-platform; Pixels style; Game Engine / source)
- [jupyter-mcp-server](entities/jupyter-mcp-server.md) — MCP server for Jupyter notebooks (create/read/edit/execute; stdio/streamable HTTP; local Jupyter/JupyterHub/Colab; Game Develop / MCP for Jupyter)
- [jwt_tool](entities/jwt-tool.md) — Python JWT toolkit (validate/forge/scan; Game Network / JWT Auth)
- [KACE](entities/kace.md) — RING3 kernel anti-cheat/driver emulator (PE mapping, memory tracking, anti-debug/anti-emulation; self context / Unicorn; waryas + Qfrost911)
- [KUBERA](entities/kubera.md) — platform-independent x86 Windows user+kernel emulator (research; cheat / DBI; binsnake)
- [Kagura](entities/kagura.md) — LLVM pass plugin: CFG/string obfuscation, anti-tamper, anti-debug (mobile/desktop/Wasm)
- [Karlann](entities/karlann.md) — KM keyboard injection + WSK socket PoC (Kbd.c / Wsk.c; libwsk; cheat / Keyboard)
- [Kasumi](entities/kasumi.md) — Anatdx Android GKI LKM root-hide framework (ftrace/tracepoint syscall/VFS/procfs hooks; mount/SELinux/file-attribute spoof; kernel-level path manipulation; cheat / Kernel-level path manipulation and hiding framework for Android GKI/Linux)
- [Katapult AntiCheat](entities/katapult-anticheat.md) — NeoForge **1.21.1** client/server mod integrity AC (SHA-256 checksums on client mods and resource packs; server whitelists; join/reload pack monitoring; hot-reload config; Gitex68; Anti Cheat / game:minecraft)
- [KaynStrike](entities/kayn-strike.md) — Cobalt Strike Beacon reflective loader (Cracked5pider; C + ASM; thread start-address spoof + post-entry loader memory cleanup; Aggressor stageless builds; in-memory payload / detection-evasion research; Spoofs Thread Start Address)
- [KasperskyHook](entities/kaspersky-hook.md) — Kaspersky `klhk.sys` hypervisor syscall hook (`IA32_LSTAR` dispatch redirect + custom driver; gmh5225)
- [KawaiiPhysics](entities/kawaii-physics.md) — UE4/UE5 simple fake physics (animation / secondary motion; Game Develop / Unreal)
- [KCP](entities/kcp.md) — reliable-UDP ARQ (C; low-latency multiplayer; Game Network)
- [kcp-cpp](entities/kcp-cpp.md) — lightweight C++17 KCP wrapper (client/server; callback-driven; configurable low-latency transport; game networking prototypes; README [KCP]; Unit-X)
- [kajiya](entities/kajiya.md) — EmbarkStudios; experimental real-time global illumination renderer (Rust + Vulkan + HLSL hybrid raster/compute/RT; dynamic GI without probes, temporal reconstruction, RT shadows/reflections, reference path-tracing validation; advanced rendering research; Renderer)
- [kakhack](entities/kakhack.md) — CS:GO internal cheat (reversed SDK, multi-hook, ImGui+FreeType menu, JSON config, visuals; x86 VS2022 DLL; cazzwastaken [Internal])
- [kavanoz](entities/kavanoz.md) — Python automated Android DEX/resource unpacker (Bangcle/Ijiami/Qihoo 360+ packer ID + decrypt; banker malware; static APK analysis; eybisi)
- [kazmath](entities/kazmath.md) — lightweight portable C 3D math library (vectors/matrices/transforms; CMake; examples/tests; Mathematics)
- [kbotext](entities/kbotext.md) — LoL LCU bot extension framework (automated scripting and client control; README `[LCU]`; gmh5225; cheat / game:lol)
- [kdmapper](entities/kdmapper.md) — C++ kernel driver mapper via Intel `iqvw64e.sys` BYOVD (manual PE map; trace cleanup; PDB helpers; TheCruZ)
- [kdmapper-1909](entities/kdmapper-1909.md) — Build-pinned kdmapper fork for Win10 1809/1903/1909; Intel `iqvw64e.sys` BYOVD manual map (Brattlof; C++; kernel research / AC bypass study)
- [kdmapper-rs](entities/kdmapper-rs.md) — Rust kdmapper library (C/C++ core; vulnerable-driver / unsigned map)
- [kdmp-parser](entities/kdmp-parser.md) — cross-platform C++ Windows kernel crash-dump parser (0vercl0k; full/active dump formats; context/exception/bugcheck params + physical memory views; library API + parser CLI; optional Python bindings; crash forensics / kernel debug automation / exploitation RE)
- [KDBG](entities/kdbg.md) — Windows kernel debugging toolkit (driver backend + CLI; user/kernel memory R/W, module/thread enum, tracing; x64; driver-signing setup; cheat / Tool; allogic)
- [KDBGDecryptor](entities/kdbgdecryptor.md) — kernel-mode KDBG decrypt sample (`KdDecodeBlockData` or manual KiWaitNever/KiWaitAlways; stealth decode path; kernel RE / AC memory analysis; Air14)
- [kdp-compatible-driver-loader](entities/kdp-compatible-driver-loader.md) — Win10 KDP-aware unsigned driver loader (`gdrv.sys` → `SeCiCallbacks` DSE bypass; gmh5225)
- [KDU](entities/kdu.md) — Kernel Driver Utility; multi-provider BYOVD mapper (DSE bypass + unsigned PE map; Intel/ASUS/MSI/Gigabyte)
- [KDemu](entities/kdemu.md) — hybrid semi-emulated/semi-native Windows kernel driver emulator (PE load, exception handling, dump integration, anti-detection; rootkit/AC analysis; ShallowFeather)
- [Kernel ReClassEx](entities/kreclassex.md) — kernel memory structure reversing environment (BeneficialCode; C++; WinDbg extension + GUI; debug-session attach, kernel layout inspection, function-pointer resolve, reconstructed type views; Windows kernel RE + game anti-cheat research)
- [KernelPatch](entities/kernelpatch.md) — Linux kernel hook/modding framework (C/C++; APatch boot patch + KPM lane; Cheat / Hooking the Linux kernel)
- [KernelSU](entities/kernelsu.md) — Android kernel su root (Kotlin/Rust; Cheat / Android root)
- [KernelSU Debug](entities/kernelsu-debug.md) — KernelSU fork for debugging (MlgmXyysd; relaxed manager checks, permissive SELinux, init scripts; profile control; Android security research / system debugging; cheat / KernelSU modified for debugging)
- [KernelSU-4.4](entities/kernelsu-4.4.md) — KernelSU backport for Linux kernel 4.4 (su / SELinux / APK sig verify; Google GCC 4.9; cheat / Android root)
- [KernelSU-Pixel4XL](entities/kernelsu-pixel4xl.md) — Pixel 4 XL (coral) msm-floral kernel + KernelSU (su / SELinux / syscall hook; cheat / Android Kernel Source)
- [kernel-common](entities/kernel-common.md) — Official AOSP GKI common kernel mirror (vendor-shared upstream; Android patches, Bazel, Rust; attack-surface / defense study; aosp-mirror)
- [kernel-msm-coral](entities/kernel-msm-coral.md) — GrapheneOS archived Pixel 4/4XL (coral) Qualcomm MSM kernel (hardened configs + Android security patches; hardened-kernel study; cheat / Android Kernel Source)
- [KSU-Rust-Frida](entities/ksu-rust-frida.md) — Rust KernelSU/Magisk module: Zygote-fork Frida gadget inject, attach/spawn/watch-so, HTTP RPC, stealth tiers (cheat / Frida)
- [KSword](entities/ksword.md) — game-security Qt ARK with custom kernel driver (process/kernel object/memory/driver/callback/SSDT panels; Win32 API monitor; CE plugin; DWM; VirusTotal/ThreatBook; KSwordDEV; Cheat / Windows Kernel Explorer)
- [ksentinel](entities/ksentinel.md) — Linux LKM kernel integrity monitor (MatheuZSecurity; syscall table + LSTAR + prologue-hash checks; configurable intervals + anti-unload; rootkit hook-tampering detection research)
- [ksurusda](entities/ksurusda.md) — Android Zygisk module: Rusda anti-detection Frida gadget on KernelSU/Magisk/APatch; WebUI, listen/offline modes, library remapping (cheat / Frida)
- [keusermodecallback](entities/keusermodecallback.md) — ExpLife0011; Windows kernel demo invoking user-mode via KeUserModeCallback; IOCTL driver; PEB/module export resolution; 32/64-bit callback stubs; kernel-to-user transition research; README [KeUserModeCallBack]
- [kevboy](entities/kevboy.md) — Rust Game Boy emulator (CPU / memory / graphics / input)
- [KExecDD](entities/kexecdd.md) — KSecDD.sys IOCTL PoC (LSASS inject; arbitrary kernel exec; DSE via ci.dll!g_CiOptions; gmh5225)
- [KexecDDPlus](entities/kexecddplus.md) — LSASS-context KSecDD.sys IOCTL kernel execution (enhanced KExecDD; DSE bypass + arbitrary KM R/W; gmh5225)
- [kfd](entities/kfd.md) — iOS/macOS kernel file-descriptor exploit framework (XNU KRW; iOS 15/16; jailbreak/sandbox-escape research; felix-pb)
- [kfd-explorer](entities/kfd-explorer.md) — iOS kernel memory explorer (Python/Swift; kernel memory analysis; cheat / iOS memory explorer)
- [feather-gb](entities/feather-gb.md) — Rust Game Boy emulator (retro handheld / GB RE)
- [felix86](entities/felix86.md) — Linux userspace x86/x64 emulator on RISC-V (JIT recompiler + vectorized SSE; cross-arch execution; OFFTKP; Linux Emulator)
- [KeyAttestation](entities/keyattestation.md) — Android HW key attestation (Keymaster/KeyMint; bootloader / verified boot; VisionR1 fork: RSA + revocation lists)
- [Keybuster](entities/keybuster.md) — Samsung TrustZone S-Keymaster TA key extract (CVE-2021-25444/25490; TEE)
- [KiUserExceptionDispatcher Hook (brew02)](entities/ki-user-exception-dispatcher-hook.md) — ntdll `.mrdata` Wow64PrepareForException pointer hook for KiUserExceptionDispatcher (LdrProtectMrdata + Zydis; avoids VEH chain; UM exception-dispatch / stealth hook research)
- [KiSystemStartupMeme (ekknod)](entities/ki-system-startup-meme.md) — custom KiSystemStartup hook (C/C++; kernel-level / driver development / graphics; cheat / EFI driver area)
- [Killer](entities/killer.md) — kernel driver process terminator via kernel process-structure manipulation (protected AC/EDR/AV; gmh5225)
- [Killer-Exercice](entities/killer-exercice.md) — red-team RE/exploit lab for protected-process kill (handle table, APC injection, EPROCESS; valid BYOVD; not HVCI-blocklisted / not LOLBIN; gmh5225)
- [Kiroshi](entities/kiroshi.md) — IDA Pro plugin: detect common Anti-Cheat artifacts (cheat / IDA Plugins)
- [kinject](entities/kinject.md) — kernel map + APC inject (C/C++; cheat / injection:windows)
- [kli](entities/kli.md) — header-only KM lazy import resolver (C++; Anti Cheat / Lazy Importer)
- [kli-ex](entities/kli-ex.md) — extended KM lazy import fork (random seeds, caching, hidden globals; gmh5225)
- [km-um-communication](entities/km-um-communication.md) — Windows KM↔UM IPC learning examples (C/C++; request dispatch, event coordination, cross-boundary exchange; adspro15)
- [kit](entities/kit.md) — C/C++ pixels tooling + asset pipelines (Game Engine / Image Codec)
- [kitsupe](entities/kitsupe.md) — PE parser/editor (headers, sections, imports/exports, relocations, resources; binary patching; cheat / PE; gmh5225)
- [kuna](entities/kuna.md) — agent-first Rust Ghidra decompiler (CLI, WASM, Ghidra plugin; SLEIGH port; tunable phase pipeline for LLM agents; Noelo-Lab)
- [KittyMemory](entities/kittymemory.md) — cross-platform Android/iOS runtime memory patching library (C++; memory scan, pointer validation, Keystone assembly patches, prebuilt binaries; mobile game RE; MJx0; cheat / [Runtime code patching])
- [KmdfMandelcheck](entities/kmdfmandelcheck.md) — AnalogFeelings; compact KMDF kernel driver; renders bitmap on BSOD via modified BOOTVID interface; minimal crash-time display / boot-video graphics research; cheat / [BSOD]
- [KMDllInjector](entities/kmdllinjector.md) — 0xPrimo; C++ kernel-mode DLL injection framework; early-startup targeting; process/image-load callback triggering; ntdll loader hooks with PIC shellcode; kernel APC path; controlled process-injection research; kernel-mode DLL Injector
- [kittymemory-ios](entities/kittymemory-ios.md) — iOS runtime memory library (patch/hook/pattern scan; jailbreak-independent code patching; cheat / iOS memory explorer; gmh5225)
- [kiero](entities/kiero.md) — universal Windows D3D9–12/GL/Vulkan graphics hooking library (MinHook method-table detours; sample ImGui overlays; x86/x64; Rebzzel)
- [kiero2](entities/kiero2.md) — kiero v2 runtime D3D9–12/GL/Vulkan API locator (BYO hooking; CMake FetchContent; cross-platform GL/VK)
- [KisakBlack](entities/kisakblack.md) — COD: Black Ops dedicated server open-source reimplementation (SwagSoftware; leaked source; DemonWare networking, zone/asset loading, community hosting; Game Engine / source)
- [Kisak-Strike](entities/kisak-strike.md) — open-source Linux CS:GO port (SwagSoftware; full Source game codebase; CMake; SDL/OpenGL; engine architecture + Linux porting study; Game Engine / source)
- [KisakCOD](entities/kisakcod.md) — COD4 multiplayer executable open-source reimplementation (SwagSoftware; C/C++ CMake/VS; DirectX-era middleware + Steam; gameplay/networking/engine modules; modding + legacy exploit-surface research; Game Engine / source)
- [Killing Floor Bot Client](entities/killingfloor-bot-client.md) — UE2.5 headless Killing Floor client (native UDP protocol; Steam auth RE; Ghidra scripts; UDP MITM; protocol docs)
- [Kiteshield](entities/kiteshield.md) — Linux x86-64 ELF packer/protector (GunshipPenguin; layered RC4 + custom user-space loader; ptrace call-stack–scoped decrypt; anti-debug checks; C + asm; binary obfuscation / anti-analysis education; Anti Cheat → Binary Packer `[ELF X64]`)
- [kLLDB](entities/klldb.md) — LLDB-based Linux kernel debugger (kLLDBLive + offline post-mortem; LLVM-19; Python scripting; LLDB vs GDB/KGDB)
- [kn-diff-pool](entities/kn-diff-pool.md) — Windows kernel Big Pool snapshot/diff (driver capture + Go TUI; leak / manual-map forensics)
- [kn-live-dbg](entities/kn-live-dbg.md) — Windows kernel live debugging (driver memory primitives + Zydis disasm; user-mode TUI; LiveKD-style)
- [kn-win32-api-monitor](entities/kn-win32-api-monitor.md) — Win32 API trace workstation (Tauri 2; IAT hooks; ~30k APIs; `.knapm` replay; security/RE/anti-cheat research; kernullist)
- [KnoxPatch](entities/knoxpatch.md) — LSPosed module restoring Samsung Knox-gated apps on rooted Galaxy (Knox SDK / attestation hooks + Magisk/KernelSU enhancer; One UI 9–16)
- [Kong](entities/kong.md) — agentic reverse engineer; LLM-orchestrated binary RE via in-process Ghidra, call-graph analysis, agentic MBA deobfuscation (amruth-sn)
- [koidbg](entities/koidbg.md) — Windows ARM64 debugger (EN/PT docs; cheat / debugging; game-security RE)
- [kernforge](entities/kernforge.md) — Go AI workbench for Windows/AC project analysis, fuzz reasoning, driver POC scaffolding, verification (MCP skills)
- [Known-Driver-Mappers](entities/known-driver-mappers.md) — catalog of known Driver Mappers (AC / stress-testing)
- [KnownDllUnhook](entities/known-dll-unhook.md) — KnownDlls `.text` section restore for loaded modules (native syscalls; EDR/AC hook evasion research; ORCx41)
- [KeyboardKit](entities/keyboardkit.md) — kernel keyboard IRP filter keylogger (UDP exfil; ExplorerFrame DLL hijack)
- [Kernel Anti-Cheat](entities/kernel-anti-cheat.md) — experimental multi-telemetry kernel AC driver (NMI stack walk, thread start scan, big pool, PiDDBCache mapper residue; gmh5225; `[NMI]`)
- [Kernel Anticheat](entities/kernel-anticheat.md) — Vasieco Windows kernel AC prototype (unsigned/abnormal drivers, physmem-handle abuse, hypervisor traces, big pool, mapper residue, suspicious system threads; C/C++ Visual Studio driver; anti-cheat research)
- [Kernel-AC](entities/kernel-ac.md) — educational Windows kernel anti-cheat graduation project (LucasAlgera; KMDF driver + C++ SCM launcher; ObRegisterCallbacks handle protection; trusted-process whitelist; IOCTL game-PID registration; Anti Cheat)
- [Kernel-Bridge](entities/kernel-bridge.md) — HoShiMin; modern C++ Windows kernel driver framework/template; Intel VT-x + AMD-V hypervisor-assisted components; memory/IOCTL/hook/CPUID/MSR abstractions; advanced debugging, monitoring, and AC kernel security research
- [kernel-callback-functions-list](entities/kernel-callback-functions-list.md) — Ring0 callback registration API reference (gmh5225; anti-cheat / documentation)
- [kernel-callback-removal](entities/kernel-callback-removal.md) — ETW-TI kernel bypass; toggle provider enable flags from kernel memory via R/W primitive; WinDbg/IDA RE notes (V-i-x-x; Some Tricks / Removing kernel callbacks)
- [Kernelcloak](entities/kernelcloak.md) — C++17 kernel driver protect/obfuscate library (driver development / modding; AC Encrypt Variable / obfuscation-engine research; ck0i)
- [Kernel Cactus](entities/kernel-cactus.md) — Dell `dbutil_2_3.sys` BYOVD post-exploitation console (ETW/PPL/kill/token/file ops; shellcode inject; gmh5225)
- [Kernel-Cheat-for-directx3D](entities/kernel-cheat-for-directx3d.md) — dxgkrnl `NtDxgkGetTrackedWorkloadStatistics` export hook; `NULL_MEMORY` KM↔UM comms + win32k GDI draw (gmh5225)
- [KernelDwm](entities/kernel-dwm.md) — kernel-mode DWM composition DirectX hook driver; inject compositor draw commands from Ring0 (cs1ime; `[DWM In Kernel]`)
- [KernelDrawing](entities/kernel-drawing.md) — hook-free Ring0 GDI draw PoC; spoofed thread context satisfies internal checks; version-dependent NT offsets (Sentient111; Drawing from kernelmode without any hooks)
- [KernelGDIDraw](entities/kernel-gdi-draw.md) — KM GDI draw PoC; hooks `NtGdiDdDDISubmitCommand` + win32k GDI via InfinityHook syscall interception; screen-update-synchronized draw; latency tradeoffs documented (BadPlayer555; `[Kernel + GDI]`)
- [Kernel Overlay Hider](entities/kernel-overlay-hider.md) — win32k TAGWND DKOM PoC hides overlay HWND from enumeration; kernel driver + DirectX test harness (J0xna; overlay visibility / AC evasion research)
- [Kernel-dll-injector](entities/kernel-dll-injector.md) — kernel-mode DLL injector on kernel32 load (Sirifef/Max++ technique; driver + sample DLL; x86; Visual Studio/WDK; APC; alexkrnl)
- [KernelForge](entities/kernel-forge.md) — VBS/HVCI user-mode kernel invocation library (Cr4sh; C++; signed-driver-wrapper memory primitives + higher-level kernel routine calls; kernel-to-user DLL injection example; exploit-prototyping under Memory Integrity; README [Hijack ROP])
- [kernel-eac-be-comm](entities/kernel-eac-be-comm.md) — win32k hooked-function KM↔UM comm framework (JGonz1337; C++ driver + client; process/module lookup, memory R/W, alloc/free/protect; XOR strings + compact protocol; EAC/BE game memory research; NtGdiPolyPolyDraw)
- [kernel-eac-be-injector](entities/kernel-eac-be-injector.md) — kernel-assisted manual-map DLL injector (JGonz1337; kernel hook command handler + user-mode mapper; reloc/import/section write + remote DllMain; kernel memory alloc/exposure + pointer-swap hooks + payload cleanup; EAC/BE injection workflow research; PTE.User)
- [kernel-snippets](entities/kernel-snippets.md) — Windows KM code snippets (callback registration, memory/process ops; VGK SwapContextHk; gmh5225)
- [Kernel-Special-APC-ReadProcessMemory](entities/kernel-special-apc-readprocessmemory.md) — teaching sample: special kernel APC cross-process read (`KeInitializeApc`/`KeInsertQueueApc`; thread selection; vs RPM; gmh5225)
- [Kernel-Thread-Driver](entities/kernel-thread-driver.md) — Windows kernel-thread driver + usermode controller; status-code KM↔UM comms; target process setup, memory read, module base; AC bypass research; Spuckwaffel; cheat / Thread
- [Kernel-Trace](entities/kernel-trace.md) — AndroidReverser-Test KPM uprobe kernel module (C/C++; bulk user-space function hooking; userspace headers for library/offset/metadata; tracefs output; register/clear probe APIs; dynamic analysis / low-level behavior tracing on Android/Linux; cheat / Android kernel driver)
- [Kernel-VAD-Injector](entities/kernel-vad-injector.md) — unsigned-driver DLL inject with VAD/PTE concealment (`MiAllocateVad`/`MiInsertVad`; post-map VAD removal; Hide VAD; gmh5225)
- [kernel-codecave-poc](entities/kernel-codecave-poc.md) — KM shellcode in driver .text caves (Find Codecave; vs pool/exec alloc scans)
- [kernel-csgo](entities/kernel-csgo.md) — simple kernel CS:GO cheat (hook KM↔UM comm; C++; cheat / game:csgo)
- [kernel-cve-analysis](entities/kernel-cve-analysis.md) — defensive Windows kernel CVE write-ups (thexin7; AC/EDR telemetry, Sigma rules, hardening; cng/afd/appid)
- [kernel-development](entities/kernel-development.md) — Greg Kroah-Hartman Linux kernel dev docs (patch workflow, drivers, LKM; guide lane)
- [kernel_devicetree](entities/kernel-devicetree.md) — Xiaomi kernel device-tree branch index (MiCode; branch→device/platform/baseline lookup; kernel bring-up / board config)
- [kernel-hook-framework](entities/kernel-hook-framework.md) — Linux kernel inline-hook framework (trampoline patching + kallsyms resolution; proc control; x86/ARM/RISC-V; kernel debug + anti-cheat research; WeiJiLab)
- [kernel_build_action](entities/kernel-build-action.md) — GitHub Actions automated kernel build (TypeScript/Python; Android kernel driver CI; dabao1955)
- [kernel build scripts](entities/kernel-build-scripts.md) — Bash Android GKI/non-GKI kernel build automation (repo sync, patches, defconfig, packaging; KernelSU/SUSFS; Pixel/OnePlus/Xiaomi; TheWildJames)
- [kernel_hack](entities/kernel-hack.md) — Android/Linux LKM game-memory R/W (process mgmt / verification; Kconfig)
- [Kernel_driver_hack](entities/kernel-driver-hack.md) — Android/Linux kernel driver for process memory R/W via device ioctl (module base lookup; C kernel + userland; Jiang-Night)
- [kernel-mouse](entities/kernel-mouse.md) — MouClass kernel mouse driver (Win10/11; triggerbot/aimbot input research)
- [kernel-move-mouse](entities/kernel-move-mouse.md) — WDK relative-movement driver skeleton; version checks + per-build offsets; driver-dev / kernel input learning (BuddyBoi)
- [kernel_payload_comms](entities/kernel-payload-comms.md) — shared-memory KM↔UM payload channel (gmh5225; cheat / driver communication)
- [Kernelmode-DLL-Injector](entities/kernelmode-dll-injector.md) — kdmapper + Intel BYOVD kernel manual-map DLL injector (PE sections/imports/TLS; IOCTL comms; Manual Map; YouNeverKnow00)
- [Kernelmode Manual Mapping through IAT](entities/kernelmode-manual-mapping-through-iat.md) — kernel-mode IAT manual-map injector (process handle or KM driver; IAT Manual Map)
- [KernelMon](entities/kernelmon.md) — virtualization-based ProcMon-style kernel monitor (VMX/EPT interception; file/registry/process/thread; usermode GUI; AC/malware research in VMs)
- [KernelResearchKit](entities/kernel-research-kit.md) — Win11 25H2 boot-time DSE / SeCiCallbacks toolkit (manual map / IRP hijack / BYOVD)
- [Korok](entities/korok.md) — lightweight cross-platform Go 2D game engine (component-based; animation, rendering, assets, audio, gameplay modules; package-oriented design; docs + samples; Game Engine / source [Golang])
- [Kotek](entities/kotek.md) — modular C++20 engine core (ktkI* backends; GLES/Vulkan/DX/BGFX; Game Engine)
- [KoTR Modern Patch](entities/kotr-modern-patch.md) — King of the Road / Hard Truck 2 ASI patch (collision, camera, physics, AI traffic, trailer, UI; ModUtils + Ultimate ASI Loader; complements D2GI; DirectX Compatibility)
- [Krunker Loader](entities/krunker-loader.md) — keyless Tampermonkey userscript stack for Krunker.io (aimbot, ESP, Quirify license-emulation loader)
- [KPDB](entities/kpdb.md) — kernel-mode PDB parser (GetRektBoy724 pure C symbol+type streams; rbmm C++; runtime symbol resolution in drivers)
- [KPM-MemReader](entities/kpm-memreader.md) — KernelPatch/APatch KPM cross-process memory read via ioctl hook (C/C++; libtersafe; cheat / Android kernel driver)
- [kptnhook](entities/kptnhook.md) — system-wide KM DLL inject + function hook (every process; cheat / injection:windows)
- [krnl-gdi-render](entities/krnl-gdi-render.md) — KM GDI overlay framework (WDK; GDI hooks + sigscan; Dxgkrnl + GDI)
- [KSOCKET](entities/ksocket.md) — kernel WSK BSD-socket lib (TCP/UDP from ring 0; no UM)
- [KsDumper](entities/ks-dumper.md) — original C++ KM process dumper (custom driver + client; PE32/64 rebuild; AC-restricted handles; EquiFox)
- [KsDumper-11](entities/ksdumper-11.md) — classic KM process dumper (C# GUI + `KsDumperDriver.sys`; KDU BYOVD; PE32/64; blocklist bypass)
- [KslKatz](entities/kslkatz.md) — BYOVD LSASS dumper via Defender `KslD.sys` (WDigest/LSA; PPL/AV bypass)
- [KslDump](entities/ksldump.md) — PPL LSASS dump via legacy on-disk Defender `KslD.sys` (IOCTL 0x222044 + MmCopyMemory; no external driver load; andreisss)
- [kvc](entities/kvc.md) — DSE bypass via signed MS driver (`g_CiOptions` / skci / SeCiCallbacks; PP/PPL→LSASS)
- [kvm-csgo-cheat](entities/kvm-csgo-cheat.md) — Rust CS:GO cheat in QEMU/KVM/PVE/VBox lane (below-OS VM isolation; gmh5225)
- [KVM-GPU-Passthrough](entities/kvm-gpu-passthrough.md) — Arch Linux GPU passthrough VM lab (GRUB/libvirt/QEMU scripts; IOMMU/VT-d + AMD/Intel BIOS prerequisites; isolated gaming/security-research guests; BigAnteater; GPU Passthrough)
- [kvm-kernel-example](entities/kvm-kernel-example.md) — minimal KVM VMM + guest kernel tutorial (hypercalls, mmap, syscalls, ELF load; Guide)
- [KVM.Performance](entities/kvm-performance.md) — KVM host troubleshooting KB (ioapic tuning, split-lock, WRMSR/RDMSR on Unraid/Proxmox; game/AC launch failures in VMs; SingularityCloud; ioapic)
- [kur](entities/kur.md) — C/C++ kernel utility via echo_driver.sys BYOVD (kernel R/W, process manipulation, driver load; gmh5225)
- [kurasagi](entities/kurasagi.md) — Win11 24H2–25H2 runtime PatchGuard bypass PoC; C/C++ kernel components; kdmapper manual-map load; CRITICAL_STRUCTURE_CORRUPTION edge-case research (NeoMaster831; cheat / PatchGuard-related)
- [KvcForensic](entities/kvcforensic.md) — LSASS credential forensics (MSV/WDigest/Kerberos/DPAPI; Win/Linux dumps)

- [lamda](entities/lamda.md) — FIRERPA all-in-one Android control (Python API; UI automation, WebRTC mirror, MITM, built-in Frida, MCP; root/non-root; firerpa)
- [lara](entities/lara.md) — WIP DarkSword kexploit (iOS 17.1.1–26.0.1; font/app bypass / DirtyZero2)
- [LazySign](entities/lazy-sign.md) — fake-cert Authenticode signing (Microsoft devkit binaries; zero extra deps; Some Tricks / Ring3)
- [LazyIDA](entities/lazyida.md) — IDA Pro productivity plugin (debug auto-relocation jump, memory dump, ASCII/HEX/BASE64 paste, RVA copy, jump-to-address without rebasing; gmh5225; cheat / IDA Plugins)
- [LaZagne](entities/lazagne.md) — Python cross-platform credential recovery framework (AlessandroZ; modular collectors for browsers, mail, databases, chat apps; post-exploitation / auditing / forensic credential exposure)
- [lazy_importer](entities/lazy-importer.md) — header-only C++ runtime module/export lazy import (no static IAT or plaintext strings; safe/cached/forwarded modes; per-build hash randomization; minimal codegen; AC Lazy Importer; JustasMasiulis)
- [Lazenca S](entities/lazenca-s.md) — Android anti-cheat engine (Java + JNI native C/C++; debugging, root, speed-hack, binary modification, VM indicators; mobile game protection experiments / AC detection study; Lazenca; Android Platform)
- [L4D2 Basic](entities/l4d2-basic.md) — Left 4 Dead 2 basic cheat framework (Source engine hooks, interface resolution, starter template; gmh5225)
- [L4D2 Cheat](entities/l4d2-cheat.md) — Left 4 Dead 2 internal cheat (Source engine SDK; VMT hooks + interface exploitation; ESP/aimbot/gameplay mods; Linux; gmh5225)
- [ZenWare.cc](entities/zenware-cc.md) — L4D2 internal + external training framework (krakensuit; C++17 x86 MinHook; pattern offsets + signature verify; injectable DLL + GUI loader + RPM/GDI external; ESP/chams/aim/movement; educational/local insecure-server; no AC bypass / no VAC; cheat / game:l4d2)
- [l-assemblies](entities/l-assemblies.md) — C# LeagueSharp champion plugins (Orbwalker/TargetSelector combos; ward/cooldown minimap tracker; gmh5225; cheat / game:lol)
- [lazysight](entities/lazysight.md) — internal Ironsight multihack (DirectX overlay ESP/aimbot; entity lists, weapon managers, W2S SDK reads; Internal; gmh5225; cheat / game:ironsight)
- [last-island-of-survival-ioscheat-source](entities/last-island-of-survival-ioscheat-source.md) — Last Island of Survival / Last Day Rules iOS cheat source (Objective-C runtime manipulation; gameplay mods; gmh5225; cheat / iOS)
- [lab-esp-and-aimbot](entities/lab-esp-and-aimbot.md) — educational ESP/aimbot lab (3D target app + external cheat; W2S / RPM; cheat / guide)
- [lanternlight](entities/lanternlight.md) — Mistfall Hunter anti-cheat-safe Python companion (game log + UE5 GVAS saves + passive screen capture; Emberforge build math; no injection/RPM/hooks; Remus3)
- [launcher-abuser](entities/launcher-abuser.md) — stealth external RPM via Steam/Battle.net launcher-held game handles (shared-memory IPC; minimal shellcode + thread hijack; syscall NtReadVirtualMemory/NtWriteVirtualMemory; Ricardonacif; Cheat / Launcher Abuser)
- [LabSync](entities/labsync.md) — IDA Pro plugin: Git-backed partial IDB sync (YAML export on save; mergetool merge; MD5 input-file identity; Cellebrite Labs; cheat / IDA Plugins)
- [LADD](entities/ladd.md) — Linux C anti-debugging detection tool (BarakAharoni; ptrace behavior, LD_PRELOAD tampering, TracerPid in /proc/self/status; early runtime checks; anti-analysis research and defensive hardening experiments; Anti Debugging)
- [LaneGuard](entities/laneguard.md) — behavioral anti-cheat test bench (JoshKappler; TypeScript/Next.js; lane-change mobile skill-game sim; attacker ladder, client kinematic/behavioral-texture detector with ROC calibration, headless batch runners, economy break-even; Anti Cheat / behavioral)
- [LarpingAntiCheat](entities/larping-anti-cheat.md) — Paper 1.21+ Minecraft anti-cheat plugin Hyphon (realkyx29-design; Java 21; movement/combat/world checks; server-authoritative physics snapshots; violation tracking with decay; honeypot/ESP decoys + packet-layer fake bases; capability analyzer for modded SMP modifiers/enchantments; low false positives; server-side only; Anti Cheat / game:minecraft)
- [lc0](entities/lc0.md) — Leela Chess Zero neural chess engine (MCTS + self-play RL; CUDA/cuDNN/OpenCL; Chess Engine / game AI)
- [le-chiffre](entities/le-chiffre.md) — lightweight external CS:GO PoC (Blaumaus; C++; bunnyhop, triggerbot, aimbot, glow ESP, radar; educational memory manipulation + RE fundamentals; cheat / game:csgo [External])
- [learn-awesome-gamedev](entities/learn-awesome-gamedev.md) — mega-list of gamedev learning resources (Game Develop / guide)
- [learn-directx](entities/learn-directx.md) — DX12 step-by-step tutorials (window creation → command bundles, frame buffering, textures, resource states; synchronization, descriptors, performance API; DirectX / guide)
- [Learn FPGA Programming](entities/learn-fpga-programming.md) — Packt book companion; chapter-organized SystemVerilog (logic design → I2C/PS/2/VGA/DDR; FPGA fundamentals for DMA/custom hardware; Guide)
- [learnopengl](entities/learnopengl.md) — LearnOpenGL tutorial companion source (JoeyDeVries; progressive C++ OpenGL fundamentals through advanced rendering; lighting, Assimp, shadow mapping, deferred shading, PBR, post-processing; GLFW/GLEW/GLM; README [OpenGL])
- [learning-directx12](entities/learning-directx12.md) — D3D12 tutorial series + C++ samples (device/PSO/heaps; triangle → scenes; DirectX / guide)
- [levo](entities/levo.md) — experimental x86/x64 PE AOT binary translator (Ghidra CFG → XED/Remill lift → LLVM recompile; kernel32 API-intercept runtime)
- [LetMeGG](entities/letme-gg.md) — C++ PoC; prevent WinDbg break/attach (Some Tricks / Windows Ring0 anti-debug; gmh5225)
- [lightsaber](entities/lightsaber.md) — iOS 18.4–18.6.2 userland exploit; JS inject SpringBoard (DarkSword-derived)
- [light-hook](entities/light-hook.md) — single-header x86-64 hook library (SamuelTulach; pure C; Windows/Linux/EFI; user/kernel/firmware examples; no heavy disassembler; cross-platform hook library)
- [lightyear](entities/lightyear.md) — Rust server-authoritative Bevy multiplayer netcode (prediction, rollback, lag compensation, WebTransport/wasm; client-server trust boundaries; cBournhonesque; Game Network / source)
- [lilypublic](entities/lilypublic.md) — KM+UM cheat framework (DBVM hypervisor; physical mem R/W, pattern scan, object callbacks; DirectComposition/DirectDraw/DX9/11 ImGui overlays; dot1991)
- [lithium-kernel](entities/lithium-kernel.md) — KM+UM driver framework (custom IOCTL phys/virt R/W, page-table walk, pattern scan, MouClass mouse, thread hide, NMI suppression, pool-tracker clean; bootmgfw)
- [Lenovo-CVE-2025-8061](entities/lenovo-cve-2025-8061.md) — LnvMSRIO.sys LPE PoC (CVE-2025-8061; IOCTL → SYSTEM; BYOVD)
- [Lenrete Mod](entities/lenrete-mod.md) — Fabric Minecraft 26.2 utility/cheat client (Java 25; 43 modules—KillAura/ESP/Reach/Flight/Blinker; Mixins + JSON config; lolizei; cheat / game:minecraft)
- [lenovo-exec](entities/lenovo-exec.md) — LenovoDiagnosticsDriver.sys BYOVD PoC (insecure IOCTL → arbitrary kernel code execution; gmh5225)
- [lenovo-mapper](entities/lenovo-mapper.md) — BYOVD driver mapper via LenovoDiagnosticsDriver.sys (memory-access IOCTLs; manual unsigned map; gmh5225)
- [lpmapper](entities/lpmapper.md) — C++ large-page driver manual mapper (shellcode into loaded large-page drivers; no fresh pool alloc; registry config; AC evasion research; VollRagm)
- [libelevate](entities/libelevate.md) — C++ elevating-handle lib (KM/driver primitives → full-access process handles; AC handle protection)
- [libiht](entities/libiht.md) — Intel Hardware Trace Library (Tencent Xuanwu Lab; hardware-assisted execution tracing; Windows kernel explorer)
- [libipt-rs](entities/libipt-rs.md) — Rust user-mode `ipt.sys` wrapper (DeviceIoControl start/stop/retrieve IPT traces; RE-derived interface; no decode/coverage)
- [libjpeg-turbo](entities/libjpeg-turbo.md) — IJG JPEG codec (reference listing; engine asset-pipeline / Image Codec)
- [liblava](entities/liblava.md) — modern C++23 Vulkan library (lean modular framework; rolling releases; Vulkan / Guide)
- [libgdx](entities/libgdx.md) — cross-platform Java game framework (2D/3D; Android/desktop/iOS/WebGL; Game Engine)
- [libghidra](entities/libghidra.md) — C++/Rust/Python JVM-free Ghidra decompiler library (SLEIGH + Pcode; disassembly, decompilation, CFG, types, xrefs; LibGhidraHost HTTP or offline Sleigh backend; 0xeb)
- [libmdmp](entities/libmdmp.md) — C/C++ minidump format library (memory analysis / debugging; AC / Windows kernel dump analysis)
- [lightweightvk](entities/lightweightvk.md) — bindless-only Vulkan 1.3 IGL fork (optional mesh shaders + ray tracing; Vulkan / Guide)
- [libmem](entities/libmem.md) — cross-platform game-hacking lib (memory / hook / scan; Win/Linux/FreeBSD; C/C++/Rust/Python/Lua)
- [libwsk](entities/libwsk.md) — kernel WSK socket-style library (C/C++; NuGet/MSBuild; connect/send/recv; WDK/VS driver workflows; Kernel-Mode Winsock library)
- [linjector-rs](entities/linjector-rs.md) — Rust Android code injection without ptrace (modding; cheat / injection:android; erfur)
- [linux-anticheat](entities/linux-anticheat.md) — WIP four-layer Linux console AC (mikio815; Rust daemon + LSM eBPF ptrace/W^X/bpf() + C kernel module eBPF-integrity guard + planned BitVisor VMX/EPT; Aya; Linux 5.17+ BTF/BPF LSM; Steam Deck / Secure Boot / lockdown / TPM; Open Source Anti Cheat System)
- [lisa-py](entities/lisa-py.md) — LLDB MCP server (Python plugin + MCP bridge; breakpoints, backtraces, disasm, memory reads; ant4g0nist; MCP for LLDB)
- [LitePCIe](entities/litepcie.md) — Python/Migen PCIe endpoint core (DMA engines, LTSSM trace, user-space drivers; KC705/KCU105/XCU1525/Acorn; enjoy-digital; DMA / FPGA research)
- [Little Anti-Cheat](entities/little-anti-cheat.md) — open-source SourceMod anti-cheat plugin for Source engine servers (SourcePawn; aimbot/aimlock, abnormal angles, bhop/fast duck, ConVar checks; interpolation/backtrack countermeasures; TF2/CS community servers; J-Tanzanite; For Source Games)
- [Limelighter](entities/limelighter.md) — Go CLI fake-cert generator/signer (domain-metadata spoofed certs → PFX; external signing utilities; red-team trust/EDR research; Fake Cert; Tylous)
- [limba](entities/limba.md) — compile-time MBA control-flow obfuscation PoC (C++20; Clang/clang-cl; randomized jump-target encoding; premake examples; ThatLing; Cheat Mixed boolean-arithmetic)
- [Lina Engine](entities/lina-engine.md) — cross-platform lightweight OSS 3D engine (LinaVG GUI; LinaGX Vulkan/DX12/Metal; Game Engine source)
- [lldbext-dump](entities/lldbext-dump.md) — LLDB Python extension: Android live session → Windows minidump + Unicorn replay (mobile RE / dump)
- [AnyWhere](entities/anywhere.md) — Android mock-location app (OpenStreetMap picker, overlay joystick walk/run/cycle, location history; LSPosed module hides mock-provider flags; cxOrz; Cheat / Xposed)
- [LSPosed Universal Template](entities/lsposed-universal-template.md) — LSPosed/LSPatch module scaffold (libxposed API 102; Java hooks + overlay mod menu; ShadowHook/JNI native pattern scan; Unity/Unreal/Cocos2d-x/Godot engine detection; AC process filters; Jordan231111; Cheat / Xposed)
- [LocusMimic](entities/locusmimic.md) — LSPosed/Xposed Android GPS spoof (map picker, saved locations, app/system/mock-provider modes; Kotlin/Compose)
- [LockFile-Poc](entities/lockfile-poc.md) — C++ Windows file-lock PoC (AC Stress Testing / Some Tricks Ring3)
- [LocalAnticheat 1.8.9](entities/local-anticheat-1-8-9.md) — Forge 1.8.9 client mod; passive packet-flow checks (11 modules); local-chat flags; no server reports (freezato; Anti Cheat / game:minecraft)
- [localroot-all-cve](entities/localroot-all-cve.md) — historical CVE/year-indexed LPE PoC archive (Snoopy-Sec; C/shell/Python; exploit-dev study; README [Root CVE])
- [logitech-cve](entities/logitech-cve.md) — Logitech virtual-driver input emulation (ekknod C/C++ driver dev; BatogiX Rust typed IOCTL library; triggerbot/aimbot and attack-surface research)
- [LoudSunRun](entities/loudsunrun.md) — stack spoofing with synthetic frames (namazso / SilentMoonWalk / VulcanRaven; Cheat Spoof Stack)
- [LOLDrivers](entities/loldrivers.md) — comprehensive LOLdriver catalog (YAML metadata, YARA, HVCI tracking; magicsword-io)
- [loldrivers-client](entities/loldrivers-client.md) — Go/PowerShell LOLdrivers scan client (cheat / vulnerable driver)
- [LolDriverScan](entities/loldriverscan.md) — Go unprivileged LOLdriver scanner; public threat feed + local hash/metadata compare; verbose/JSON export; defensive auditing and AC environment checks (FourCoreLabs)
- [league-base](entities/league-base.md) — C++ LoL cheat base framework (memory read, object enum, overlay; Packman/Vanguard; gmh5225; cheat / game:lol)
- [league-dumper](entities/league-dumper.md) — LoL process memory dumper (Process Dump fork; code encryption, hidden modules, import reconstruction; gmh5225; cheat / game:lol [Dump])
- [league-directx11-internal](entities/league-directx11-internal.md) — internal LoL cheat (D3D11 rendering hooks; spell DB; champion data; ImGui + custom fonts; named pipe IPC; Internal; gmh5225; cheat / game:lol)
- [league-of-legends-visuals-cheat](entities/league-of-legends-visuals-cheat.md) — internal LoL cheat (C++; injector + C++/CLI UI; skin changer/DB, orbwalker, spell prediction, zoom hack; ImGui + DX9; Detours + VMT; Vatrials; cheat / game:lol)
- [league-skin-changer](entities/league-skin-changer.md) — internal LoL skin changer (DX9/11 hooks + ImGui; champion/minion/jungle skins; auto DB updates; Skin; gmh5225; cheat / game:lol)
- [league-unpacker](entities/league-unpacker.md) — LoL `.text` decrypt/dump tool (DLL injection; IDA static analysis; manual base input; gmh5225; cheat / game:lol [Dump])
- [leaguesharp](entities/leaguesharp.md) — LoL scripting/modding platform (JungleTimerHax, SkinHax, champion resize; LoL internal APIs; gmh5225; cheat / game:lol)
- [leaguesharp-loader](entities/leaguesharp-loader.md) — C# LeagueSharp loader (DirectX + hooking; bootstrap for LeagueSharp modules; gmh5225; cheat / game:lol)
- [lol-client](entities/lol-client.md) — custom/modified LoL client for protocol and game-state research (gmh5225; cheat / game:lol)
- [lol-offset-dumper](entities/lol-offset-dumper.md) — C/C++ LoL live-process offset dumper (memory analysis; gmh5225; cheat / game:lol [Dump])
- [lol-patcher](entities/lol-patcher.md) — experimental LoL client patcher/mod (gmh5225; frozen Feb 2020; cheat / game:lol)
- [lol-unpackman](entities/lol-unpackman.md) — C++ LoL client unpacker (gmh5225; cheat / game:lol)
- [lviewlol](entities/lviewlol.md) — Python LoL external viewing tool (memory read; minimap/player positions/cooldown overlay; gmh5225; cheat / game:lol)
- [long_night](entities/long-night.md) — IDA Pro dark color theme (syntax-highlighted; cheat / IDA themes)
- [legit-csgo-cheat-menu](entities/legit-csgo-cheat-menu.md) — CS:GO legit-style cheat menu (Windows; cheat / game:csgo [Menu]; gmh5225)
- [AzerothCore WoTLK](entities/azerothcore-wotlk.md) — WoW WotLK private-server emulator (3.3.5a client; world simulation / player management / NPC AI / Eluna Lua / database-driven content / network protocol; cheat / game:wow)
- [Azerust](entities/azerust.md) — experimental Rust WoW 3.3.5 server emulator (auth server; TrinityCore-style DB; async Rust; SQL + containers; cheat / game:wow)
- [LegionCore 7.3.5](entities/legioncore-7-3-5.md) — WoW Legion private-server emulator (TrinityCore fork; 7.3.5 client; world simulation / dungeons / artifact weapons / class halls / world quests; cheat / game:wow)
- [5.4.7 WoW Source](entities/5-4-7-wow-source.md) — WoW MoP private-server source (RageProject; TrinityCore-style 5.4.7 fork; C/C++/CMake; auth/world servers; gameplay fixes / class+t talent support / level-90 stability; database + tooling; cheat / game:wow)
- [MopCore547](entities/mopcore547.md) — WoW MoP private-server emulator (SkyFire; 5.4.7 client; C++/CMake; world simulation / player management / NPC scripting / network protocol; cheat / game:wow)
- [love](entities/love.md) — LOVE2D 2D Lua game framework (OpenGL/Metal; Box2D; `.love` archives; Game Engine / source)
- [LplPlugin](entities/lplplugin.md) — experimental C++23 FullDive Engine (Vulkan ECS, Morton spatial partitioning, Linux kernel IPC module, OpenBCI BCI stack; Game Engine / source)
- [Luth](entities/luth.md) — custom C++ Vulkan game engine (render graph, PBR, CSM, GTAO, GPU skinning, ECS, fiber job system, integrated editor; Game Engine / source [C++ 2D])
- [Lumina-Cheat](entities/lumina-cheat.md) — internal CS:GO; mutation for changing signature (cheat / game:csgo)
- [LuminaryDMA](entities/luminary-dma.md) — Call of Duty read-only DMA cheat framework: PCILeech/MockDMA + DMALibrary; GamePass/BattleNet auto-detect; BO6 offsets; client-info decryption; ESP/radar/player-info ImGui overlay on separate host (C++; cheat / game:call of duty [DMA]; TheAustinUS)
- [LumixEngine](entities/lumixengine.md) — C/C++ Lumix Engine (shader/render samples; Game Engine / source)
- [lumixengine_maps](entities/lumixengine-maps.md) — Lumix OSM map downloader (roads/buildings; Plugins:Lumix)
- [Lumos](entities/lumos.md) — open-source C++ 2D/3D engine (Vulkan/OpenGL PBR; ECS; Dear ImGui editor; Game Engine / source)
- [Lucky Spark](entities/lucky-spark.md) — Windows stealthy shellcode loader (fiber execution, JIT decryption, WinHTTP staging, PEB-walk API resolve; Sliver-like; Schich)
- [lsass-dump-that-lsass](entities/lsass-dump-that-lsass.md) — user-mode LSASS dump via handle theft + unhooked DbgHelp MiniDumpWriteDump (gmh5225; Elevating Handle)
- [lsass-usermode-bypass](entities/lsass-usermode-bypass.md) — C++ user-mode bypass demo; reuse LSASS process handles for memory access without kernel driver (ContionMig; Elevating Handle By LSASS)
- [lsass-extend-mapper](entities/lsass-extend-mapper.md) — unsigned driver map via lsass address-space extend
- [LUDA](entities/luda.md) — Lua IDA Pro scripting plugin (direct SDK access; cheat / IDA Plugins)
- [luadecompiler](entities/luadecompiler.md) — Coldzer0 Pascal Lua 5.1–5.5 bytecode disassembler/decompiler (SSA CFG reconstruction, boolean recovery, custom opcode tables for game-modified Lua VMs; script RE / Decompiler)
- [luagenny](entities/luagenny.md) — C++ Lua SDK codegen (cheat / sdk codegen; RE)
- [luaboot](entities/luaboot.md) — fully scriptable UEFI bootloader (Lua; MIT; cheat / EFI driver research)
- [LuaMachine](entities/luamachine.md) — UE4 Lua gameplay scripting plugin (Blueprint assets / metatables; Plugins:Unreal)
- [Lua-Obfuscator-Clyde-Protection](entities/lua-obfuscator-clyde-protection.md) — Luau/Lua VM obfuscator (AST + stack/register VM; Roblox script protection)
- [m0dern_p4cker](entities/m0dern-p4cker.md) — C/C++ ELF binary packer (`[ELF]`; Anti Cheat → Binary Packer)
- [macroquad](entities/macroquad.md) — Rust 2D game lib (shaders / render / audio; Game Engine / source)
- [methanekit](entities/methanekit.md) — cross-platform C++ graphics/application framework (D3D12/Vulkan/Metal; shared shader workflows; CMake; tutorials/samples/modular runtime; Game Engine / source)
- [magicmida](entities/magicmida.md) — Pascal Themida auto-unpacker (custom user-mode debugger; 32/64-bit PE + .NET dump; import rebuild; ScyllaHide; Fix Themida; Hendi48)
- [magicmida-rs](entities/magicmida-rs.md) — Rust Themida automatic unpacker (Win32 Debug API; OEP + IAT rebuild; ScyllaHide; Fix Themida)
- [mega-dumper](entities/mega-dumper.md) — Windows C# WinForms native + .NET assembly dumper (module inspect, anti-dump/hook detect, VM/heap/process explore, AppDomain enum, managed inject + minidump; CodeCracker-Tools)
- [midgetpack](entities/midgetpack.md) — ELF binary packer (password + Curve25519 challenge-response; AES-128/HMAC-SHA256; Linux/FreeBSD x86/x86-64/ARM cross-arch; Anti Cheat → Binary Packer `[ELF]`; arisada)
- [MagicSigner](entities/magic-signer.md) — sign with leaked certs (admin; TLS side effects; AC sign tools)
- [Magnetite](entities/magnetite.md) — Rust self-hostable Wasm game platform (deterministic replay AC / magnetite-anticheat)
- [Mandragora](entities/mandragora.md) — educational ring-3 usermode anti-cheat for Assault Cube (weak difficulty; unobfuscated source for RE practice; gmh5225)
- [Magisk](entities/magisk.md) — Android systemless root (su daemon / modules / DenyList·Shamiko / Zygisk)
- [MagiskHide](entities/magiskhide.md) — portable ptrace MagiskHide module for Magisk v24.0+ (DenyList hidelist; no Zygisk; Android 11+; gmh5225)
- [MagiskKiller](entities/magisk-killer.md) — Android Magisk/MagiskHide detector (fork subprocess + pipe IPC; tracer/bootloader/property/PTS; canyie; Detection:Magisk)
- [MagiskEoP](entities/magisk-eop.md) — Magisk su-daemon privilege-escalation PoC (race/logic flaw; unprivileged app → root without approval; canyie; exploit)
- [magiskboot](entities/magiskboot.md) — Boot Image Modification Tool (C/C++; Cheat Magisk)
- [magiskboot-linux](entities/magiskboot-linux.md) — GitHub Actions standalone Linux magiskboot (boot unpack/repack/patch; gmh5225)
- [magiskboot_build](entities/magiskboot-build.md) — POSIX standalone magiskboot build scripts (Cheat Magisk / Boot Image)
- [magiskboot_ndk_on_linux](entities/magiskboot-ndk-on-linux.md) — NDK-on-Linux magiskboot (boot unpack/repack/ramdisk)
- [mal-unpack-drv](entities/mal-unpack-drv.md) — Experimental test-signed kernel driver for Windows malware sample unpacking (VM-only; Sample Unpacker; hasherezade)
- [malimite](entities/malimite.md) — Ghidra-based Java desktop decompiler for iOS IPA and macOS app bundles; Apple resource decode, Swift class reconstruction, Swift/ObjC binaries (LaurieWired; malware analysis / Apple app RE; iOS and macOS Decompiler)
- [malstring](entities/malstring.md) — C++23 header-only compile-time PIC string/array obfuscation (template-metaprogrammed XOR stack/call strings; per-string keys; decrypt-on-use; AC String Crypter / Compile Time; ManulMap)
- [malum-menu-android](entities/malum-menu-android.md) — Among Us Android Frida mod menu (TypeScript; frida-il2cpp-bridge + frida-java-menu; Objection gadget; non-root; astra1dev)
- [Malicious Code Detection Bugu](entities/malicious-code-detection-bugu.md) — Go gRPC microservices malware-scan platform (Bugu; file upload, hash verify, automated analysis; Protobuf gRPC+HTTP API; gmh5225; Malicious code detection and obfuscation)
- [MagiskDetector](entities/magiskdetector.md) — archived Android Magisk detector (AppZygote/AIDL; Detection:Magisk)
- [MagiskDetection](entities/magisk-detection.md) — archive of Android root/Magisk detection POC APKs (Zygisk/hook/bootloader/root-app checks; sample hashes; apkunpacker)
- [MagiskOnWSALocal](entities/magiskonwsalocal.md) — LSPosed; local Magisk/KernelSU + GApps + LSPosed WSA build scripts (Python/shell; rooted installable WSA for security testing on Win11; Cheat WSA)
- [Magisk-Tailscaled](entities/magisk-tailscaled.md) — Magisk module running Tailscale daemon on rooted Android (userspace networking; VPN coexistence; remote SSH + ADB-over-tailnet; arm/arm64; anasfanani)
- [makin](entities/makin.md) — Windows anti-debug/anti-VM probe (30+ checks; C; Anti Debugging)
- [MAJESTY-technologies](entities/majesty-technologies.md) — experimental Windows kernel driver; anti-debugging/anti-analysis; DKOM-style structure manipulation, instrumentation callback checks, HW breakpoint checks, process/thread flag hardening, anti-hypervisor timing/anomaly probes; AC/protection research (Ahora57; Anti Debugging)
- [MAMBO](entities/mambo.md) — ARM/AArch64 Linux DBI (software code cache; instruction/block/function hooks; analysis plugins; beehive-lab; cheat / DBI / ARM)
- [mandibule](entities/mandibule.md) — Linux ptrace ELF injector (icrt; raw syscalls; load/relocate; fake stack; Cheat / injection)
- [maniac](entities/maniac.md) — external osu!; out-of-process offensive techniques (cheat / game:osu [External]; gmh5225)
- [manipulating_token](entities/manipulating-token.md) — Windows access-token theft/impersonation LPE samples (SeDebugPrivilege; SYSTEM integrity; gmh5225)
- [ManyTypes](entities/manytypes.md) — x64dbg typeparsing plugin with Windows types (Cheat x64dbg Plugins)
- [Map file in system space](entities/map-file-in-system-space.md) — kernel `MmCreateSection` / `MiMapViewInSystemSpace` file→system-space map (stealthy unsigned driver load; MiMapViewInSystemSpace; gmh5225)
- [MSB](entities/msb.md) — legacy MapleStory GMS trainer toolkit (C++/C# launcher; injection/runtime control; GMS 128–140; historical MMO trainer architecture RE; cheat / game:maplestory [GMS Old Hack 128-140]; PrinceFroggy)
- [MSC](entities/msc.md) — legacy MapleStory GMS bot framework (C++/C#; map/portal data resources; discontinued partial publish; historical bot-design RE; cheat / game:maplestory [GMS Bot]; PrinceFroggy)
- [MSDoggy](entities/msdoggy.md) — legacy Taiwan MapleStory (TMS) game hack (C/C++ + inline assembly hooks; mob behavior + item-filter logic; low-level patching + optional protector integration; historical MMORPG cheat RE; cheat / game:maplestory [TMS Old Hack]; Inndy)
- [MapleServer Android](entities/mapleserver-android.md) — MapleStory GMS-083 private server on Android (server-side game logic / character management / world simulation; Private Server-GMS-083 / game:maplestory; gmh5225)
- [MapleStory Build Framework](entities/maplestory-build-framework.md) — MapleStory private-server client build framework (C/C++; individualized distribution + rudimentary anti-cheat; Anti Cheat / game:maplestory)
- [MapleStory Client (HeavenMS)](entities/maplestory-client.md) — MapleStory custom/modified client (rendering / network protocol / UI; private-server connectivity; HeavenMS Client / game:maplestory; gmh5225)
- [MapleResearch](entities/maple-research.md) — GMS v95.1 client-internals analysis (Markdown; CSecurityClient + HackShield integration; practical localhost-environment RE notes; cheat / game:maplestory [GMS-095 Client Analysis]; Maxcloud)
- [MapleStory CMS95 Client Address](entities/maplestory-cms95-client-address.md) — CMS v95 client memory addresses/offsets (function pointers, structure offsets, hook points; modding / private-server dev; CMS-095 Client Analysis / game:maplestory; gmh5225)
- [MapleStoryCopy](entities/maplestory-copy.md) — Godot .NET MapleStory-style client recreation (C#; scene/sprite/audio assets; learning-oriented 2D MMORPG client architecture; Game Engine / Godot MapleStory; ZeromaXHe)
- [MapleStory Artale Explab](entities/maplestory-artale-explab.md) — MapleStory Worlds Artale experience/HP-MP cost lab (optimal training spots, exp rates, leveling paths; game-mechanics / game:maplestory; gmh5225)
- [MapleStory Auto Level Up](entities/maplestory-auto-level-up.md) — MapleStory Artale animation-based auto level-up bot (Python; cheat / game:maplestory; gmh5225)
- [MapleStory Worlds Automation](entities/maplestory-worlds-automation.md) — YOLO automation for MapleStory Worlds / Artale (Python; cheat / game:maplestory)
- [MapleStory-YOLOv8-Training](entities/maplestory-yolov8-training.md) — YOLOv8 MapleStory object-detection training (Apple MPS; Python; cheat / game:maplestory)
- [MapleStory Detection Sample Generator](entities/maplestory-detection-sample-generator.md) — synthetic MapleStory cheat-detection / object-detection training samples (multiple formats; anti-cheat development; game:maplestory; gmh5225)
- [MapleStory (ellermister)](entities/maplestory.md) — MapleStory CMS-079 private-server emulator (login/channel/world servers; character/map/monster/skill/party/guild/item systems; network protocol emulation; Private Server-CMS-079 / game:maplestory)
- [MapleStory143](entities/maplestory143.md) — MapleStory v143 CMS private server (Java/Kotlin; LoginCrypto / Netty·MINA / CheatTracker; Private Server-CMS-143)
- [MapleStory v179 Cheat Engine](entities/maplestory-v179-cheat-engine.md) — MapleStory v179 CE tables and Auto Assembler scripts (`.CT`/CEA; full-map attack, skill injection, no-delay, pet loot teleport, knockback via pattern-scan byte patches; legacy MapleStory RE; cheat / game:maplestory [V179 CT]; Noosh404)
- [MapleStory v83 MaplestoryCPP](entities/maplestory-v83-maplestory-cpp.md) — MapleStory GMS-083 private server (C/C++; editor tooling / modding / SDK generation; Private Server-GMS-083 / game:maplestory; gmh5225)
- [MapleUnity](entities/maple-unity.md) — Unity MapleStory v83 client reimplementation (C#; reNX/NXWrapper NX parse; foothold collision / attachment-point sprites / physics·inventory·skills / AES legacy protocol; Unity Editor NX diagnostics; TDD + clean architecture; Game Develop / source / game:maplestory; ilia810)
- [MapleStoryUnity](entities/maplestory-unity.md) — Unity MapleStory client reimplementation (C#; WzLib/UnityWzLib encrypted WZ parse; MapleCryptoLib AES + custom packet crypto; JCSUnity 2D/UI/networking; map/sound/stats/core gameplay; MapleStory-compatible servers; GPL-3.0; Game Engine / source / game:maplestory; MapleStoryUnity)
- [MapleStory v113 Server Eimulator](entities/maplestory-v113-server-eimulator.md) — MapleStory TMS-113 private-server emulator (v113 protocol / NPC scripting / mob AI / skills / economy; Private Server-TMS-113 / game:maplestory; gmh5225)
- [JMS v186](entities/jmsv186.md) — MapleStory JMS-186 private-server emulator (character management / quest systems / combat mechanics / world simulation; Private Server-JMS-186 / game:maplestory; gmh5225)
- [AzureV316](entities/azurev316.md) — MapleStory KMS-316 private-server emulator (login auth / character persistence / map instances / monster spawning / skills / quests / party/guild; Private Server-KMS-316 / game:maplestory; gmh5225)
- [ElectronMS](entities/electronms.md) — MapleStory KMS-316 private-server emulator (Java; SQL schemas; JavaScript event/NPC scripts for bosses/party quests/progression; packet handling + server properties; MMORPG server-architecture RE; Bratah123; Private Server-KMS-316 / game:maplestory)
- [RustMS](entities/rustms.md) — MapleStory private-server emulator (Rust; login/character/channel servers; player/NPC/quest/combat; memory-safe server logic; Private Server-Rust / game:maplestory; gmh5225)
- [MapleStory Packer ModPacker](entities/maplestory-packer-modpacker.md) — MapleStory Worlds `.mod` / WZ pack-unpack tool (compression/encryption; client mod asset pipelines; modding / game:maplestory; gmh5225)
- [MapleStory HeavenClient](entities/maplestory-heavenclient.md) — MapleStory custom client (HeavenClient; game protocol / rendering / UI; open-source private-server connectivity; Heaven Client / game:maplestory; gmh5225)
- [MapleNecrocer](entities/maplenecrocer.md) — MapleStory C# GM client emulator (64-bit; _Canvas WZ parsing / skeleton animation / particle systems / WZ region auto-detection; MapleStory Client Emulator / game:maplestory; gmh5225)
- [MapleStory GM Client](entities/maplestory-gm-client.md) — MapleStory GM/admin client (map editing / NPC spawn / item creation / GM commands; private-server administration; Offline MapleStory Client Emulator / game:maplestory; gmh5225)
- [MapleStory Server (HeavenMS)](entities/maplestory-server.md) — MapleStory private-server emulator (HeavenMS Server; player auth / character progression / quest / party / world simulation; HeavenMS Server / game:maplestory; gmh5225)
- [WzComparerR2](entities/wzcomparerr2.md) — MapleStory online WZ extractor/viewer (C#/Lua; rendering/graphics/networking; cheat / game:maplestory; gmh5225)
- [WinAltSyscallHandler](entities/win-alt-syscall-handler.md) — Windows kernel PoC exploring alternate system call handler mechanics (0xcpu; C; PsAltSystemCallHandlers registration limits, dispatch conditions, thread debug flags, trap-frame/process-info experiments; syscall interception stability research; AltSystemCallHandlers)
- [WinAPI MapleStory](entities/winapi-maplestory.md) — WinAPI MapleStory client (C/C++; rendering/animation/asset pipelines; Game Develop / source / game:maplestory; gmh5225)
- [MapleStoryEx](entities/maplestoryex.md) — MapleStory private server (CMS-079; custom content / server logic)
- [MapleEzorsia](entities/maple-ezorsia.md) — MapleStory v83 private server (Java; login/map/quest + custom resolution client; Private Server / game:maplestory)
- [Maple Fighters](entities/maple-fighters.md) — MapleStory-inspired online multiplayer game (real-time co-op monster combat; Game Develop / source; codingben)
- [mapleLemon](entities/maple-lemon.md) — MapleStory CMS-027 private server (Java/JavaScript; modding/debugging; Private Server-CMS-027 / game:maplestory)
- [mnwvs196](entities/mnwvs196.md) — MapleStory TMS-196 private-server research stack (C/C++; boost::asio / Poco·MySQL / WZ; WvsGame·WvsLogin·WvsCenter; Private Server-TMS-196 / game:maplestory)
- [ms079](entities/ms079.md) — MapleStory v079 private-server study codebase (Java / MySQL / WZ bundle; Private Server-CMS-079)
- [master-guide](entities/master-guide.md) — CS:GO five-part offensive-technique guide (csgohacks; cheat / guide)
- [MappedCallback](entities/mapped-callback.md) — hide kernel callback via APCI codecave JMP (cheat / Hide Callback)
- [MBA](entities/mba.md) — GPU-accelerated CUDA MBA expression simplification toolkit (SynthesisLab; multiple CUDA kernels; JSON I/O; cooperative groups; Cheat Mixed boolean-arithmetic)
- [mba-wasm](entities/mba-wasm.md) — Rust WebAssembly MBA expression toolkit (browser UI; obfuscation, linear congruence solving, permutation polynomial generation, expression simplification; MathJax; MBA-research; Cheat Mixed boolean-arithmetic)
- [MBA-Obfuscator](entities/mba-obfuscator.md) — non-linear MBA expressions (mba_obfuscator/ + samples/; Cheat Mixed boolean-arithmetic)
- [mbased](entities/mbased.md) — practical MBA simplification (bliutech; Cheat Mixed boolean-arithmetic)
- [mast-orchestrator](entities/mast-orchestrator.md) — Flask web dashboard for rooted Android Frida testing; ADB device/root checks, one-click frida-server deploy, SSL pinning/root/crypto hooks, remote script fetch, live output stream, token-auth API (GliTcHZzZ67; cheat / Frida)
- [moabille](entities/moabille.md) — All-in-one Python TUI mobile security toolkit; multi-device Android/iOS; dual-pane file transfer, scrcpy mirror, automated Frida + Objection setup; ADB/iproxy/ioscpy (jafarm189; cheat / Frida)
- [mcdota](entities/mcdota.md) — Linux Dota 2 cheat/tinkering framework (LWSS; C++; runtime injection; Panorama UI, ESP, protobuf packet intercept/edit; standard/stealth/integrated load modes; cheat / game:dota2 [linux])
- [mcp-gdb](entities/mcp-gdb.md) — GDB MCP server (breakpoints / memory / registers / step; AI debug)
- [mcp-safety-scanner](entities/mcp-safety-scanner.md) — automated MCP safety auditing + remediation via agents (Game Develop / MCP security)
- [mcp-server-idapro](entities/mcp-server-idapro.md) — MCP for IDA Pro (AI-assistant bridge to disassembler/debugger; Game Develop / MCP)
- [mcp-server](entities/mcp-server.md) — Burp Suite MCP extension (PortSwigger; MCP endpoint + stdio proxy; Kotlin/Java; AI-assisted appsec workflows; MCP for Burp Suite)
- [mcp-windbg](entities/mcp-windbg.md) — CDB/WinDbg MCP server (dump triage + remote debug; Python)
- [mcpup](entities/mcpup.md) — MCP server lifecycle manager (discover/install/configure/run; Unity AI-assisted dev; Game Develop / MCP for unity; gmh5225)
- [mcore-decompiler](entities/mcore-decompiler.md) — IDA Pro 9.4 Motorola M·CORE decompiler plugin; custom IR pipeline → structured C pseudocode with stack-frame and control-flow recovery; embedded firmware / feature-phone RE (Siesta; cheat / IDA Plugins)
- [mcrit-plugin](entities/mcrit-plugin.md) — IDA Pro plugin for MCRIT MinHash function similarity (upload samples, query matches, manage MCRIT server from disassembler)
- [mdc0](entities/mdc0.md) — Swift jailed-device iOS UI customization app (34306; iOS 15.0–18.3.2; exploit writes read-only system files; dock/blur/lockscreen tweaks; respring helper; CVE-2025-24203; cheat / iOS jailbreak)
- [gui-plugin-template](entities/gui-plugin-template.md) — Python cross-disassembler GUI plugin template (PyQt/PySide; IDA/Ghidra/Binary Ninja/Cutter; harmonized API; danielplohmann)
- [mkpms](entities/mkpms.md) — wxshadow KPM stealth breakpoint/hook (R^X page split; bypass self-read integrity; cheat / Android kernel explorer)
- [mkPIVM](entities/mk-pivm.md) — process-independent PIVM obfuscation engine (x86/x64→custom IR→polymorphic VM bytecode with encrypted handlers; PE dispatcher embed; arbitrary shellcode input; AC Obfuscation Engine `[VM]`; D7EAD)
- [MobileRE-Skill](entities/mobile-re-skill.md) — AI-agent mobile RE skill set (layered Frida hooks; six-phase anti-detection pipeline; JADX/Ghidra)
- [meowna_detector](entities/meowna-detector.md) — Android NDK PoC detector for meowna-class root-hide modules (missing logd socket + package-trace indicators; Rem01Gaming; Detection:Android root)
- [mqtt](entities/mqtt.md) — Chinese MQTT v3.1.1 OASIS spec (14 control packets; QoS; WebSocket; Game Network / mqtt)
- [MQTT.js](entities/mqtt-js.md) — Node.js/browser MQTT client (v3.1/3.1.1/v5; TCP/TLS/WS/WSS; Game Network / mqtt nodejs)
- [Paho MQTT C++](entities/paho-mqtt-cpp.md) — Eclipse C++ MQTT client (v3.1/3.1.1/v5; QoS 0–2; TLS; RAII; Game Network / mqtt cpp)
- [MemDetection](entities/memdetection.md) — Android anti-tampering demo; in-memory vs on-disk CRC of `libc.so`/`libart.so` (Java + Rust/JNI; Frida/Xposed/cloning detection; Mrack)
- [memdumper](entities/memdumper.md) — Android `.so` memory dump + ELF rebuild (no ptrace; `/proc/<pid>/mem`; 32/64-bit)
- [memdbg](entities/memdbg.md) — Android CE-style memory debugger (Vulkan+ImGui overlay, root engine, Lua 5.4, pointer scan, breakpoints, speedhack, trainer tables; aarch64 root/Termux ELF; dbcyyds)
- [memfilter-fn-driver](entities/memfilter-fn-driver.md) — minifilter stealth + MDL cross-process memory (Flt/Cm/Ob hide + handle VM-access strip; Filter Manager port comm; zensenzay; cheat / hide + RPM)
- [MemKernel](entities/memkernel.md) — Android kernel driver setup for process memory R/W (C/C++ kernel + userland; custom interface; kernel-build integration; Poko-Apps; RPM)
- [meme-rw](entities/meme-rw.md) — C++/CMake protected-process memory R/W PoC; vulnerable-driver mapping; driver-load + process/module utils; AC bypass / defensive research (SamuelTulach; cheat / kdmapper)
- [mempatch](entities/mempatch.md) — Android NDK memory tampering tool (C++; address handling, patching, snapshots, range tracking, value freeze; platform abstraction + test assets; vulnerability assessment / dev support; DeNA; cheat / Memory tampering tool)
- [mempeek](entities/mempeek.md) — Linux CLI live memory inspector (`/proc/pid/mem`; CE-style scan filters; libprocmem maps; rustyline REPL; cheat / Linux memory explorer)
- [MemScanner](entities/memscanner.md) — Windows x64 kernel memory layout scanner (`DRIVER_OBJECT`, LDR entries, section/file objects; WDK/VS C; Win7–Win10; kernel forensics / AC structure research; FaEryICE; README Memory scanner)
- [MemoryGuard](entities/memory-guard.md) — Windows memory-protection library (`PAGE_GUARD` / VEH / periodic integrity checks; alert or revert tampering; gmh5225; Anti Cheat → Page Protection) — Windows memory-protection library (`PAGE_GUARD` / VEH / periodic integrity checks; alert or revert tampering; gmh5225; Anti Cheat → Page Protection)
- [PointerGuard](entities/pointer-guard.md) — Windows PoC: HWBP or PAGE_GUARD protects function pointers / vtable entries against runtime tampering (charliewolfe; VEH + PAGE_GUARD)
- [Pointer Lab](entities/pointer-lab.md) — Windows x64 user-mode memory scanner/debugger (ImGui; pointer chains, disasm/patch, Lua scripting; RE/CTF practice; HeathHowren)
- [Polymorphic-Engine](entities/polymorphic-engine.md) — Nou4r C++ runtime polymorphic variable obfuscation (stack/heap transforms; primitives/strings; optional SIMD; LLVM/Clang-primary; experimental MSVC; software protection / anti-analysis; AC Encrypt Variable)
- [PolyEngine](entities/polyengine.md) — LongWayHomie polymorphic PE packer/crypter (junk code, instruction substitution, XTEA, RunPE process hollowing, stack spoofing, module stomping, Hell's Gate syscalls; CTF / Windows low-level security education; in-memory execution; Anti Cheat → Binary Packer)
- [PolarImGui](entities/polarimgui.md) — Android ImGui menu framework for Unity IL2CPP (C++ native + Android Studio; `.so` packaging for APK architectures; mobile mod-menu / cheat UI prototyping; Polarmods; Imgui On Android)
- [Self-Remapping Code](entities/self-remapping-code.md) — Windows PoC: aliased virtual mappings of same physical pages; execute one view, integrity-check another (changeofpace; anti-patching / anti-debug)
- [MemNixFS](entities/memnixfs.md) — Linux memory-dump filesystem (C++17; AVML/LiME/raw/kdump → `/proc`-like VFS; processes/files/sockets/modules/timelines; MemProcFS-style Linux forensics; Windows/Linux hosts; AC / IS forensics)
- [MemProcFS-Analyzer](entities/memprocfs-analyzer.md) — PowerShell MemProcFS forensic framework (processes/network/registry/event logs/browser/malware; HTML reports; VirusTotal TI; IS forensics)
- [Memory-Dump-UEFI](entities/memory-dump-uefi.md) — UEFI application for physical RAM dump from USB live-boot + UEFI shell (C; forensic acquisition / low-level security research; NoInitRD)
- [memory-relocalloc](entities/memory-relocalloc.md) — PE `.reloc`-backed allocation hiding (Windows/Android; evade AC heap/VAS memory scanners; gmh5225)
- [memory-server](entities/memory-server.md) — jailbroken iOS REST memory scanner (Rust HTTP port 3030; process enum/read/pattern scan; Python PC client; cheat / iOS memory explorer; gmh5225)
- [MemWars](entities/memwars.md) — Windows memory-analysis / process-manipulation C++ library (scan / pattern search / module enum / injection / memory edit; Testing Framework; gmh5225)
- [MMFCodeInjection](entities/mmf-code-injection.md) — User APC + memory-mapped file code injection (stealthy DLL load via shared file mapping; Injection Testing; gmh5225)
- [MMInject](entities/mminject.md) — kernel DLL injector via NX-bit swap + VAD hide (writable alloc; page-table execute; dynamic kernel data / I/O / loader; SDXT)
- [map-page](entities/map-page.md) — post-kdmapper mapped-driver memory trace reduction PoC; MmFreePagesFromMdl + pool cleanup; NtUserGetObjectInformation data-pointer comm (EBalloon; C++; driver-mapping stealth / AC bypass research; cheat / NtUserGetObjectInformation)
- [MmCopyMemory](entities/mm-copy-memory.md) — targeted MmCopyMemory scan-path bypass PoC; kernel AC memory-scan behavior; minimal C++ check-path patch; bypass + defensive inspection study (EBalloon; cheat / Bypass MmCopyMemory)
- [memcs](entities/memcs.md) — external CS:GO; modding / SDK generation (Rust; cheat / game:csgo; gmh5225)
- [memflow-kvm](entities/memflow-kvm.md) — memflow KVM connector (Linux kernel module; guest physmem → userspace; Rust bindings)
- [Manual Mapping DLL Injector](entities/manual-mapping-dll-injector.md) — Windows manual-map DLL injector (injector + loader; thread hijack / NtCreateThreadEx; import/reloc/TLS/exception; header wipe, PEB unlink, handle hijack; Manual Map; andrew9382)
- [MemJect](entities/memject.md) — minimal Windows manual-map DLL injector (embedded raw byte-array payload; VirtualAllocEx/WPM; optional PE header/entry erase; csgo.exe demo; danielkrupinski; Manual Map)
- [memmap](entities/memmap.md) — driver-assisted extend-manual-map framework (KGB-1337; C++; request-based KM↔UM R/W, alloc, protection, module queries; hijacked API-call-path execution; Extend Manual Map)
- [MemMCP](entities/memmcp.md) — Cheat Engine–like MCP server (Python; Game Develop / MCP)
- [MemTools](entities/memtools.md) — Windows/Linux DMA testing toolkit (C++/C; driver/plugin development + memory analysis; gmh5225; cheat / DMA)
- [MatScan](entities/matscan.md) — multi-threaded Facepunch Rust Unity material scanner (C++; IL2CPP + memory analysis; cheat / game:rust / game engine explorer:Unity; gmh5225)
- [Metal-Game-Engine-Tutorial](entities/metal-game-engine-tutorial.md) — Apple Metal engine tutorial (open project; Game Engine / guide)
- [L.-Spiro-Engine-2022](entities/l-spiro-engine-2022.md) — cross-platform modular C++ game engine (graphics, physics, sound, networking, math, memory, threading, models; Windows VS + macOS Xcode; DXT texture tools; stdlib abstraction; Game Engine / source)
- [MhsX](entities/mhsx.md) — 64-bit MHS successor (C++ Windows; expression/regex/string scans, hex editor, disasm, PE inspect, speedhack, floating-point studio; live process memory analysis; cheat / memory searcher-debugger)
- [melonJS](entities/melonjs.md) — modern lightweight HTML5 game engine (ES6 classes; esbuild bundling; Game Engine / HTML5)
- [meowsense](entities/meowsense.md) — free multi-game cheat research sample (Overwatch 2 focus; offensive techniques; gmh5225)
- [Milfuscator](entities/milfuscator.md) — x32 PE mutator (full rebuild; Zydis + AsmJit; AC Obfuscation Engine)
- [microavx](entities/microavx.md) — IDA Pro Hex-Rays AVX lifter (`m_ext`→microcode; AVX coverage scraper; cheat / IDA Plugins / AVX Lifter)
- [minecpp](entities/minecpp.md) — C++ Minecraft Java server backend (1.19; protocol/offensive-technique RE; gmh5225)
- [Minecraft Anticheat List](entities/minecraft-anticheat-list.md) — curated catalog + interactive site (Kotlin/JS Gradle; Java/Bedrock; Bukkit/Sponge/Fabric/Forge/Nukkit/PocketMine; platform/version/pricing/maintenance; GitHub/Spigot API enrichment; ManInMyVan; Anti Cheat / game:minecraft)
- [MLAntiCheat](entities/mlanticheat.md) — Paper **1.21.4+** combat AC (Java 21; per-server ML ensemble on aim/combat rotations; Shadow Mode; PacketEvents; operator labeling + retraining; gravemaulr; Anti Cheat / game:minecraft)
- [Minecraft Anti-Cheat (UltraAntiCheat)](entities/minecraft-anti-cheat.md) — Spigot/Paper **1.13+** AC plugin (Java 17+ Maven; 13 movement/combat/block/packet modules; GCD rotation analysis; physics simulation + confidence scoring; ProtocolLib; AC bridges; web dashboard; XuanXuan-ZhengGui; Anti Cheat / game:minecraft)
- [Minecraft AntiCheatAI](entities/minecraft-anticheatai.md) — DeepGuard Paper plugin (ONNX 1D-CNN scaffold detection; BehaviorRecorder + PyTorch training)
- [Model Anti-Cheat](entities/model-anti-cheat.md) — DayZ server-side ML AC (mission telemetry logging, feature extraction, RandomForest aimbot/movement anomaly detection)
- [mixed-boolean-transform](entities/mixed-boolean-transform.md) — source-to-source C++ MBA obfuscation (Z3-verified; Eigen3 + GMP; Cheat Mixed boolean-arithmetic)
- [mhynot2](entities/mhynot2.md) — Genshin Impact AC bypass research (experimental `mhyprot2` circumvention; khang06)
- [mhydeath](entities/mhydeath.md) — BYOVD via miHoYo `mhyprot2.sys` (Genshin Impact; arbitrary kernel R/W + process kill; gmh5225)
- [mhyprot2](entities/mhyprot2.md) — BYOVD via miHoYo `mhyprot2.sys` (Genshin Impact; IOCTL kernel R/W + process kill; gmh5225)
- [mhyprot2drvcontrol](entities/mhyprot2drvcontrol.md) — C++ control library for `mhyprot2.sys` BYOVD (process R/W, module enum, process kill; gmh5225)
- [mhxy](entities/mhxy.md) — MHXY (Fantasy Westward Journey) Python driver/modding scaffold (cheat / game:mhxy; gmh5225)
- [mhxy-kernel](entities/mhxy-kernel.md) — MHXY (Fantasy Westward Journey) kernel modding scaffold (C/C++; cheat / game:mhxy; gmh5225)
- [minidump](entities/minidump.md) — Python minidump (.dmp) parser (full/mini; LSASS; cross-platform)
- [Mini Anti-Cheat V2](entities/mini-anti-cheat-v2.md) — educational Windows kernel anti-cheat PoC (Abdelnour2; user-mode game + driver; process-creation notify blacklist + ObRegisterCallbacks memory shield; IOCTL game-PID/shield control; Anti Cheat)
- [MiniDumpWriteDumpPoC](entities/minidumpwritedumppoc.md) — C++ MiniDumpWriteDump hook PoC; intercept dump buffers in-memory; optional encrypt + socket exfil; Python decrypt receiver; credential-dump tradecraft / detection research (Adepts-Of-0xCC; Dump Memory)
- [miniDumpReader](entities/minidumpreader.md) — Python minidump / memory analysis (AC / Windows kernel dump)
- [minivers](entities/minivers.md) — pre-modification backup copies for monitored files (change/delete/rename; AC / backup-file)
- [minivm](entities/minivm.md) — small optimizing VM + JIT runtime (C11 + Cuik TB codegen; Lua tests/benchmarks; GNU Make; desktop + WASM; VM/compiler/runtime performance experimentation; FastVM)
- [Mjölnir (Mj-lnir)](entities/mj-lnir.md) — Windows self-hosted studio AC (C++ core + Rust agent/server; observe-only default; Tauri dashboard)
- [misc](entities/misc.md) — Genshin Impact Decode CFG (Rust/Python; RE / shader / rendering; khang06)
- [Minetest](entities/minetest.md) — Luanti voxel engine (Lua mod API; Irrlicht/SDL2; procedural worlds + multiplayer; Game Engine / source)
- [Mini-Launcher](entities/mini-launcher.md) — Steam-bypass game launcher (API stub / DLL inject / Lua; Launcher Abuser)
- [MiniVisorPkg](entities/minivisorpkg.md) — educational Intel VT-x HV (UEFI + Windows driver; WinDbg; Detection:HV / EFI)
- [Mir2](entities/mir2.md) — Legend of Mir 2 open-source client/server stack (Suprcode; C# client/server/launcher/admin tools + data utilities; modular managed architecture; private-server / preservation communities; Game Engine / source; README [MIR2])
- [Mir3-Zircon](entities/mir3-zircon.md) — Legend of Mir 3 open-source engine stack (Suprcode; C# client/server/launcher/editor; networking + content models + DirectX/SharpDX; private-server / custom content; Game Engine / source; README [MIR3])
- [MoBaDemo](entities/mobademo.md) — Unity MOBA demo (Game Develop / Unity source)
- [Mojoc](entities/mojoc.md) — C99 OpenGLES3 mobile game engine (cross-platform; Game Engine source)
- [Multiline Ultimate Assembler](entities/multiline-ultimate-assembler.md) — x64dbg/OllyDbg multiline assembler/disassembler plugin (m417z; Cheat x64dbg Plugins)
- [MultiplayerBlasterGame](entities/multiplayer-blaster-game.md) — UE5 multiplayer FPS Blaster (network replication / aim offsets / weapons; Game Develop / Unreal source)
- [MultiplayerCourseBlasterGame](entities/multiplayer-course-blaster-game.md) — UE5 C++ Blaster course sample (lag compensation / combat / Steam sessions / CTF; UE networking study; DruidMech; Game Develop / Unreal source)
- [Murder Engine](entities/murder.md) — C# MonoGame pixel-art 2D engine (ECS, Aseprite, dialogue editor; Game Engine / [pixel])
- [ModExMap](entities/modexmap.md) — user-mode PE manual-map DLL injector (x86/x64; TLS; Extend Manual Map)
- [ModFinder](entities/modfinder.md) — Windows C++ manual-map module finder (Nou4r; mapped-region DOS-header heuristics; x86 runtime AC/malware forensics; Mapped Dll)
- [modded-voyager](entities/modded-voyager.md) — Voyager-style UEFI hypervisor loader (NurdAlert; Intel/AMD VM-exit handlers + GPA/GVA primitives; hooks bootmgfw/winload + Hyper-V paths pre-OS; boot-time virtualization / AC bypass research)
- [modmap](entities/modmap.md) — kernel-assisted extend-manual-map DLL injector (MiAllocateVad + LDR SizeOfImage extension; blends with host module list; btbd; Extend Manual Map)
- [modly](entities/modly.md) — local image→3D mesh desktop app (open-source GPU AI; TypeScript/Python; Windows/Linux; AI category)
- [modreveal](entities/modreveal.md) — find hidden Linux kernel modules (C; Detection:Hide; AC / rootkit RE)
- [momentarius](entities/momentarius.md) — A12/A13 Apple PPL bypass via IOMobileFramebuffer GPU firmware (C; IOSurface physmem + kernel R/W; staturnzz and Clarity)
- [mordhau-simple-auto-block-cheat](entities/mordhau-simple-auto-block-cheat.md) — Mordhau internal melee automation (Skengdo; C++; auto-block/auto-stab; large generated UE SDK; injected combat module; cheat / game:mordhau [Internal])
- [moonwalk](entities/moonwalk.md) — Rust PEB-less DLL base discovery via TEB/stack walk (VirtualQuery or API-free variants; CLI + library; Teach2Breach)
- [morphida](entities/morphida.md) — CI polymorphic anti-detection Android arm64 frida-server builds; per-build upstream clone; randomized static fingerprints; NDK symbol strip; CI strings gate; adb helpers (1013503897)
- [MorphKatz](entities/morphkatz.md) — polymorphic mimikatz PE rewriter (Windows x64; disassembly, CFG analysis, instruction morphing, data-flow obfuscation; signature-evasion research; 0xMohammedHassan)
- [mojoelf](entities/mojoelf.md) — in-process ELF loader from non-filesystem sources (alternative to `dlopen()`; Cheat / Android memory loading)
- [Mount System Partition (brew02)](entities/mount-system-partition.md) — user-mode Windows API ESP mount (C++; partition enumeration; UEFI security / firmware RE)
- [MouHidInputHook (changeofpace)](entities/mouhid-input-hook.md) — MouHid CONNECT_DATA ClassService hook; filter/modify/inject mouse packets without filter devices (PatchGuard-safe; input simulation / AC research)
- [mouse-input-injection](entities/mouse-input-injection.md) — NtUserInjectMouseInput syscall utilities (Zpes C++ PoC + M3351AN header-only `mouse_event`-like wrappers; alternative to SendInput; automation / input-path research)
- [MouseDetection](entities/mousedetection.md) — Windows C++ PoC detecting software vs hardware mouse movement; behavior monitoring + simulated motion APIs for testing (Oliver-1-1; input validation research; README [Mouse])
- [MouseClassServiceCallbackMeme (ekknod)](entities/mouseclassservicecallbackmeme.md) — MouClass ServiceCallback meme variant (C; cheat / triggerbot & aimbot)
- [MouseClassServiceCallbackTrick (ekknod)](entities/mouseclassservicecallbacktrick.md) — MouClass ServiceCallback kernel mouse injection (C; cheat / triggerbot & aimbot)
- [MonoHook](entities/monohook.md) — Unity Mono/IL2CPP runtime C# method hooking (in-memory JIT/AOT patch; debug/stack-trace friendly; editor + device; instrumentation / RE / game security research; [mono hook])
- [MonoGame](entities/monogame.md) — cross-platform .NET 2D/3D game framework (C# + native; graphics/audio/content/input; desktop/mobile; Game Engine / [.NET])
- [Mono](entities/mono.md) — open-source .NET CLR (JIT/SGen/P/Invoke); Unity Mono scripting backend; game modding / RE target
- [mono-external-lib](entities/mono-external-lib.md) — external Unity/Mono metadata reader (classes/methods/fields; no inject; C++)
- [mutaben](entities/mutaben.md) — Python MBA (mixed-boolean-arithmetic) expression generator
- [mutante](entities/mutante.md) — Windows kernel HWID spoofer; disk serial / SMART / SMBIOS; hook-minimal WDK driver; archival SMBIOS/storage ID research (SamuelTulach; cheat / [HWID])
- [wmi-static-spoofer](entities/wmi-static-spoofer.md) — kernel-mode PoC for static WMI hardware-serial spoof via memory + registry patches; hook-minimal unload-after-apply; configurable offsets + randomized serials; HWID evasion research (Alex3434; cheat / HWID)
- [mwclap](entities/mwclap.md) — COD Warzone NVIDIA GeForce Experience overlay hijack (cheat / game:cod warzone)
- [MxEngine](entities/mxengine.md) — modern C++ OpenGL 3D engine (PBR, screen-space FX, ECS, editor; educational desktop 3D; Game Engine / source)
- [call-of-duty-vanguard-hack-esp-aimbot-unlock-all](entities/call-of-duty-vanguard-hack-esp-aimbot-unlock-all.md) — COD Vanguard/Warzone external: Win32 RPM + DirectX overlay; ESP / aimbot / unlock-all (gmh5225; cheat / game:cod vanguard [External])
- [call-of-duty-warzone-hack-esp-slient-aimbot-internal-unlock-all](entities/call-of-duty-warzone-hack-esp-slient-aimbot-internal-unlock-all.md) — COD Warzone external: C# Win32 RPM + overlay; ESP / silent aimbot / unlock-all (gmh5225; cheat / game:cod warzone [External])
- [call-of-duty-warzone-mw-hack-esp-aimbot](entities/call-of-duty-warzone-mw-hack-esp-aimbot.md) — COD Warzone/MW external cheat source (C++; Direct3D9 + ImGui overlay/menu; driver-backed memory reads + entity handling; ESP/aimbot RE practice; YMY1666527646; cheat / game:cod warzone [External])
- [modern-warfare-warzone-cheat](entities/modern-warfare-warzone-cheat.md) — COD Modern Warfare/Warzone internal: rendering / modding / hooking (C/C++; cheat / game:cod warzone; gmh5225)
- [modernwarfare2-cpp-external](entities/modernwarfare2-cpp-external.md) — COD MWII internal DLL: D3D11/12 Kiero Present hook + MinHook + ImGui; ESP / aimbot / no recoil; Battle.net + Steam offsets; lazy imports, XOR strings, direct syscalls (Ckateowm; cheat / game:cod mw2)
- [warzone-internal-cheat](entities/warzone-internal-cheat.md) — COD Warzone internal: rendering / modding / hooking (C/C++; cheat / game:cod warzone; gmh5225)
- [warzone-mw-internal](entities/warzone-mw-internal.md) — COD MW/Warzone internal framework: ESP / bone render / aimbot / recoil / FOV / UAV; C++ ImGui menu (SpiroHappy; outdated reference; cheat / game:cod warzone [Internal])
- [warzone-internal](entities/warzone-internal.md) — COD MW/Warzone internal DLL: DX12 present-hook + ImGui menu; ESP / aimbot / recoil control; C++ syscall stubs + game abstractions (NMan1; RE/cheat prototyping base; cheat / game:cod warzone [Internal])
- [mtasa-blue](entities/mtasa-blue.md) — MTA:SA GTA:SA multiplayer mod (C++/Lua; D3D/DInput hooks; CEF; built-in AC)
- [Mystic-xorstr](entities/mystic-xorstr.md) — C++17 header-only compile-time string/integer encrypt (SIMD decrypt; AC Compile Time)
- [Mydev Cheat Engine Tables](entities/mydev-cheat-engine-tables.md) — multi-game Cheat Engine `.CT` collection (pointer chains, script cheats, hotkeys; single-player modding; cheat / [Cheat Engine]; bbfox0703)
- [mvisor](entities/mvisor.md) — C++ remake (kernel/render/audio; Cheat QEMU/KVM/PVE/VBOX)
- [mypower](entities/mypower.md) — Android/Linux CLI memory scanner (SLJIT / pointer chains / Unity U3D)
- [mytechnotalent/Reverse-Engineering](entities/mytechnotalent-reverse-engineering.md) — free multi-arch RE tutorial (x86/x64/ARM/AVR/RISC-V; static+dynamic; cheat / guide)
- [Hacking-Windows](entities/hacking-windows.md) — C Windows RE/debugging guide (cheat / guide; mytechnotalent)
- [Go-Hacking](entities/go-hacking.md) — free Go/Golang RE course (PDF + Go source/IDA labs; x64/ARM64/ARM32; cheat / guide)
- [golang_loader_assist](entities/golang-loader-assist.md) — IDA Pro plugin: Go runtime metadata → function names, source refs, types on stripped Go PE (cheat / GO Reversed)
- [GoReSym](entities/goresym.md) — Mandiant Go symbol/type recovery (pclntab/moduledata; stripped PE → IDA)
- [Hacking-Rust](entities/hacking-rust.md) — free Rust RE course (PDF + Cargo labs; x64/ARM64/ARM32; cheat / guide)
- [Embedded-Hacking](entities/embedded-hacking.md) — free embedded firmware RE course (RP2350/Pico 2; weekly labs; GDB/Ghidra/OpenOCD; ARM Thumb FP patcher; IoT/hardware hacking; cheat / guide)
- [MoveCertificate](entities/move-certificate.md) — Magisk/KernelSU/APatch user→system CA module (Android 7–15)
- [Naraka-Hack](entities/naraka-hack.md) — NARAKA: BLADEPOINT external Unity IL2CPP cheat (C++; offset tables; entity/player RPM; NVIDIA overlay ESP; hotkey menu + combat assist; Rythorndoran; cheat-dev / runtime-structure RE)
- [NastyAlignment](entities/nasty-alignment.md) — Windows Instrumentation Callback PoC (alignment-check edge cases; STATUS_DATATYPE_MISALIGNMENT; asamy)
- [NativeNetSharp](entities/nativenetsharp.md) — C# code injection (managed/.NET; cheat / guide)
- [n0xis](entities/n0xis.md) — cross-platform Rust agent-native RE pipeline (static PE/ELF CFG/SSA decompilation + live memory scan, pointer paths, hooks, cheat tables; CLI + MCP JSON artifacts; Unity IL2CPP, Lua/LuaJIT; N0xHUD; LargoScript)
- [nCine](entities/ncine.md) — C++11 2D engine (optional Lua; MIT; Game Engine / source)
- [nathans-tarkov-radar-public](entities/nathans-tarkov-radar-public.md) — public EFT radar (Vmread external or DMA; secondary-display top-down player/scav/loot/extraction; Unity memory; cheat / game:eft [Vmread + Radar]; gmh5225)
- [nai64-patches](entities/nai64-patches.md) — curated Morphe Android APK patch catalog (~100 Kotlin/Gradle universal patches; ad removal, license/Play Integrity bypass, root/emulator hide, SSL pinning bypass, telemetry block, device/manifest spoof; mobile game RE / modding; Nai64)
- [native-predicate-solver](entities/native-predicate-solver.md) — Binary Ninja native opaque-predicate remover (C++; MLIL branch analysis; single-function/whole-binary; multithreaded; ScriptWare-Software; Cheat Binary Ninja Plugins)
- [nigusFN](entities/nigusfn.md) — Fortnite external cheat source (C++; nigusFN-style interface; DirectX 9 ImGui menu + driver/utility components; item defs + config headers; EAC-oriented tooling workflows; YMY1666527646; cheat / game:fortnite [External])
- [NineS](entities/nines.md) — PS5 ELF injector (TCP :9033; remote manual map + thread; section load/relocs; PlayStation process injection)
- [nb_obfuscator](entities/nb-obfuscator.md) — Win32/x64 PE obfuscation framework (Capstone/udis86; polymorphic stub/dead-code; PSC-Engine; AC Obfuscation Engine)
- [ndisapi](entities/ndisapi.md) — user-mode Windows Packet Filter / NDIS packet inspect-modify API
- [nebulite-external](entities/nebulite-external.md) — external CS:GO; memory analysis (C/C++; cheat / game:csgo; gmh5225)
- [negativespoofer](entities/negativespoofer.md) — boot-time Clover-style SMBIOS firmware-table spoof; C/EFI; pre-OS hardware identity / anti-cheat HWID research (SamuelTulach; cheat / [HWID])
- [NeacSafe-Analysis](entities/neacsafe-analysis.md) — NetEase NeacSafe minifilter IPC probe (`\NeacSafePort`, encoded buffers; Pediy writeup reproduction; explore anticheat; gmh5225)
- [Nemesis](entities/nemesis.md) — kernel-space process dump (cheat / windows kernel explorer)
- [Nebula](entities/nebula.md) — modular C++ game engine (fips build; Nebula-demo setup.bat; Game Engine / source)
- [NeoTTY](entities/neotty.md) — experimental Termux fork (Android terminal; full Linux system usage; cheat / Android Terminal Emulator; gmh5225)
- [NeoTerm](entities/neoterm.md) — modern Android terminal emulator (NeoTerrm; Java/Kotlin; Termux-oriented workflow; mobile shell usability; portable CLI for mobile security practitioners)
- [NEXUS](entities/nexus.md) — AtawurRahmanTanvir; root-required Kotlin/Compose Android utility; macro-execution via su into device-identity spoofing, build.prop/network/DNS reset, cache purge, Google telemetry cleanup; Ghost Module silent ops; live terminal console; device fingerprint evasion / anti-ban identity rotation; cheat / Android
- [netcrypt](entities/netcrypt.md) — C# .NET PE packer (encrypted/compressed managed assembly in CLR loader stub; SimplePacker GUI; Anti Cheat → Binary Packer / `.NET`)
- [netImgui](entities/netimgui.md) — Dear ImGui remote access (input + draw-command forward; engine/plugin UI)
- [neverc](entities/neverc.md) — AI-friendly C23 security compiler (custom LLVM backend; integrated linker; compile-time string encryption/hash + mimalloc; DynCode PIC runtime codegen; 130+ phase plugin API; PE/ELF/Mach-O; Windows/Linux/Android; NeverSight)
- [neverd](entities/neverd.md) — AI-friendly native binary analysis engine (Capstone→LLVM IR lift; structured C decomp; in-place rewrite; strict mode; `libneverd` C SDK; PE/ELF/Mach-O; JSON CLI; NeverSight)
- [nvidia-rtx-godot](entities/nvidia-rtx-godot.md) — NVIDIA RTX fork of Godot Engine (RTX rendering-server/editor/scene-tree optimizations; ray tracing; Game Engine / source)
- [mergen](entities/mergen.md) — binary lifting framework (assembly→LLVM IR; symbolic exec, CFG recovery, deobfuscation/devirtualization; C/C++; protected game-binary RE; NaC-L)
- [Netview](entities/netview.md) — AD domain host enumeration (`-d` current/specified domain; AC/IS forensics)
- [NetworkTimeSync](entities/network-time-sync.md) — UE plugin: accurate server world time sync for multiplayer clients (C++ subsystem; Blueprint-compatible; drop-in; reduces clock drift; Erlite; Plugins:Unreal)
- [NFD x64dbg](entities/nfdx64dbg.md) — x64dbg plugin: Nauz File Detector static scan tab (compiler/packer/protector ID; C++/Qt; Cheat x64dbg Plugins)
- [Nauz File Detector](entities/nauz-file-detector.md) — standalone NFD: signature-based packer/compiler/protector/linker ID for PE/ELF/Mach-O+; C++/Qt GUI+CLI; binary triage
- [NimicStack](entities/nimic-stack.md) — pure Nim call-stack spoofing (WithSecure Labs PoC lineage; mimic legitimate program stacks; Cheat Spoof Stack)
- [NightSkyEngine](entities/nightsky-engine.md) — open-source UE5 fighting-game framework (2D/2.5D; C++ modules/plugins; GGPO rollback; collision editor; WistfulHopes; Game Engine)
- [Nightshade](entities/nightshade.md) — Rust data-oriented game engine (custom ECS; wgpu PBR; native/web/VR; Game Engine / source)
- [NightOwl](entities/nightowl.md) — unified Android APK security CLI (framework/RASP detection; auto Frida bypass scripts; MASTG Semgrep)
- [NMMP](entities/nmmp.md) — Android DEX bytecode-to-native protector (Nativ Method Map Protector; JNI; Dex)
- [NSecSoft BYOVD](entities/nsecsoft-byovd.md) — ANYLNK; BYOVD process-termination PoC via **`NSecKrnl.sys`** (load vulnerable driver → privileged target-PID kill; real-world abuse framing + assigned CVE; kernel security / endpoint hardening research; README `[NSecKrnl.sys]`)
- [NonEuclidean](entities/non-euclidean.md) — Windows OpenGL non-Euclidean rendering demo engine (C++; custom room transitions, camera movement, experimental geometric rendering; graphics/engine experimentation; Game Engine / guide; HackerPoet)
- [Non-Newtonian New York](entities/non-newtonian-new-york.md) — Spider-Man Remastered non-Newtonian fluid/physics mod (urban destruction; [Mod])
- [NO_ACCESS_Protection](entities/no-access-protection.md) — PAGE_NOACCESS + VEH / single-step anti-tamper (vs external scanners)
- [no-access-protection-x86](entities/no-access-protection-x86.md) — x86 PAGE_NOACCESS page guards + VEH on-access decryption (anti-tamper / anti-dump)
- [NoBastian v2](entities/nobastian-v2.md) — C++ named-pipe client/server memory toolkit; handle inspection + elevated-handle acquisition; RPM/WPM/protect/alloc/module-base (ZoondEngine; Elevating Handle By LSASS)
- [NoCheatPlus](entities/nocheatplus.md) — open-source Bukkit/Spigot Minecraft AC plugin (Java Maven multi-module; movement/combat/block/inventory/chat/packet checks; cancel/log/setback; reflection internals + client-mod MOTD; broad version coverage; Anti Cheat / game:minecraft)
- [NoCheatZ-3](entities/nocheatz-3.md) — Source Engine serverside anti-cheat plugin (CS:S, CS:GO, CS:P, TF2; C/C++; plugin + SDK generation)
- [NoEye](entities/noeye.md) — BattlEye bypass toolkit (C++ service/runtime + C# setup; service install, process interaction, runtime control; historical BE bypass reference; Schnocker)
- [NoHello](entities/nohello.md) — Zygisk module hiding root and Zygisk artifacts (blacklist/whitelist + mount-rule unmount; Magisk/KernelSU/APatch; root-detection resistance research; MhmRdd; cheat / Zygisk module to hide root)
- [NoMercy](entities/no-mercy.md) — MIT OSS AC "gold standard" reference (mq1n fork; Open Source Anti Cheat System)
- [NoMoreBugCheck](entities/nomore-bugcheck.md) — NSG650; runtime kernel driver; KeBugCheckEx code patch + restore logic suppresses standard BSOD path (kernel-hooking / crash-safety bypass experiment)
- [NoMoreBugCheck Reloaded](entities/nomore-bugcheck-reloaded.md) — NSG650; UEFI no-BSOD PoC (EFI loader patches kernel during boot; export lookup + pattern search + memory overwrite; moves bugcheck interception from runtime driver to firmware stage; early boot patching research)
- [NoahGameFrame](entities/noahgameframe.md) — C++ server engine (OGRE/BigWorld-inspired; Game Network / Server Engine)
- [Nomad](entities/nomad.md) — kernel AC-style mapped-driver detector (thread stack walk, entry-point validation, big-pool abnormal refs, IOCTL hook signals; C++ WDK; Rwkeith; README Mapped Driver)
- [Nocturne](entities/nocturne.md) — bin2bin x86-64 PE code virtualizer (SDK markers / VM handlers / junk; AC Obfuscation Engine)
- [NocturneLdr](entities/nocturneldr.md) — CET-compatible Win x64 shellcode loader (fully backed stacks; Spoof Stack)
- [Norsefire](entities/norsefire.md) — kernel-mode W/RPM + mouse_event (C++; cheat / RPM)
- [note](entities/note.md) — Chinese Android File Explorer guide (Guide-zh; Cheat Android File Explorer)
- [notify-routine-hijack-thread](entities/notify-routine-hijack-thread.md) — kernel PoC hijacking `PspCreateThreadNotifyRoutine` via dedicated thread (UCFoxi; C++; anti-cheat / EDR callback evasion research; README [Hijack PspCreateThreadNotifyRoutine])
- [NoVmp](entities/novmp.md) — static VMProtect x64 3.x devirtualizer (VTIL lift; can1357; Fix VMP)
- [NoVmpy](entities/novmpy.md) — Python VMProtect deobf (symbolic exec / Triton; Fix VMP)
- [Nodejs Tracer](entities/nodejs-tracer.md) — Node.js runtime core-module tracer (CheckPointSW; preload instrumentation; log API calls, spoof anti-analysis checks, preserve dropped files; obfuscated Node.js malware / dynamic JS RE)
- [NotAnOverlay](entities/not-an-overlay.md) — Windows GDI PoC: regular-window screen clone vs transparent always-on-top overlay; BitBlt/StretchBlt; external ESP rendering / AC overlay-visibility tradeoffs (PierreCiholas; [Duplicating with GDI])
- [Npcap](entities/npcap.md) — Windows packet capture/inject (Nmap; WinPcap successor; Packet Capture&Parse)
- [NvidiaApi](entities/nvidiaapi.md) — undocumented NvAPI GPU serial / board fingerprint (HWID research)
- [nvidia-capture](entities/nvidia-capture.md) — NVIDIA GPU scanout capture PoC (TheCruZ; C++; D3D11 + DXGI + NVAPI; `NvAPI_D3D11_WksReadScanout`; below usermode hook evasion; PNG export; README `[NVIDIA Scanout]`; Anti Cheat → Screenshot)
- [Nvidia-GPU-Spoof](entities/nvidia-gpu-spoof.md) — NVIDIA GPU UUID spoof via `nvlddmkm.sys` (Cheat HWID)
- [NVIDIA Overlay](entities/nvidia-overlay.md) — GeForce Experience overlay DirectX hijack (trusted-process rendering; anti-cheat overlay evasion; gmh5225)
- [nvidia-overlay-hijack](entities/nvidia-overlay-hijack.md) — GeForce Experience overlay render-context hijack (DirectX 11 + ImGui menu; helper draw/animation/input; x86/x64; practical integration—not stealth; AC detection risk; Calvin-LLC; README [Hijack Nvidia])
- [nvidia-overlay-renderer](entities/nvidia-overlay-renderer.md) — GeForce Experience overlay ImGui/ESP renderer (trusted overlay surface hijack; no new overlay HWNDs; es3n1n; README [Nvidia])
- [nvdrv](entities/nvdrv.md) — NVIDIA kernel-driver physmem BYOVD library (IOCTL → physical R/W; driver map / kernel patch / AC bypass; nvaudio.sys; gmh5225)
- [nv-graphics-mesa](entities/nv-graphics-mesa.md) — read-only Mesa 3D mirror (OpenGL/Vulkan reference implementation; 3D Graphics; gmh5225)
- [G37OBS (ekknod)](entities/g37obs.md) — CS:GO OBS Studio Lua plugin (plugin development; capture-based cheat / game:csgo research)
- [nv-v2 (ekknod)](entities/nv-v2.md) — CS:GO sound ESP (C/C++; hooking; audio-derived positional awareness; cheat / game:csgo [Sound ESP])
- [Nmi (ekknod)](entities/nmi.md) — block NMI interrupts (C/C++; cheat / windows kernel explorer; README [Blocking NMI interrupts])
- [NMI Callback](entities/nmi-callback.md) — C/C++ kernel NMI callback driver research (Detection: Hacked Hypervisor)
- [NMI Callback Handler](entities/nmi-callback-handler.md) — Windows kernel driver; NMI callback interrupted-RIP stack walk for mapped-driver detection (donnaskiez; README Mapped Driver by NMI Callback)
- [NMI Stack Walk](entities/nmi-stack-walk.md) — Windows kernel PoC; NMI callback stack backtrace on selected CPUs for hidden no-module mapped-driver detection (1401199262; README Mapped Driver by NMI Callback)
- [NMICallbackBlocker2](entities/nmi-callback-blocker2.md) — C++ kernel PoC to disable NMI callbacks (cheat / windows kernel explorer; gmh5225)
- [NMI EnumNmiCallback](entities/nmi-enum-nmi-callback.md) — C/C++ kernel PoC to enumerate registered NMI callbacks (cheat / windows kernel explorer; gmh5225)
- [NMI nmi_callback](entities/nmi-nmi-callback.md) — Windows kernel PoC to register/trigger NMI callbacks and inspect thread contexts (BattlEye-style detection study; gmh5225)
- [nohv](entities/nohv.md) — C/C++ hypervisor VM-detection benchmark suite (kernel driver; Detection: Hacked Hypervisor)
- [noimportz](entities/noimportz.md) — C++17 kernel zero-IAT header; LSTAR→ntoskrnl walk + PsLoadedModuleList PE export resolve; template variadic calls + hash-map cache; sample KMDF driver; import-table evasion (Th3Spl; Anti Cheat / Lazy Importer)
- [nokd](entities/nokd.md) — stealth kernel debugger protocol (local KdDebuggerDataBlock decode → WinDbg; no ntoskrnl KD globals)
- [NoTruth (KelvinMsft)](entities/notruth.md) — VT-x/EPT user-mode memory deception; redirect reads to fake values while controlling execution; checksum/integrity bypass research; README Hide Memory By VT
- [NovaHypervisor (Idov31)](entities/novahypervisor.md) — Defensive x64 Intel host hypervisor; kernel memory R/W/X policies; BYOVD mitigation; Windows driver + client + logging; anti-cheat / endpoint defense research
- [NtCall64](entities/ntcall64.md) — hfiref0x; Windows NT x64 syscall fuzzer for ntoskrnl and optional win32k Shadow SSDT on Win7+; randomized parameters, INI blacklists, per-syscall pass counts, LocalSystem elevation; kernel stability/vulnerability research; Anti Cheat / Driver Unit Test Framework
- [NtCompareSigningLevel-hook](entities/ntcomparesigninglevel-hook.md) — ExpLife0011; C/C++ kernel driver + usermode; `NtCompareSigningLevels` function-pointer swap for covert KM↔UM comm; abandoned (PatchGuard); README [NtCompareSigningLevels]
- [NTFS-EFI](entities/ntfs-efi.md) — native UEFI x64 NTFS R/W driver (EfiNtfs; EFI Commander pre-boot FM; chkdsk-clean unmount)
- [ntfs-journal-viewer](entities/ntfs-journal-viewer.md) — NTFS `$UsnJrnl` change-journal viewer (C; AC / IS forensics)
- [ntfs-linker](entities/ntfs-linker.md) — NTFS $MFT/$UsnJrnl/$LogFile timeline correlator (C++; DFIR)
- [ntfs-parse](entities/ntfs-parse.md) — Python NTFS forensic parser suite (MFT/$LogFile/$UsnJrnl; CLI export/transaction/timeline; CSV/text; DFIR)
- [NTFSTool](entities/ntfstool.md) — NTFS forensics (MFT/USN/BitLocker/EFS; AC / IS forensics)
- [NTMemory](entities/ntmemory.md) — kernel cross-process R/W (MDL / CR3 walk / physical translate)
- [ntkernelwalkerlib](entities/ntkernelwalkerlib.md) — user-mode ntoskrnl symbol/struct offset + ROP gadget library (dbghelp + section scan)
- [ntminhook](entities/ntminhook.md) — NTDLL-only MinHook fork (Native API; asset pipelines / modding / hooking; gmh5225)
- [nt_unhooker](entities/nt-unhooker.md) — Rust NTDLL inline/IAT hook detect + restore (clean reference PE; CLI + library; Teach2Breach)
- [ntqueueapcthreadex-ntdll-gadget-injection](entities/ntqueueapcthreadex-ntdll-gadget-injection.md) — C PoC; NtQueueApcThreadEx + random ntdll pop/ret gadgets for module-backed APC routine pointers; documents detection vectors (LloydLabs; stealth APC inject / AC·EDR telemetry evaluation)
- [NtDOOM](entities/ntdoom.md) — NSG650; Windows kernel DOOM port (PureDOOM in driver context; win32k syscalls + thread context spoofing + kernel graphics/input; extreme NT GUI/syscall research demo; README Doom running in the NT kernel)
- [ntoseye](entities/ntoseye.md) — Linux-host KVM/QEMU WinDbg-style Windows kernel debugger (GDB stub; PDB symbols; breakpoints; Kernel Debugger)
- [ntoskrnl-file-collection](entities/ntoskrnl-file-collection.md) — multi-build ntoskrnl binary corpus (version diff / kernel RE reference)
- [ntoskrnl-viewer](entities/ntoskrnl-viewer.md) — Windows kernel memory viewer; custom driver + UM client; WinDbg-like db/dw/dd/dq/d/x; symbol/address reads incl. unexported kernel symbols (IcEy-999; x64)
- [ntoskrnlwalker](entities/ntoskrnlwalker.md) — ntoskrnl offset/gadget/symbol resolver (target-build kernel structure navigation)
- [NtRays](entities/ntrays.md) — IDA Pro Hex-Rays plugin: NT kernel type/structure enrichment (NTSTATUS, IOCTL, object types, EPROCESS/ETHREAD; Windows Kernel Enhance; gmh5225)
- [NTSleuth](entities/ntsleuth.md) — Windows syscall extractor (ntdll/win32u PDB + disasm → JSON/C headers)
- [NtLua](entities/ntlua.md) — Lua 5.4 interpreter embedded in WDK kernel driver (UM script dispatch; phys/virt memory, process enum, MSR R/W; can1357)
- [NtPhp](entities/ntphp.md) — PHP interpreter embedded in WDK kernel drivers (Anti Cheat → Dynamic Script)
- [NlsCodeInjectionThroughRegistry](entities/nls-code-injection-through-registry.md) — NLS registry code-page redirection for early DLL load / persistence (injection research; gmh5225)
- [NtUserInjectMouseInput-syscall](entities/ntuserinjectmouseinput-syscall.md) — win32k NtUserInjectMouseInput syscall path (user-mode mouse injection; triggerbot/aimbot primitives; gmh5225)
- [NtUserUpdateWindowTrackingInfo](entities/ntuserupdatewindowtrackinginfo.md) — win32k NtUserUpdateWindowTrackingInfo syscall-path covert KM↔UM comm framework (memory R/W, pattern scan, allocation, pointer swap; D3DXVECTOR2; cheat / AC evasion research)
- [nullmap](entities/nullmap.md) — Windows driver mapper with post-map trace cleanup (header zero, pool unlink; Afd.sys; gmh5225)
- [NullBase](entities/nullbase.md) — simple C++ game-hack base for beginners (NullTerminatorr; memory helpers, entity/local-player abstractions, math + W2S; Visual Studio layout; teaches cheat framework structure)
- [NullHook](entities/nullhook.md) — tutorial split driver+client kernel cheat sample (NullTerminatorr; C/C++ memory/hook workflows; external manual-map load; educational kernel-assisted cheat development; NtDxgkGetTrackedWorkloadStatistics)
- [NullHooks](entities/nullhooks.md) — learning-focused inactive internal CS:GO cheat (C++; modular gameplay features, config presets, internal-cheat utilities; educational game-hacking architecture study; Internal tag)
- [NullDriverCheat](entities/nulldriver-cheat.md) — Win11 Null-pattern dxgkrnl export hook (`NtOpenCompositionSurfaceSectionInfo`; covert KM↔UM R/W + GDI helpers; gmh5225)
- [nstool](entities/nstool.md) — general-purpose Switch read/extract tool (console emulator / Switch research)
- [XCI Explorer](entities/xci-explorer.md) — Windows Switch XCI/NSP package inspector (C# WinForms; XCI/NCA/HFS0/PFS0; metadata, extract, hash, cert edit; Switch modding / cartridge RE; StudentBlake)
- [NuremX](entities/nuremx.md) — Apex Legends Python YOLOv5 screen-capture cheat (enemy detection, overlay, aiming; trained weights; Windows/Linux; no memory hooking; cheat / [AI]; Zurek0x)
- [nuzu](entities/nuzu.md) — yuzu-based Switch emulator mirror (unofficial fork; Nintendo Switch lane)
- [OpenSw](entities/opensw.md) — Android ARM64 Switch emulator (Eden/yuzu lineage; dynarmic JIT; Vulkan/OpenGL; build-ID-aware Atmosphere/Eden cheat import; dmnt-style cheat engine; per-game profiles; Cockpit panel; Profile build automation bridge; RemiPelloux)
- [nzPerspective](entities/nz-perspective.md) — D3D9 hooking sample (C/C++; cheat / game:tgame; gmh5225)
- [OAC](entities/oac.md) — Open Anti-Cheat demand-start framework (x64 kernel driver + user-mode client; ObCallbacks handle filtering, cross-view integrity checks, PiDDB/MmUnloadedDrivers forensics; lauralex)
- [OFRP-device_xiaomi_mondrian](entities/ofrp-device-xiaomi-mondrian.md) — OFRP/TWRP device tree for Redmi K60 Pro (mondrian)
- [Obfu-DE-Scate](entities/obfu-de-scate.md) — Python APK ProGuard/R8 deobf (name maps + HTML hierarchy; [Apk])
- [Obfuz](entities/obfuz.md) — open-source Unity C# code obfuscation and protection (commercial game projects; Game Engine Protection:Unity)
- [Unity3D Obfuscator](entities/unity3d-obfuscator.md) — C# Unity obfuscator (Unity/debugging-oriented managed protection; Game Engine Protection:Unity; bmjoy)
- [obfCoder](entities/obfcoder.md) — C++ source/binary obfuscation tool (CMake / OpenSSL demos; AC Obfuscation Engine)
- [obfstr](entities/obfstr.md) — Rust compile-time string obfuscation (`obfstr!`/`obfcstr!`/`obfbytes!`/`wide!`/`random!`; local runtime decode; reproducible build-time randomness; AC String Crypter; CasualX)
- [Obfuscar](entities/obfuscar.md) — open-source .NET assembly obfuscator (rename/string hide; AC Obfuscation Engine)
- [Obfuscapk](entities/obfuscapk.md) — modular Python black-box Android APK obfuscator (ClaudiuGeorgiu; apktool decompile; smali/resources/manifest passes; rebuild; multiple obfuscators; early AAB support; mobile RE / anti-RE resilience evaluation; `[Android]`)
- [obfuscation-analysis](entities/obfuscation-analysis.md) — Binary Ninja obfuscation analyze/simplify (MBA msynth / opaque-predicate dataflow / Z3 BNIL verify; Cheat Binary Ninja Plugins)
- [obfuscation-detection](entities/obfuscation-detection.md) — Binary Ninja obfuscated-region heuristics (CFF / insn complexity / n-gram BB DB; batch scripts; Cheat Binary Ninja Plugins)
- [ObfuscationMethods](entities/obfuscation-methods.md) — C#/dnlib .NET obfuscation technique demos (CFF / anti-dump / anti-de4dot; AC Obfuscation Engine)
- [obfuscator](entities/obfuscator.md) — x64 PE multi-pass bin2bin obfuscator (CFF / junk / insn mutation / import obfuscation / anti-disasm; es3n1n; AC Obfuscation Engine)
- [obfus.h](entities/obfus-h.md) — macro-only C compile-time obfuscation header (DosX-dev; TCC Windows x86/x64; call obfuscation, CFF mutation, string hiding, anti-debug, anti-decompilation, fake signatures, optional virtualized math; preprocessor flags; AC Obfuscation Engine / Compile Time)
- [obfusheader.h](entities/obfusheader-h.md) — header-only C++14 portable compile-time obfuscation (string/constant encryption, import/call hiding, control-flow mutation, anti-decompiler; Windows/Unix; AC Obfuscation Engine; ac3ss0r)
- [Obfuscate](entities/obfuscate.md) — header-only C++14 compile-time string literal obfuscation (constexpr encrypt + randomized keys; macro API; runtime decrypt; AC String Crypter; adamyaxley)
- [obfuscatxor](entities/obfuscatxor.md) — Go string crypter (encrypted string vars; AC Compile Time / String Crypter)
- [obfuscxx](entities/obfuscxx.md) — C++20 header-only compile-time variable obfuscation (SIMD decrypt; AC Encrypt Variable)
- [Obfusk8](entities/obfusk8.md) — C++17 compile-time/runtime obfuscation library (AC Compile Time)
- [obengine](entities/obengine.md) — open-source 2D Lua+C++ game engine (SFML; scene/game-object/map/animation/input/networking/plugins; scriptable APIs; Game Engine / [2D+Lua])
- [obj2shellcode](entities/obj2shellcode.md) — C++ object-to-shellcode generation framework (AC shellcode engine & tricks)
- [obpo-plugin](entities/obpo-plugin.md) — IDA client + Go OBPO backend (closed core; open plugin; Fix OLLVM)
- [official-plugins](entities/official-plugins.md) — Vector35 curated official Binary Ninja plugin index (Python indexing; structured metadata for descriptions, types, API targets, licenses; plugin-management catalog)
- [ollvm-unflattener](entities/ollvm-unflattener.md) — Python OLLVM CFF deobfuscator (Miasm symbolic exec; BFS call following; Win/Linux x86/x64 binary output; cdong1012 + JbvrgtonYT fork with graph viz/samples; Fix OLLVM)
- [obs-graphics-hook32-hook](entities/obs-graphics-hook32-hook.md) — gmh5225 32-bit OBS graphics-hook pointer-replacement sample (Game Capture inject hijack; cheat/overlay research; README [OBS Hook])
- [obs-hook](entities/obs-hook.md) — gmh5225 OBS Game Capture hook DLL hijack for in-frame custom overlays via OBS trusted pipeline (no overlay HWND; AC whitelist research; README [OBS Hook])
- [Obscura](entities/obscura.md) — LLVM pass-plugin obfuscator (C/C++/ObjC/Swift; 13 passes; Darwin-strong; AC Obfuscation Engine)
- [OcarinaCTRComposer](entities/ocarina-ctr-composer.md) — OoT3D Luma3DS .3gx cheat/tools overlay (on CTRComposer; search/hex/RAM dump)
- [OfflineCrashDumpUefi](entities/offline-crash-dump-uefi.md) — Microsoft EDK2 Offline Crash Dump package (firmware pre-OS memory dump; DXE writer; encryption/redaction; gmh5225)
- [One-Click Run Source Server](entities/one-click-run-source-server.md) — Linux one-click shell script for Source engine dedicated servers (Debian/Ubuntu/CentOS env checks, SteamCMD, game server download, Sourcemod/Metamod install, troubleshooting; community server deployment; 2601677867; Server for Source Engine)
- [onlooker](entities/onlooker.md) — Windows process-tree memory profiler (DenuvoSoftwareSolutions; C++/CMake/Qt; time-like stats + GUI trace viewer + JSON export; memory growth/OOM/regression diagnosis)
- [PixelOS manifest](entities/manifest.md) — PixelOS-AOSP repo manifest (XML manifests + snippets; repo init/sync and ROM build docs; revision-locked upstream project selection; cheat / Android ROM)
- [PixelOS official_devices](entities/official-devices.md) — PixelOS-AOSP metadata repo (Markdown/JSON device lists, API data, changelog notes, release templates; authoritative support matrix; cheat / PixelOS device trees)
- [offsets](entities/offsets.md) — C++ CS:GO offset dump (`[Offset]`; cheat / game:csgo)
- [ohack](entities/ohack.md) — open-source WoW hack (fail46; C++; memory analysis; cheat / game:wow)
- [OffsetStreaming](entities/offset-streaming.md) — simple C/C++ program to stream game offsets to cheat clients (Some Tricks / Windows Ring3; gmh5225)
- [Olive.c](entities/olive-c.md) — single-header C 2D soft-raster (lines/tris/circles/text; Image Codec)
- [OMath](entities/omath.md) — C++23 constexpr math/physics (W2S / projectile / GJK; Mathematics)
- [omega-sast](entities/omega-sast.md) — Zero-dependency JavaScript SAST engine (Node.js OMEGA-5.0; obfuscator fingerprinting, string deobfuscation, inter-procedural taint; minified bundle + game/AC web-asset RE; HTML/JSON/Markdown/SARIF)
- [OmegaWare Framework](entities/omegaware-framework.md) — multi-engine internal cheat framework (Unity/Unreal/generic DirectX; D3D11/D3D12 hooking; ImGui UI; feature plugins; JSON config; Omega172)
- [Omikron TNS OMK Engine](entities/omikron-tns-omk-engine.md) — from-scratch C++20 Omikron: The Nomad Soul (1999) engine reimplementation; 153-opcode script VM + 8192-byte game state + asset format docs; Python announcement-trace verification; optional SDL/Vulkan; user-supplied retail data (sosso33; Cheat / RE Tools)
- [OmniClutch](entities/omniclutch.md) — Fabric Minecraft 1.21+ automated fall/elytra clutch mod (raycast impact detection; hotbar item selection; Gaussian delays + camera interpolation; WeiNaYongQ; cheat / game:minecraft)
- [oob_entry](entities/oob-entry.md) — iOS 3.0–10.3.4 tfp0 kernel exploit (C/C++; cheat / iOS jailbreak)
- [Oomph](entities/oomph.md) — Minecraft Bedrock MiTM AC proxy (Go; server-auth movement/combat; Dragonfly/PocketMine)
- [OxClient](entities/oxclient.md) — Android Minecraft Bedrock MITM cheat client (Kotlin; local packet relay; CloudburstMC codecs; combat/movement/ESP modules; adanainv3-creator)
- [opaque-predicate-patcher](entities/opaque-predicate-patcher.md) — Binary Ninja opaque-predicate remover (Vector35; Python; MLIL branch analysis; iterative branch patching)
- [opaque-predicates-detective](entities/opaque-predicates-detective.md) — Binary Ninja opaque-predicate detection (invariant / BB-local)
- [op7t](entities/op7t.md) — DIY Android kernel (cheat / Android kernel explorer)
- [ovo](entities/ovo.md) — Android ARM64 kernel driver module (process R/W, mmuhack, touch simulation, kernel TCP IPC; C++/Rust SDKs; cheat / Android kernel driver)
- [opainject](entities/opainject.md) — iOS/macOS runtime dylib inject (task_for_pid / Mach; jailbreak + tfp0)
- [open.mp-anticheat](entities/open.mp-anticheat.md) — open.mp/SA-MP server AC (client self-memory sigs + RakNet; C++)
- [open-source-engines](entities/open-source-engines.md) — curated open-source game engine index (raylib and peers; Game Engine / guide)
- [open-source-games](entities/open-source-games.md) — open-source game index (Commander Keen, Cosmo's Cosmic; classic OSS titles; Game Develop Guide)
- [openfpga-gbc-cheats-ui](entities/openfpga-gbc-cheats-ui.md) — Pocket Cheat Picker; Analogue Pocket GB/GBC openFPGA `.cht` deploy (Python/tkinter; libretro DB; Game Genie/GameShark; CPU-read vs RAM-write flags; openfpga-GBC-cheats parser; Game Boy)
- [OpenGraphic](entities/opengraphic.md) — curated OSS graphics and game engine resource index (Gforcex; engines, rendering techniques, optimization, tools, tutorials; Graphic Engine & Game Engine lists)
- [open-reverselab](entities/open-reverselab.md) — agent-native RE lab (180+ technique articles, 100+ MCP tools; knowledge router; Ghidra/Frida/x64dbg/jadx; web CTF, APK/DEX, PE, crypto, game cheating/AC boards; LING71671)
- [openarena-engine](entities/openarena-engine.md) — OpenArena ioquake3 fork (Quake III renderer/audio/networking/runtime; make-based multi-platform C/C++; classic FPS multiplayer engine study; Game Engine / source [quake3])
- [openbarnyard](entities/openbarnyard.md) — WIP Barnyard + TOSHI 2.0 C++ reimplementation (DirectX 8/OpenGL; Premake; RE progress vs binary addresses; Detours SDK hooks, mod loading, ImGui debug; Ghidra RE workflow; Game Engine / source)
- [openrct2](entities/openrct2.md) — open-source RollerCoaster Tycoon 2 reimplementation (cooperative multiplayer, expanded editing, scripting/plugins; CMake C++; broad platform support; Game Engine / source)
- [opengl-3d-game-tutorial-series](entities/opengl-3d-game-tutorial-series.md) — cross-platform C++ OpenGL 3D game tutorial (Win32/Cocoa/X11; VAO/shaders/UBO; entity management + input; step-by-step engine build; README [OpenGL]; PardCode)
- [Object Explorer](entities/object-explorer.md) — GUI Object Manager namespace/handles/types browser (driver + PDB/DIA decode)
- [OpenArk](entities/openark.md) — Qt anti-rootkit / kernel analysis (callbacks, SSDT, drivers)
- [OpenClaw](entities/openclaw.md) — C++ Captain Claw reimplementation (Box2D; CMake/Android; Game Develop / source)
- [OpenEDR](entities/openedr.md) — open-source EDR platform (Comodo Security; C++; system monitoring, event collection, threat detection, AWS cloud analysis; real-time Windows endpoint telemetry/response; README [EDR])
- [OpenGame](entities/opengame.md) — agentic web-game testing/debug framework (Game Skill; GameCoder-27B; OpenGame-Bench; Game Testing)
- [OpenHardwareMonitor](entities/openhardwaremonitor.md) — OSS hardware monitor (C#/JS; sensors/drivers; Detection:HWID)
- [openhardwaremonitor-poc](entities/openhardwaremonitor-poc.md) — OpenHardwareMonitorLib.sys MSR IOCTL PoC (0x9C402084/0x9C402088 → arbitrary MSR R/W; hardware-monitoring BYOVD; gmh5225)
- [OpenCV Smart Aimbot](entities/opencv-smart-aimbot.md) — OpenCV + triggerbot (C++; classical CV; cheat / triggerbot & aimbot; gmh5225)
- [OpenLumina](entities/openlumina.md) — IDA plugin for third-party Lumina servers (Hex-Rays `.crt`; IDA Plugins)
- [OpenPetya](entities/openpetya.md) — educational Petya-inspired MBR bootkit (NTFS MFT Salsa20; Real→Protected Mode; Assembly/C/C++)
- [OpenProcmon](entities/openprocmon.md) — OSS Procmon-style monitor (ETW + minifilter; process/file/registry/network/DLL)
- [Ophion](entities/ophion.md) — stealth Intel VT-x Type-2 HV (EPT; CPUID/CR4/TSC anti-detect)
- [Optick](entities/optick.md) — C++ game performance profiler (in-game SDK + WPF viewer; CPU/GPU D3D12/Vulkan timing, ETW threads/context switches; UE4/5/Unity; flame graphs; Game Testing)
- [Optimization Bible](entities/optimization-bible.md) — Unity/Unreal optimization reference (GameDevGrzesiek; performance profiling, console hardware vs PC equivalents, rendering pipeline tuning, engine tooling guides; Game Engine / guide)
- [overflow-r6-v2](entities/overflow-r6-v2.md) — R6 v2 external: inline kernel function hook bypass + user-mode menu/rendering; aimbot/chams/rapid fire/recoil/spread/speed/FOV (NMan1; kernel-assisted cheat architecture RE; cheat / game:r6 [External])
- [overflow-rust](entities/overflow-rust.md) — Facepunch Rust external: kernel driver + user-mode client; kernel call-chain hook bypass + shared-memory comm; ESP/recoil/automation + gameplay mods (NMan1; kernel hook + overlay RE; cheat / game:rust [External])
- [overload](entities/overload.md) — open-source C++ 3D engine + integrated editor (Lua scripting; render/physics/audio/profiling/material tooling; Game Engine / source)
- [Orkige](entities/orkige.md) — C++20 OGRE/Ogre-Next engine (Lua hot-reload; ImGui; desktop/mobile/Wasm; Game Engine)
- [Orbit](entities/orbit.md) — Google C++ native profiler (dynamic runtime instrumentation; call graphs / threads / memory; Linux remote + Windows UI; Game Testing)
- [Origami](entities/origami.md) — .NET assembly packer (compressed payload in PE debug directory or `.origami` section; RelocLoader; PE format abuse; Anti Cheat → Binary Packer / `.NET`)
- [Overgrowth](entities/overgrowth.md) — open-source Wolfire Games action game + custom engine (rendering/physics/animation/AI/level editor/scripting; Game Engine / source)
- [Overwatch 1 Cheat Source](entities/overwatch-1-cheat-source.md) — Overwatch 1 internal DX11 DLL (Detours Present + ImGui ESP/aimbot/skin changer; Warden stack spoof; VMProtect; HWBP hooks; cheat / game:overwatch; gmh5225)
- [Overwatch 2 Cheat Aimbot Esp](entities/overwatch-2-cheat-aimbot-esp.md) — Overwatch 2 C/C++ internal aimbot + ESP (rendering / hooking / memory analysis; AHK pairing; cheat / game:overwatch2; gmh5225)
- [Overwatch 2 TOPE External Cheat](entities/overwatch-2-tope-external-cheat.md) — Overwatch 2 C++ external cheat framework (Visual Studio; ImGui overlay + aimbot; memory-access / pattern-scan / offsets / Windows input; external cheat design + RE workflows; ZEROWyt; cheat / game:overwatch2 [External])
- [Overwatch IAT Fixer](entities/overwatch-iat-fixer.md) — Overwatch protected-EXE IAT repair (obfuscated/encrypted import reconstruction; disassembler analysis; cheat / game:overwatch)
- [Overwatch2 Colorbot Cheats](entities/overwatch2-colorbot-cheats.md) — Overwatch 2 Python colorbot + Arduino Leonardo serial HID (purple outline pixel detection; shoot/silent-aim; cheat / game:overwatch2)
- [OverlayAI](entities/overlayai.md) — external CS2 cheat (C++; D3D11 ImGui overlay; ESP / aim assist / triggerbot; Panorama inventory bridge via DLL + named-pipe IPC / SOCache; cs2-dumper offsets; ianveig29; cheat / game:cs2)
- [OW-Aeternum](entities/ow-aeternum.md) — Overwatch C/C++ POC (anti-cheat research + rendering + hooking; author-flagged rough POC; cheat / game:overwatch; gmh5225)
- [OW2 Wardenrekter](entities/ow2-wardenrekter.md) — Overwatch 2 Warden AC disable DLL (VEH/INT3 patch, PEB anti-debug, timing/API stubs, DR0 demo; Emulate OW2 AC; gmh5225)
- [Ow-Anti-Flag](entities/ow-anti-flag.md) — Overwatch chainban anti-flag console tool (clears flag directories/registry keys; modern C++; cheat / HWID; dword64)
- [Ow-FOV](entities/ow-fov.md) — Overwatch FOV changer (injected DLL; batch-file injector pairing recommended; cheat / game:overwatch [FOV]; dword64)
- [Ow-Outlines](entities/ow-outlines.md) — Overwatch internal glow/outline ESP (injected DLL; GlowESP offset + VEH; outline rendering memory writes; cheat / game:overwatch)
- [ow_unpack](entities/ow-unpack.md) — Overwatch protected-binary unpack/decrypt (Midi12; reuploaded C++; decryption/helper modules + asm-assisted low-level unpacking; binary analysis / unpack study; cheat / game:overwatch)
- [orx](entities/orx.md) — portable data-driven 2D C/C++ engine (Game Engine / source)
- [osslsigncode](entities/osslsigncode.md) — cross-platform Authenticode signing (OpenSSL/cURL; PE/CAB/CAT/MSI/APPX/scripts; Anti Cheat → Sign Tools)
- [OSAntiCheat](entities/osanticheat.md) — experimental server-side CS2 CounterStrikeSharp heuristic AC (spinbot/aimbot/triggerbot/wallhack detectors; fusion suspicion tiers; log-only)
- [osiris](entities/osiris.md) — open-source CS:GO internal cheat (modern C++; ESP/glow/aimbot/triggerbot/backtrack/skin changer; interface pointers/pattern scan/VMT hooks; danielkrupinski; cheat / game:csgo)
- [OsirisAndExtra](entities/osiris-and-extra.md) — Internal CS:GO: driver / OpenGL / rendering (C/C++; cheat / game:csgo)
- [osmium](entities/osmium.md) — C++ framework for external cheats (cragson; cheat / guide; game-security RE / offensive technique study; not a best-practices reference)
- [osu-aac](entities/osu-aac.md) — osu! anti-cheat analysis/bypass (auto-play bot / input simulation / time manipulation / memory modification; Anti Anti Cheat; gmh5225)
- [osu!](entities/osu.md) — open-source C# rhythm game (osu!framework; Game Develop / source)
- [osu!framework](entities/osu-framework.md) — C# 2D game framework (drawable / OpenGL / input·audio·UI; Game Engine)
- [osx-cpu-temp](entities/osx-cpu-temp.md) — macOS SMC CPU temperature CLI (IOKit AppleSMC; °C/°F; Detection:HWID)
- [overlay](entities/overlay.md) — SetWindowsHookEx overlay sample (C++; cheat / overlay)
- [overlaycord](entities/overlaycord.md) — Discord game overlay pipeline hijack from external process (SamuelTulach; C++; framebuffer sharing; no hooks/injection; overlay trust-boundary / AC research; cheat / Discord)
- [owned_alignment](entities/owned-alignment.md) — abusing Alignment (C++; kernel driver/hook; cheat / HWID)
- [Ouroboros](entities/ouroboros.md) — Rust symbolic-execution decompiler (constraint tracking, expression rewriting, structured control-flow recovery beyond SSA-only; processor specs + interactive frontend; advanced decompilation research)
- [Oxidizer](entities/oxidizer.md) — Rust-accelerated angr / Rust decompiler (stripped-binary pseudocode; enum/match/? recovery)
- [Oxylus](entities/oxylus.md) — data-driven C++ engine (Vulkan/vuk/Slang; Flecs ECS; Lua; ImGui editor; Game Engine)
- [oxorany](entities/oxorany.md) — C/C++ compile-time any-constant encryption (platform-agnostic; AC Compile Time)
- [oxide-dumper](entities/oxide-dumper.md) — Facepunch Rust automated offset pipeline (Python; SteamCMD + Il2CppDumper + GitHub Actions; C++ header export; cheat `[Auto Dump]` / game:rust; LabGuy94)
- [oxide](entities/oxide.md) — Rust PE packer (`exe-rs`; compressed payload + TLS-callback unpack stub x86/x64 NASM; extensible obfuscation; Anti Cheat → Binary Packer `[Written by Rust]`)
- [oxware](entities/oxware.md) — free CS1.6 cheat (C++; alpha; cheat / game:cs1.6)
- [PACC4_0](entities/pacc4-0.md) — EPOTATOTV; cross-platform Minecraft Bedrock/Java player-side anti-cheat (PACC); on-device memory/process/HID inspection, AI behavior scoring, Rust signed encrypted event pipeline, red-screen warnings, separate PTV admin backend; Windows/Linux/Android/iOS/HarmonyOS native probes; Anti Cheat / game:minecraft
- [packer-tutorial](entities/packer-tutorial.md) — step-by-step PE packer-from-scratch tutorial (sections, imports, relocs, compression stub, OEP; Anti Cheat → Binary Packer `[Packer]`)
- [Pakkero](entities/pakkero.md) — 89luca89 educational Go binary packer (compression + AES-256-GCM + payload padding + obfuscation; in-memory execution; optional UPX + metadata mutation; anti-reversing / software protection tradeoff study; Anti Cheat → Binary Packer `[ELF]`)
- [Packer](entities/packer.md) — C/C++ PE X86 compress+encrypt packer (stub restore; import/relocation/TLS; Anti Cheat → Binary Packer `[X86]`)
- [packpeek](entities/packpeek.md) — static C CLI packer/protector fingerprinter (UPX, ASPack, Themida, VMProtect, MPRESS; Shannon entropy; PE/ELF/Mach-O/firmware; JSON + YARA/SARIF; defensive triage; cognis-digital)
- [pafish](entities/pafish.md) — open-source C anti-analysis testing tool; VM/sandbox/debugger/hook/environment checks (VMware, VirtualBox, QEMU, Wine); reproducible evasion testing (a0rtega)
- [pairipcore](entities/pairipcore.md) — Solaree RE notes on Google's pairipcore Android app protection (integrity checks, pseudo-VM injection, CFI obfuscation, dynamic symbol resolution, anti-debug, optional root gates; educational documentation)
- [Page Table Injector](entities/page-table-injector.md) — PT-Injector (C/C++; kernel driver; page-table manipulation / injection:windows; AC research)
- [PageTableHook](entities/page-table-hook.md) — C++ PTE hook demo; edits paging structures to redirect execution without code patches; `NtCreateFile` example; PatchGuard-aware hook research (Rythorndoran; Some Tricks / PTE Hook)
- [page_no_access](entities/page-no-access.md) — C++ lazy decrypt-on-first-access page protection (modding; Anti Cheat → Page Protection)
- [PAGE_NO_ACCESS-not-byfron](entities/page-no-access-not-byfron.md) — VEH + PAGE_NOACCESS Byfron/Hyperion anti-tamper PoC (LoadLibrary tester; gmh5225)
- [Paksmith](entities/paksmith.md) — Rust UE pak/UAsset explorer (FModel rewrite; pak v3–v11; Game Assets)
- [paladins-internal-cheat](entities/paladins-internal-cheat.md) — Paladins internal: optional Mhyprot backend + borderless overlay (gmh5225; cheat / game:paladins)
- [PetalAntiFreecam](entities/petal-anti-freecam.md) — Paper/CanvasMC **1.21** Minecraft chunk-packet freecam/wallhack mitigation (Java; PacketEvents ChunkMasker; configurable hide/restore Y; tile-entity filtering; per-tick refresh budget; runtime reload; boggymc; Anti Cheat / game:minecraft)
- [PalAntiCheat-poc](entities/palanticheat-poc.md) — Palworld UE5 AC PoC (dumped SDK + UObject/UProperty fixup; Anti Cheat)
- [PalEdit](entities/pal-edit.md) — Palworld Python desktop save editor (Pal companion edit/clone; write-back; Windows exe build; cheat / game:palworld [Save])
- [PalWorldAntiCheat](entities/palworld-anti-cheat.md) — Palworld UE5 AC research (C#; shader/render/audio; Anti Cheat)
- [palmods](entities/palmods.md) — Palworld UE5 mod/trainer stack (Lua UE4SS + C++ PalTrainerUltra; ImGui/D3D11; RPM/injection; cheat / game:palworld [UE5])
- [PalOps Web](entities/palopsweb.md) — Palworld dedicated-server ops workbench (ASP.NET Core + Vue 3; PalDefender anti-cheat integration; REST/RCON; whitelist/bans/config; lifecycle, saves, maps, backups; cheat / game:palworld [Server])
- [PalworldModdingKit](entities/palworld-modding-kit.md) — Palworld UE5 modding kit (cheat / game:palworld [UE5])
- [palworld-helper](entities/palworld-helper.md) — Palworld UE5 Python helper (modding; cheat / game:palworld [UE5])
- [palworld-rcon](entities/palworld-rcon.md) — Palworld dedicated server RCON client (Source RCON; Server on Windows)
- [palworld-save-tools](entities/palworld-save-tools.md) — Palworld Python GVAS save toolkit (read/convert/edit; cheat / game:palworld [Save])
- [palworld-setting-generator](entities/palworld-setting-generator.md) — Palworld web settings config generator (JS/HTML form editor; difficulty/progression; download config; Setting Generator; cheat / game:palworld [Server])
- [palworld-tools](entities/palworld-tools.md) — Palworld UE4SS mod patcher (PyQt GUI; download/apply/revert; Lua mods; Mod Patcher; cheat / game:palworld [UE5])
- [Palworld-Server-Modding](entities/palworld-server-modding.md) — Palworld UE5 dedicated-server mod example (Lua + C++; 100% rare Pal; cheat / game:palworld [UE5])
- [PalWorld-Server-Unoffical-Fix](entities/palworld-server-unoffical-fix.md) — Palworld unofficial dedicated-server binary patches (memory-leak / CPU fixes; Linux + Windows; hash verification; Server patch)
- [PalWorld-ServerInjector](entities/palworld-server-injector.md) — Palworld UE5 dedicated-server injector (Lua + C++; cheat / game:palworld [UE5])
- [PalWorld-NetCrack](entities/palworld-netcrack.md) — Palworld UE5 network crack (C++; shader/render/audio; cheat / game:palworld [UE5])
- [Palworld-SDK-Dump](entities/palworld-sdk-dump.md) — Palworld UE5 SDK dump (SDK generation; cheat / game:palworld [UE5])
- [PalworldSaved](entities/palworldsaved.md) — Palworld UE5 save/editor tooling (cheat / game:palworld [Save])
- [PaintFE](entities/paintfe.md) — Rust raster image editor (wgpu GPU filters, Rhai scripting, CLI batch, GIF/APNG; Image Codec)
- [palera1n](entities/palera1n.md) — iOS 15+ checkm8 jailbreak (A8–A11; rootful/rootless; Sileo bootstrap)
- [PANDA](entities/panda.md) — Platform for Architecture-Neutral Dynamic Analysis (QEMU-based; Cheat QEMU/KVM / DBI)
- [Panda3D](entities/panda3d.md) — Python/C++ 3D engine framework (liberal license; Game Engine / source)
- [Pandora](entities/pandora.md) — file-suspicion analysis framework (convenient UI; Anti Cheat → Analysis Framework)
- [Paradox AntiCheat](entities/paradox-anticheat.md) — Minecraft Bedrock Realms/BDS behavior-pack AC (TypeScript Script API; fly/killaura/reach/autoclicker/scaffold/noclip/xray checks; staff moderation commands; Visual1mpact; Anti Cheat / game:minecraft)
- [ParadiseBO2](entities/paradise-bo2.md) — PS3 Paradise SPRX mod-menu source for Black Ops II (window/UI code; Game Develop / source)
- [Pareidolia Triggerbot](entities/pareidolia-triggerbot.md) — hypervisor-based external Overwatch Widowmaker triggerbot (VivienneVMM + MouClassInputInjection; bypasses Overwatch AC; cheat / triggerbot & aimbot / game:overwatch; blackhades00)
- [PastDSE](entities/pastdse.md) — DSE bypass via clock rollback + leaked VeriSign certs (BlackBone load)
- [PeregrineAntiCheat](entities/peregrine-anticheat.md) — educational full-stack Windows AC (kernel minifilter, ObCallbacks, APC injection, MinHook, ETW-TI, YARA, stack/HWBP scans, named-pipe backend, Tauri GUI, cheat test suite; PatchRequest)
- [papaw](entities/papaw.md) — Linux ELF packer (LZMA/zstd/miniz; statically-linked; self-replacement on disk; optional anti-debug; papawify/unpapawify; Anti Cheat → Binary Packer `[ELF]` LZMA)
- [PasVulkan](entities/pasvulkan.md) — Object Pascal Vulkan header generator, OOP API wrapper, and engine framework (BeRo1985; vkxml2pas; SDL2 swap-chain; Free Pascal/Delphi; Windows/Linux/Android + MoltenVK; Game Engine / Vulkan)
- [pawtrace](entities/pawtrace.md) — Linux x86-64 ptrace syscall tracer (attach/spawn; decodes args, socket addresses, W^X memory, /proc/maps snapshots, JSONL; remote TCP; C + assembly; cocomelonc)
- [patch-finder](entities/patch-finder.md) — IDA plugin: detect in-memory patches/hooks via executable-region vs on-disk PE byte compare (custom PE parser; highlight diffs in disasm; cheat / IDA Plugins)
- [patchguard-2023](entities/patchguard-2023.md) — 2023 PatchGuard internals research (timer verification, context encryption, protected-structure list, recovery routines; gmh5225; cheat / PatchGuard-related)
- [patchguard-encryptor-driver](entities/patchguard-encryptor-driver.md) — self-implemented PatchGuard-like kernel integrity monitor (AmitMoshel1; C++; KTIMER/KDPC periodic SSDT/IDT/MSR checks + timer/DPC meta-integrity; kernel anti-tamper research; README [Self-implemented PatchGuard])
- [PatchGuardBypass](entities/patchguardbypass.md) — in-progress dynamic modern-build PatchGuard bypass research (AdamOron; C/C++; disable PG execution, evade runtime integrity checks, verify PG state; kernel security / anti-cheat analyst lane)
- [PatternSleuth](entities/patternsleuth.md) — Rust SIMD pattern/signature scan (file + process; Unreal address scanner)
- [PC Wacky Wheels Doc](entities/pc-wackywheels-doc.md) — Wacky Wheels (1994 DOS) retail-data RE doc (WACKY.DAT archive, track/sprite formats, pseudo-3D LUTs; Python extractors; Skunny Kart cross-ref; vs-sr-dev; Cheat / RE Tools)
- [pbcharactermovement](entities/pbcharactermovement.md) — UE4 C++ character movement plugin recreating HL2/Source-style FPS movement (bunnyhopping, surfing, strafe boosting, wall strafing, advanced crouch; source + prebuilt binaries; ProjectBorealis; Game Engine / UE4 Game)
- [pc_ginkgo](entities/pc-ginkgo.md) — Redmi Note 8/8T (ginkgo) Android kernel + KernelSU (cheat / Android Kernel Source)
- [pedigest](entities/pedigest.md) — C PE Authenticode digest library (hash-exclusion; BCrypt SHA-*; kernel ksecdd + usermode; WIN_CERTIFICATE parse; Anti Cheat → Sign Tools)
- [payload_dumper](entities/payload-dumper.md) — Android OTA payload.bin dumper (Python; Magisk / ROM RE)
- [payload-dumper-go](entities/payload-dumper-go.md) — Android OTA payload.bin dumper (Go; parallel xz / checksum / zip)
- [Packet-Sniffer](entities/packet-sniffer.md) — C/C++ packet logger/decryptor (networking + debugging; cheat / Packet Sniffer&Filter)
- [PcapPlusPlus](entities/pcapplusplus.md) — multiplatform C++ packet capture/parse/craft (100+ protocols; libpcap/Npcap; Packet Capture&Parse)
- [PCAPdroid](entities/pcapdroid.md) — privacy-friendly Android network monitor (track/analyze/block app connections; PCAP export; HTTP/TLS decrypt; cheat / Android Network Explorer)
- [rtl8852au-userspace](entities/rtl8852au-userspace.md) — Android no-root RTL8852AU userspace Wi-Fi driver (ASUS USB-AX56; libusb monitor mode, radiotap pcap, channel hopping, 802.11 frame injection; rtw89 port; cheat / Android Network Explorer)
- [pawnio](entities/pawnio.md) — WDK kernel driver with embedded Pawn AMX VM (signed bytecode modules via IOCTL; phys/virt memory, MSR/PCI, CPUID, CR/DR, I/O ports, SMM; namazso)
- [pcm](entities/pcm.md) — curated MCP for IDA Pro (rand-tech; desc also claims Process Context Monitor)
- [PCIE-Detector](entities/pcie-detector.md) — Kernel PCIe Config Space inspection driver (C++; defensive DMA detection research; gmh5225)
- [PCIeM](entities/pciem.md) — Linux kernel synthetic userspace PCIe device emulation (bare-metal virtual PCI endpoints; no FPGA/VM/QEMU; DMA / PCIe security research; cakehonolulu)
- [Free DMA Firmware pcileech](entities/free-dma-firmware-pcileech.md) — PCILeech FPGA DMA firmware (Herooyyy; Verilog/SystemVerilog + Vivado IP; board build scripts; PCIe config-space + MSI-X interrupt handling; multiple hardware persona profiles; VGK/Faceit DMA bypass research; cheat / DMA)
- [Pcileech Activator Anti-crack](entities/pcileech-activator-anti-crack.md) — FT601/SystemVerilog DMA firmware activator protection research (Herooyyy; activation signal registers, state machines, anti-crack flags; C++ signal analysis; commercial panel licensing on PCILeech FPGA hardware; cheat / DMA)
- [Pcileech AMDPCI](entities/pcileech-amdpci.md) — AMD PCI device-model PCILeech FPGA firmware (Herooyyy; Verilog/SystemVerilog + Vivado IP; 35T/75T/ZDMA build scripts; no-interrupt communication + hardware identity spoofing; Faceit/Vanguard signature research; cheat / DMA)
- [PCILeech C-Media CMI8738](entities/pcileech-cmedia-cmi8738.md) — C-Media CMI8738/PCI-SX legacy sound-card PCILeech FPGA firmware (12i192i1043; SystemVerilog/Vivado; donor config space + full BAR0; null audio endpoint; optional fake MRd bus-activity generator; Captain DMA/Enigma x1/Squirrel/Screamer M.2/TBX4; hardware emulation + DMA/AC research; cheat / DMA)
- [Pcileech Intel I226-V FullEmu](entities/pcileech-intel-i226-v-fullemu.md) — prebuilt Intel I225/I226 wired-NIC DMA firmware (Herooyyy; synthetic TCP + persistent active-link state; activity-based AC evasion research vs Vanguard/Faceit/EAC; cheat / DMA)
- [Pcileech ISABridge](entities/pcileech-isabridge.md) — ISA-bridge-style PCILeech FPGA firmware (Herooyyy; Verilog/SystemVerilog + Vivado bitstreams; PID/VID spoofing via bridge-device simulation; Faceit-class PCIe hardware filtering research; cheat / DMA)
- [PCILeech](entities/pcileech.md) — PCIe DMA host tool (LeechCore → PCILeech/MemProcFS/vmm); hardware bus initiator vs host transport; shadow-config/BAR firmware architecture; stock fingerprints; ufrisk / cheat / DMA
- [PCILeech DMA Proxy](entities/pcileech-dma-proxy.md) — DLL proxy + loader; MinHook on Win32 memory APIs; redirects to remote PCILeech/MemProcFS DMA; input/registry access (MGreif; cheat / DMA)
- [PCILeech-DMA-Fullstealth](entities/pcileech-dma-fullstealth.md) — Quantumstealth Fullstealth PCILeech DMA FPGA firmware (Vivado; M2/Squirrel/Captain 75T/Enigma X1) — Quantumstealth Fullstealth PCILeech DMA FPGA firmware (Vivado; M2/Squirrel/Captain 75T/Enigma X1)
- [Pcileech QuantumStealth Max](entities/pcileech-quantumstealth-max.md) — NoviceLevel PCILeech FPGA firmware collection (Vivado; M2/Squirrel/100T/Captain 75T/Enigma X1/Immortal 75T; config-space/BRAM/FIFO IP cores; batch build scripts)
- [Pcileech-DMA-NVMe-VMD](entities/pcileech-dma-nvme-vmd.md) — PCILeech DMA firmware: motherboard VMD/NVMe real camouflage; Windows reinstall may be needed for driver init (gmh5225)
- [PCILeech-FPGA](entities/pcileech-fpga.md) — FPGA HDL/firmware (Vivado; shadow config, BAR impls); firmware sophistication tiers 0–6
- [PCILeech-FPGA-DMA-VMD](entities/pcileech-fpga-dma-vmd.md) — Artix-7 75T Intel RST VMD `9A0B` emulation (MSI-X, NVMe, BAR shadow; SystemVerilog)
- [PCILeechGen](entities/pcileechgen.md) — Go donor-cloning firmware generator (Linux VFIO → scan/check/build/validate; SystemVerilog/COE → Vivado bitstreams; dynamic BAR, NVMe admin-queue, MMIO traces; PCILeech FPGA)
- [pciban](entities/pciban.md) — PCI/AHCI direct HWID collection PoC; brute-force PCI enumeration for storage-controller identifiers without OS APIs; anti-cheat Detection:HWID research (KDIo3; experimental)
- [pcileech-memprocfs-mcp](entities/pcileech-memprocfs-mcp.md) — Linux-native MCP server for PCILeech/MemProcFS DMA R/W, RE scanning, UE/Unity SDK dumping, FPGA TLP control (Neverdecel; Game Develop / MCP)
- [pcileech-wifi](entities/pcileech-wifi.md) — PCILeech-FPGA wireless NIC class emulation (ekknod; anti-cheat / DMA research)
- [pcileech-wifi-v2](entities/pcileech-wifi-v2.md) — PCILeech-FPGA WiFi NIC emulation fork (dom0ng; Verilog PCIe 7x IP, customizable device-ID scripts; ekknod baseline)
- [pdb](entities/pdb.md) — Windows PDB parse/merge (C++ DIA SDK; old formats + pdb.cfg; RE / debugger symbols)
- [pdb-rs](entities/pdb-rs.md) — Microsoft Rust PDB reader/writer (MSF/CodeView DBI/TPI/IPI; x86/AMD64/ARM64; RE / debugger symbols)
- [pdblister](entities/pdblister.md) — Rust PDB manifest CLI (PE CodeView GUID/age scan; symchk /om alternative; Symbol Server batch download)
- [pdbr](entities/pdbr.md) — standalone PDB symbol extractor (Python + Rich; functions, types, globals, source refs; no VS/DIA SDK; RE / debugger symbols)
- [pdf-pmc-x86](entities/pdf-pmc-x86.md) — PDF study on x86 PMC/PMI (documentation archive; counter-based monitoring, telemetry, Windows security research background)
- [pdfwkrnl-exploit](entities/pdfwkrnl-exploit.md) — PdFwKrnl.sys (BitLocker) IOCTL exploit (unsigned kernel code load/exec; Cheat Vulnerable Driver)
- [PdFwKrnlMapper](entities/pdfwkrnl-mapper.md) — PdFwKrnl.sys (BitLocker) DSE-bypass driver mapper (SeValidateImageData/header patch; unsigned PE map; gmh5225)
- [pe-bear](entities/pe-bear.md) — Qt GUI PE viewer/editor (headers, imports/exports, TLS/CLR; hex edit, section manipulation, compare)
- [pecleaner](entities/pecleaner.md) — C# strip Rich header, debug dir, PDB path, and timestamp metadata from x86/x64 PE (cheat / RE tools)
- [pe-sieve](entities/pe-sieve.md) — Lightweight single-process malware/injection scan engine (Detection:hook; hasherezade; lib behind xMalHunter)
- [PeVisor](entities/pevisor.md) — Early-stage Windows PE analysis/instrumentation toolkit (Nitr0-G; C/C++; Blackbone + Unicorn; process control, hooking, mapping, emulation; protection test material; cheat / [PE])
- [PEReconstruct](entities/pereconstruct.md) — Python headerless PE rebuild from process memory (manual-map scan/dump, hook analysis, export resolution; no driver/debugger)
- [Pew Game](entities/pew-game.md) — browser pixel twin-stick shooter (TypeScript/Next.js/Bun; HMAC session tokens; server score/wave/duration plausibility + replay checks; SQLite leaderboard; Anti Cheat / browser game)
- [pe32-password](entities/pe32-password.md) — PE32 password binary packer (Anti Cheat → Binary Packer)
- [PE-Packer](entities/pe-packer.md) — C/C++ PE X86 binary packer (Anti Cheat → Binary Packer `[X86]`; czs108)
- [pe-protector](entities/pe-protector.md) — Windows C++ x86 PE protection framework (instruction mutation, built-in x86 assembler, configurable stub, binary compression; CMake build; software protection / anti-tamper / packer-style defense research; `[X86]`; ATsahikian)
- [AtomPePacker](entities/atom-pe-packer.md) — Windows PE X64 compress+encrypt packer (runtime stub; import/relocation/TLS restore; Anti Cheat → Binary Packer `[PE X64]`; gmh5225)
- [AtomicShield Client](entities/atomicshieldclient.md) — FiveM Windows AC client (C#/.NET tray agent + WebView2; native C++ engine; manual-map loaders; process/module/heuristic guards; server-backed enforcement; adem-hosni)
- [PEPacker](entities/pepacker.md) — C++ PE X64 packer (asset pipeline; Anti Cheat → Binary Packer `[PE X64]`)
- [PePacker (SamLarenN)](entities/pepacker-samlarenn.md) — C++ simple PE packer (.text XOR encrypt + decrypt stub; custom PE section parse/rewrite; RE practice / packer development / basic obfuscation; Anti Cheat → Binary Packer; SamLarenN)
- [peetch](entities/peetch.md) — eBPF dump/tls/proxy (PID sniff + OpenSSL keys; PCAPng; cheat / android kernel explorer)
- [peinjector](entities/peinjector.md) — PE patching/infection framework (C PE parse/modify; Python/Java control; multiple infection methods; transfer-time patches; web remote config; preserves host behavior; JonDoNym)
- [peekaboo](entities/peekaboo.md) — modular malware-behavior emulator (safe C2/persistence/lateral-movement; Python CLI/TUI/Flask + C/C++ modules; MITRE ATT&CK + Sigma/YARA + VT; purple-team / detection engineering; cocomelonc)
- [PeaceMaker](entities/peacemaker.md) — Windows kernel-mode behavior-based threat detection platform (D4stiny; process/image/remote-thread/hidden-code/FS+registry monitoring with stack traces; driver + CLI + Qt GUI; defensive anti-malware + AC research; Anti Virus in fact but also Anti Cheat)
- [perf-ninja](entities/perf-ninja.md) — C++ CPU performance optimization labs (cache/branch/vectorization; Alder Lake/Zen 3/M1 CI; Performance Analysis)
- [PerfectSMBios](entities/perfectsmbios.md) — Th3Spl; lightweight UEFI C library; SMBIOS 2.0/3.0 read/spoof before OS load via EFI config table; randomized string overwrite; VisualUefi/EDK2; no ntoskrnl/winload deps; Windows+Linux; pre-boot HWID / anti-cheat RE (cheat / EFI Driver + HWID)
- [PerfMon (KelvinMsft)](entities/perfmon.md) — Windows kernel research driver; PMU/PMI flows, APIC handling, SSDT monitoring + hook-style interception; hardware-assisted monitoring on Win10-era platforms; README PMI Callback
- [pesign](entities/pesign.md) — Linux UEFI Secure Boot PE-COFF Authenticode/PKCS#7 sign/verify (NSS)
- [PESignAnalyzer](entities/pesign-analyzer.md) — Windows PE embedded Authenticode signature metadata extractor (Anti Cheat → Sign Tools)
- [perses](entities/perses.md) — x86 PE instruction-expansion obfuscator (semantic-equivalent replacement sequences; Anti Cheat → Obfuscation Engine)
- [petoy](entities/petoy.md) — PE-focused binary packer (C/C++ + JS; Anti Cheat → Binary Packer `[PE]`)
- [PEzor](entities/pezor.md) — C++/C PE packer (hooking-oriented; Anti Cheat → Binary Packer)
- [Phantasm x86 Virtualizer](entities/phantasm-x86-virtualizer.md) — x86 code virtualizer (static-link or manual VM-runtime embed; AC Obfuscation Engine `[VM]`)
- [PhantomKiller](entities/phantomkiller.md) — BYOVD via Lenovo BootRepair.sys (IOCTL 0x222014 ZwTerminateProcess; PPL AV/EDR)
- [phantom-client](entities/phantom-client.md) — Lunar Client 1.8.9 internal DLL (JNI/JVMTI; wglSwapBuffers/MinHook ImGui; evasion profiles; cheat / game:minecraft)
- [phantom-frida](entities/phantom-frida.md) — Build anti-detection Frida server from source (Python patch scripts; string/symbol/artifact randomization; WSL build; JS tests; TheQmaks)
- [phake](entities/phake.md) — GTA V mod menu / cheat framework (ScriptHookV or DMA; RAGE engine hooks; vehicle spawn / ESP / god mode; cheat / `[Mod Menu]`)
- [Phobos](entities/phobos.md) — RA2/YR community engine extension (C++; YRpp + Syringe injection; stable/dev/nightly builds; advanced RTS mod development; Game Engine / modding)
- [Phoenix-Valorant-Cheat](entities/phoenix-valorant-cheat.md) — Valorant external cheat (C++; ESP/aimbot/rage-mode; OpenGL/GLFW + ImGui menu/overlay; offset defs + vector math + external memory helpers; YMY1666527646; cheat / game:valorant [External])
- [physmem_drivers](entities/physmem-drivers.md) — vulnerable physmem driver list (namazso; no PoC; Cheat Vulnerable Driver)
- [PhysX](entities/physx.md) — NVIDIA PhysX source release (C++; rigid-body/collision SDK; CMake/Python builds; Windows/Linux/Android/Apple; PhysX SDK / Game Engine)
- [PhysX 3.4](entities/physx-3-4.md) — NVIDIA PhysX SDK 3.4 (version-pinned; CCD, cloth, particles, vehicles; component-based; cross-platform; PhysX SDK / Game Engine)
- [PhysPatch](entities/physpatch.md) — DMA scan/patch Windows kernel via physical memory (VA→PA walk; sonodima)
- [Piano Game](entities/pianogame.md) — C/C++ piano game (rendering/graphics focus; Game Develop / source)
- [pico-dma](entities/pico-dma.md) — Compact FPGA pre-boot PCIe DMA platform (Cr4sh; Verilog + Vivado/Vitis + MicroBlaze; autonomous/UART payloads; SPI flash; boot/firmware security + DMA implant research)
- [PiDqSerializationWrite-Example](entities/pidqserializationwrite-example.md) — Unity-centered `PiDqSerializationWrite` C++ example (Some Tricks / Windows Ring0)
- [PI-Defender](entities/pi-defender.md) — Windows kernel driver blocking process injection via handle-right filtering (remote memory write / operation permissions; hollowing, doppelgänging, ghosting, DLL injection docs/tests; defensive AC hardening)
- [pikabot-deobfuscator](entities/pikabot-deobfuscator.md) — Pikabot RC4/AES string decrypt (IDA Hex-Rays; cheat / IDA Plugins)
- [pkernelinterface-eft](entities/pkernelinterface-eft.md) — Escape From Tarkov external reversal framework (Nou4r; C++; kernel-assisted memory + entity processing; ESP/aim modules; ImGui overlay; cheat / game:eft [External])
- [Pilot](entities/pilot.md) — Piccolo Engine (BoomingTech; GAMES104 teaching C++ engine+editor; CMake Windows/Linux/macOS; rendering/resource/scripting/tooling; Game Engine / source)
- [pipeviewer](entities/pipeviewer.md) — Windows GUI named-pipe enumerator (security descriptors, clients, access modes, owning process; filter/search; real-time create/delete monitor; CyberArk; Windows IPC RE)
- [pixieditor](entities/pixieditor.md) — open-source C#/.NET Avalonia 2D editor (pixel art, painting, vector, animation, image editing; multi-toolset canvas, timeline animation, node-based rendering; artists/indie dev content creation; Game Engine / Universal Editor for 2D)
- [PINCE](entities/pince.md) — Linux GDB front-end (Qt; memory scan/edit, pointer chains, CE tables; Python + GDB)
- [Pillager](entities/pillager.md) — Go Windows credential harvest (browser/Wi-Fi/chat decrypt-export; post-ex)
- [Pine (canyie)](entities/canyie-pine.md) — Android ART Java method hooking (inline + replacement; Xposed-compatible API; Android 7.0+; no root; Android RE / app modification)
- [Pine](entities/pine.md) — neural-network aim/trigger research (CS:GO / Fortnite / Overwatch; cheat / triggerbot & aimbot)
- [Pink-Eye](entities/pink-eye.md) — Windows KMDF kernel PoC; anti-cheat object-callback code-cave redirect + integrity-check path tampering (SurgeGotTappedAgain; AC research / defensive testing)
- [Pitaya](entities/pitaya.md) — distributed multiplayer game server framework (Game Network / Server framework)
- [PixiJS](entities/pixijs.md) — lightweight 2D WebGL/WebGPU JS/TS library (shaders/render; Game Engine / HTML5)
- [PixelFlasher](entities/pixel-flasher.md) — cross-platform Pixel flashing GUI (bootloader unlock, OTA/factory flash, Magisk/KernelSU/APatch root, boot-image patch, backup; cheat / Android ROM tool for Pixel)
- [Pixel GPU Exploit](entities/pixel-gpu-exploit.md) — Mali GPU kernel exploit chain for Pixel 7/8 Pro Android 14; integer overflow + info leak → kernel R/W, SELinux off, root (0x36; cheat / Root for Pixel7/8 Pro with Android 14)
- [PIF Config Generator](entities/pif-config-generator.md) — automated Python pipeline for validated Play Integrity Fix JSON device profiles (Pixel build.prop tracking, Pydantic schemas, pif-gen CLI; Elcapitanoe; cheat / Android attestation spoof)
- [PlayCanvas Engine](entities/engine.md) — open-source WebGL/WebGPU JS engine (PBR / Ammo.js / XR; HTML5 3D)
- [Playnite](entities/playnite.md) — OSS Windows game library manager/launcher (C#/XAML/.NET; plugin integrations/themes/automation; emulation + local metadata; Game Manager / JosefNemec)
- [PltPatcher](entities/plt-patcher.md) — IDA Pro plugin set: repair ELF64 PLT entries when auto-analysis fails; thunk type preserver for extern-call decompilation (GAMMACASE; Python IDAPython; cheat / IDA Plugins)
- [plthook](entities/plthook.md) — cross-platform PLT/GOT/IAT hook library (ELF/Mach-O/PE; Linux/macOS/Windows; cheat / hook research)
- [plugin-ghidra](entities/plugin-ghidra.md) — RevEng.AI Ghidra extension: binary upload, code similarity, batch function matching/renaming, AI decompilation views (Java/Gradle; Ghidra 11.4+/Java 21; ML-assisted stripped-binary RE; cheat / Ghidra Plugins / `[RevEng.AI]`)
- [PMI-hpc](entities/pmi-hpc.md) — PMI + hardware performance counters for Windows security monitoring (branch misprediction / cache miss interrupts; code injection / ROP anomaly detection)
- [pmctrace](entities/pmctrace.md) — Intel PMC counter collection via ETW (C; cache/branch/instruction micro-arch events; profiling / side-channel RE)
- [pooldump](entities/pooldump.md) — Windows kernel pool enumerator/dumper (tags, sizes, owning drivers; EAC manual-map DLL extraction)
- [PoolParty](entities/poolparty.md) — Windows thread-pool injection techniques (worker-factory overwrite + TP_* queue variants; red-team / EDR visibility; SafeBreach-Labs; ThreadPool)
- [powerhook](entities/powerhook.md) — KPRCB IdlePreselect power-management callback hook PoC (Archie-osu; C++ KMDF driver; PRCB hook + thread/process logging; Windows internals / low-level game security research)
- [powervm](entities/powervm.md) — AMD SVM Type-1 HV (NPT hooks, CPUID hypercall reads, shadow DebugPort; CE fork for VMProtect/ACE targets)
- [Practical Reverse Engineering Solutions](entities/practical-reverse-engineering-solutions.md) — Bruce Dang textbook exercise solutions (x86/x64/ARM disasm, kernel analysis, rootkit challenges; DPC+APC; gmh5225)
- [PrecisionSpoofer-CPP](entities/precision-spoofer-cpp.md) — C++ kernel-driver HWID spoofer (cheat / HWID; gmh5225)
- [processhacker-mcp](entities/processhacker-mcp.md) — Process Hacker MCP for AI agents (runtime process analysis; C/C++; DLL plugins; Game Develop / MCP)
- [process-cloning](entities/process-cloning.md) — Windows process clone PoC (`NtCreateProcessEx`; VA-space snapshot; hollowing / memory analysis / credential dump)
- [ProcessInjection](entities/process-injection.md) — C# unified CLI process injection toolkit (3xpl01tc0d3r; vanilla/DLL/hollowing/APC queue/KernelCallbackTable; P/Invoke/D/Invoke/syscalls; shellcode formats, encryption, PPID spoof; offensive + detection-engineering lab; Various process injection techniques)
- [Process-Injection-Techniques](entities/process-injection-techniques.md) — Windows injection + persistence technique collection (C/C++; CreateRemoteThread/APC/Early Bird/TLS/thread hijack/reflective DLL/hollowing/doppelganging/ghosting + IFEO/AppInit_DLLs/AppCertDlls; unified CLI; security training + defensive detection testing; Injection Testing; MahmoudZohdy)
- [processor-trace](entities/processor-trace.md) — libipt Intel PT decoder (reference packet/instruction decode; coverage / tracing tools)
- [PoCsmith](entities/pocsmith.md) — AI Windows PoC gen (Claude + MCP Hyper-V/kd/Ghidra; patchwatch → verify VMs)
- [poc-exflushtb](entities/poc-exflushtb.md) — C++ Tb-monitoring PoC (backengineering; Some Tricks / Windows Ring0; asset-pipeline oriented)
- [PWF](entities/pwf.md) — Personal Windows Forensics training toolkit (artifact collection, timeline, registry analysis, IR evidence preservation; AC / Windows Forensics Training)
- [PokeAlliance Anti-Cheat Analysis](entities/pokealliance-anti-cheat-analysis.md) — PokeAlliance Pokémon MMO OTCv8 client static/dynamic AC audit (LordeTyrael; server-triggered process/DLL/window enumeration, login HWID fingerprinting, Lua blacklists, server-driven bot checks; Frida JS + Python tracer; Anti Cheat / game:pokealliance)
- [pokemongo-dumper](entities/pokemongo-dumper.md) — Pokemon GO Unity IL2CPP dumper (C#/C++; cheat / game:pokemongo; gmh5225)
- [polygon-ue5](entities/polygon-ue5.md) — POLYGON UE5 offensive research (C/C++; graphics / Unreal Engine / hooking; cheat / game:polygon [UE5]; gmh5225)
- [pom-pom](entities/pom-pom.md) — Honkai: Star Rail simple cheat (C/C++; hooking / overlays; cheat / game:honkai star rail; gmh5225)
- [pt-detector](entities/pt-detector.md) — Windows Intel PT research prototype (DProvinciani; KM+UM trace capture; execution-stream decode for ROP/JOP suspicious control flow; C/C++ + Python; exploit detection / CFI research; Intel PT)
- [ptfaketouch](entities/ptfaketouch.md) — iOS synthetic touch library (IOKit/UIKit inject; game bot / UI automation; gmh5225)
- [PTEditor](entities/pteditor.md) — cross-platform page-table editor (PGD/PUD/PMD/PTE R/W; VA→PA; PAT/NX/TLB; Linux LKM + Windows driver; Some Tricks / PTE Hook)
- [PTView](entities/ptview.md) — live Windows process page-table browser (C++ driver + C# GUI; PTE browse/dump, VA→PA, large pages; OS memory research / AC kernel investigations; VollRagm; Browse Page Tables on Windows)
- [PolyHook](entities/polyhook.md) — x86/x64 C++11 multi-method hooking lib (cheat / hook research)
- [PolyHook 2.0](entities/polyhook-2-0.md) — C++ PolyHook2 hooking lib (vcpkg; cheat / hook research)
- [Ponce](entities/ponce.md) — IDA Pro symbolic + taint execution plugin (Triton; path constraints, tainted data flow, input generation; Cheat Symbolic Execution; gmh5225)
- [Poseidon](entities/poseidon.md) — NtConvertBetweenAuxiliaryCounterAndPerformanceCounter KM↔UM channel (BE/EAC notes)
- [PoseidonVK](entities/poseidonvk.md) — Vulkan modernization fork of Poseidon/CWR-CE (Arma: Cold War Assault; libFuzzer format tooling)
- [Positron](entities/positron.md) — JS runtime inject via manual-map DLL (QuickJS/Electron; named-pipe IPC; REPL/SDK)
- [Ponytail Risk](entities/ponytail-risk.md) — OSS behavioral risk control + evidence review for private game servers (Rust agent, C ABI SDK, shadow mode)
- [PresentHookDetection](entities/present-hook-detection.md) — BE-style IDXGISwapChain::Present hook check (dummy D3D11 + dxgi prologue)
- [PresentInjector](entities/present-injector.md) — Nou4r kernel-assisted DLL injection via graphics Present pointer swap; PFN/pointer-chain handling; PTE.User; protected-process payload map (cheat / injection:windows)
- [PresentMon](entities/presentmon.md) — Intel/GameTechDev game performance capture + real-time overlay (C++ data-collection service; trace capture, frame timing, telemetry pipelines; Graphics Performance)
- [prevent-vac](entities/prevent-vac.md) — VAC monitoring inhibition via `steamserver.dll` / WinAPI return spoofing (`vac_monitor_manager`; gmh5225; explore anticheat:vac)
- [ProMBA](entities/promba.md) — MBA deobfuscator via program synthesis and term rewriting (linear/polynomial MBA; VM-protector contexts; astean1001; Cheat Mixed boolean-arithmetic)
- [PG1903](entities/pg1903.md) — Win10 1903 PatchGuard disable via context-page NX (Demo NX)
- [UPGDSED](entities/upgdsed.md) — runtime PatchGuard + DSE disable (vulnerable drivers, CI.dll, KPP context; Win7–11; hfiref0x)
- [PGHooker](entities/pghooker.md) — C++ Page Guard (`PAGE_GUARD`) hook research (cheat / hook)
- [ProExt](entities/proext.md) — Rust external CS2 cheat (ESP / aimbot / triggerbot / radar / RCS; egui UI)
- [ProGuard](entities/proguard.md) — Java bytecode shrinker/optimizer/obfuscator/preverifier (Guardsquare; unused-code removal, bytecode optimize, symbol rename; Gradle/CLI; software protection / deployment hardening; `[Java]`)
- [Project D Win64 Shipping](entities/project-d-win64-shipping.md) — Veiled Experts UE SDK dump (LagradOst; generated C++ headers—agents, weapons, vehicles, UI, engine subsystems; class hierarchies, offsets, vtables; SDK dumping methodology; cheat / game:veiled experts)
- [ProjectM](entities/projectm.md) — UE5 tactical FPS/RTS prototype "On All Fronts" (LeroyTechnologies; Mass Entity ECS; tens-of-thousands AI/player battles; AI soldier control + command workflows; large-map architecture; multiplayer security/anti-abuse study; UE5 FPS Game)
- [Project Nexus CSGO](entities/projectnexus-csgo.md) — Atonl200; C++20 CS2 internal suite; injected feature DLL + external DX11 ImGui overlay via shared-memory IPC; aimbot/triggerbot/RCS/ESP/movement/skin changer; MinHook + schema/offset resolution; manual-map loader via direct syscalls; optional kernel driver/BYOVD/PE mapper; cheat architecture + AC evasion research; cheat / game:cs2 [Internal]
- [ProxyAPICall](entities/proxy-api-call.md) — custom stack call for proxying API calls through fabricated stacks (C/C++; Cheat Spoof Stack / Custom stack call; evilashz)

- [PPLKiller](entities/pplkiller.md) — BYOVD PPL strip via **`RTCore64.sys`** (patch `EPROCESS` protection level; downgrade antimalware for debug/terminate; gmh5225)
- [Process Killer BYOVD](entities/process-killer-byovd.md) — BYOVD process terminator via **`viragt64.sys`** (kernel access → forceful kill of protected AC/EDR/AV; gmh5225)
- [PoisonKiller BOF](entities/poison-killer-bof.md) — Cobalt Strike BOFs via **`PoisonX.sys`** BYOVD (process kill, driver load/unload, kernel file delete; MinGW + Python helper; Muz1K1zuM; `[PoisonX.sys]`)
- [Proxmox](entities/proxmox.md) — PVE Helper Scripts (dialog installers; Cheat QEMU/KVM/PVE lab)
- [proxmox-ve-anti-detection](entities/proxmox-ve-anti-detection.md) — Hidden PVE / QEMU-KVM anti-detection (kernel)
- [procmap](entities/procmap.md) — C++14 Linux `/proc/pid/maps` parser (`MemorySegment`; layout analysis for forensics / game security)
- [proton](entities/proton.md) — Valve Steam Play compatibility layer (Wine-based; Docker build infra, prefix config, Steam manifests, per-title fixups; Linux gaming / Windows-to-Linux translation; ValveSoftware; [Steam])
- [RunEXE](entities/runexe.md) — Python PE analyzer and Wine launcher (CDJuaum; import/manifest/.NET triage; flags EAC/BattlEye kernel AC from DLL signatures; Wine prefix + Winetricks auto-provisioning; Linux game-security RE)
- [prowl](entities/prowl.md) — open-source C#/.NET 3D game engine with Unity-like editor (GameObject/MonoBehaviour; Prowl.Editor + Prowl.Runtime; PBR + post-processing; hot-reload C#; prefabs; MIT; Game Engine / source)
- [protobuf-finder](entities/protobuf-finder.md) — Accenture IDA plugin (Python IDAPython; Google protobuf runtime; decodes embedded descriptors from compiled binaries; search action + custom result views; recover network/serialization `.proto` definitions; game/binary RE; README [Protobuf])
- [protobufs](entities/protobufs.md) — SteamDatabase tracked Steam/Valve protobuf schema dumps (`.proto` files from update pipelines and automated dumpers; CS:GO/Steam client message schemas; protocol analysis and tooling maintenance; README [Protobuf])
- [ps5-linux-loader](entities/ps5-linux-loader.md) — PS5 Linux loader (kernel/HV exploits, IOMMU/GPU/TMR; PlayStation)
- [PSFree-Enhanced](entities/psfree-enhanced.md) — PS4 WebKit jailbreak exploit host (ArabPixel; PSFree/Bad Hoist/CSSFontFace userland + Lapse/NetCtrl/sleirsgoevy kernel; FW 6.00–11.02; GoldHEN/HEN selector; payload loader :9020; PlayStation browser jailbreak hosting)
- [ps-image-notify-routine-spam-filter](entities/ps-image-notify-routine-spam-filter.md) — filter noisy PsImageNotifyRoutine callbacks via RtlWalkFrameChain stack walking (Staatsgeheim; C x64 driver; kernel monitoring / AC telemetry / callback hygiene; ImageNotify Callback With RtlWalkFrameChain)
- [ps-notif-routine-unloader](entities/ps-notif-routine-unloader.md) — remove process/thread/image notify callbacks from AC/security drivers (`PsSetCreateProcessNotifyRoutine` enum; RTCore64.sys; gmh5225)
- [ptrace_read_teb](entities/ptrace-read-teb.md) — Linux ptrace TEB reader (C++; Cheat / Wine)
- [ptxNinja](entities/ptxninja.md) — Binary Ninja PTX / CUDA GPU virtual ISA RE (plugin manager; Binary Ninja Plugins)
- [Puzzle](entities/puzzle.md) — Kudaes Rust Windows minifilter-abuse PoCs (bind links, ID mapping, cloud sync providers, WIM hash manipulation; persistence/evasion; stealth/concealment; cheat / hide)
- [pubg](entities/pubg.md) — PUBG-focused OpenGL hooking/modding sample (C/C++; cheat / game:pubgm; gmh5225)
- [pubg-ai-yolov4](entities/pubg-ai-yolov4.md) — PUBG YOLOv4/Darknet object detection (screenshot-trained; YOLOv4-tiny/YOLOv7 configs; label tools; image/video scripts; cheat / triggerbot & aimbot; dqforgive-sudo)
- [PUBG-DX](entities/pubg-dx.md) — PUBG internal DX11 ImGui cheat (ESP/aimbot; kernel-driver reads; Xenuine decrypt; return-address spoofing; VMProtect SDK; cheat / game:pubg; gmh5225)
- [pubg-dump-offset](entities/pubg-dump-offset.md) — PUBG desktop UE4 offset history (v19.1–24.2; Xenuine keys; GObjects/GWorld; cheat / game:pubg [Offset]; gmh5225)
- [Pubg-demo](entities/pubg-demo.md) — PUBG external cheat demo (C++; UE CppSDK; ESP/aimbot; ImGui D3D11 overlay; DLL inject + separate render pipeline; a0yark)
- [pubg-dumper](entities/pubg-dumper.md) — PUBG live-process UE4 SDK/offset dumper (GObjects/GNames; class hierarchies; cheat / game:pubg [Dump]; gmh5225)
- [pubg-external-cheat](entities/pubg-external-cheat.md) — PUBG external cheat sample (C/C++; overlays + memory analysis; cheat / game:pubg; gmh5225)
- [pubg-public](entities/pubg-public.md) — PUBG external assistance reference (C++; offset entity parsing, bone/camera math, ESP/aimbot, decryption, driver memory access, DirectX overlay; educational game-hacking + AC analysis; K-cazb)
- [Pubg-Lite-ESP](entities/pubg-lite-esp.md) — PUBG Lite external ESP (Direct2D overlay; RPM + UE4 offsets; boxes/names/health/distance; cheat / game:pubg; gmh5225)
- [pubg-internal](entities/pubg-internal.md) — PUBG internal cheat refs (gmh5225 D3D11 Present/MinHook/FW1FontWrapper ESP; iCollin learning RE; ajkhoury archived UM+KM driver/SDK/ESP stack; cheat / game:pubg)
- [pubg-p2c-re](entities/pubg-p2c-re.md) — PUBG commercial P2C loader RE report (VMProtect; WebView2 auth; DWM Direct2D ESP injection; BattlEye bypass; Zakynthos detection; experienceds)
- [pubgstar](entities/pubgstar.md) — PUBG hooking + memory-analysis sample (C/C++; pubgstar; cheat / game:pubg; gmh5225)
- [pubg-mobile-memory-hacking](entities/pubg-mobile-memory-hacking.md) — PUBG Mobile Gameloop emulator cheat (C++; kernel-driver ESP/aimbot; DirectX overlay; UE SDK; DSEFix; atulkunal999)
- [pubg-mobile-memory-hacking-examples](entities/pubg-mobile-memory-hacking-examples.md) — PUBG Mobile Android memory hacking examples (entity/player/weapon reads; scan + modify; cheat / game:pubgm; gmh5225)
- [pubg-mobile-pak-extract](entities/pubg-mobile-pak-extract.md) — PUBG Mobile pak extractor (pre–1.1.0; post-update encryption unsupported; cheat / game:pubgm)
- [pubgm-pubgpatcher](entities/pubgm-pubgpatcher.md) — PUBG Mobile client patcher (C/C++/Java; networking / asset pipelines / modding; cheat / game:pubgm; gmh5225)
- [pubgm-shitty-source](entities/pubgm-shitty-source.md) — PUBG Mobile version-pinned cheat source (C++; aim/entity/overlay; driver artifacts + privileged-memory scripts; external workflow; Mood-Coding; cheat / game:pubgm)
- [pubgm-sdk-and-offsets](entities/pubgm-sdk-and-offsets.md) — PUBG Mobile UE4 SDK + offsets (1.5 / 1.9; ARM32 reflection dump; cheat / game:pubgm [Offset])
- [pubgm1.6-deadgame](entities/pubgm1.6-deadgame.md) — PUBG Mobile 1.6 decompiled dump archive (`libtersafe.so` + `libUE4.so`; historical ACE/UE4 native RE; cheat / game:pubgm; gmh5225)
- [Push](entities/push.md) — in-game overlay + system tuning toolkit (C/C++; D3D8–11/DXGI hooks; CPU/GPU/RAM/storage OSD, frame limiting, sync control; Monitor GPU/CPU/RAM performance; Volkanite)
- [pwatch](entities/pwatch.md) — Linux/Android HWBP process watch (debug without attach; cheat / debugging)
- [pwatch-c](entities/pwatch-c.md) — C/C++ HWBP on Linux/Android (process watch without attach; cheat / debugging; enenH)
- [pwnedboot](entities/pwnedboot.md) — Windows bootloader shim PoC: microcode-update DLL replacement; very-early boot payload + execution remap; Secure Boot bypass research (SamuelTulach; C/C++ gnu-efi + VS)
- [pyobfus](entities/pyobfus.md) — AST-based Python obfuscator (cross-file rename, literal encoding, import rewrite, CFF; YAML + FastAPI/Django/Flask presets; reverse stack-trace mapping, JSON CLI, MCP server, VS Code extension; CPython 3.9–3.14; game tooling / commercial IP hardening; zhurong2020)
- [pyramid-engine](entities/pyramid-engine.md) — pre-alpha C++17 Win32/OpenGL game engine (forward/deferred rendering, ECS scenes, shadow mapping, octree culling; CMake MSYS2; tests + CI; Game Engine / source; RuqoomTech)
- [pyre](entities/pyre.md) — browser-based Ghidra decompiler (WASM SLEIGH; multi-arch pseudocode; client-side only; ant4g0nist)
- [Pyarmor](entities/pyarmor.md) — Python CLI script obfuscator (rename / C-convert functions; machine bind + expiry; optional Themida; Python 2/3; AC Obfuscation Engine)
- [PyClassInformer](entities/pyclassinformer.md) — IDA Pro C++ RTTI plugin: hierarchy viz, auto-rename, method/library classification (cheat / IDA Plugins)
- [Pyda](entities/pyda.md) — Python QEMU user-mode DBI (hook / mem / syscall / insn; Cheat DBI)
- [PyAsmPatch](entities/pyasm-patch.md) — Python ARM ELF inline hooking for Unity IL2CPP `libil2cpp.so` (LIEF + Keystone + Capstone; static section merge, GOT patch, LDR fixup; InitArray hooks; axhlzy)
- [PythonPlantsVsZombies](entities/python-plants-vs-zombies.md) — Python PvZ clone (graphics-focused; Game Develop / source)
- [pythoncs2](entities/pythoncs2.md) — external CS2 cheat study (Python; PyMeow memory + overlay; DearPyGui config; ESP / recoil control; educational; Vekor64; cheat / game:cs2 [Python External])
- [q3vm](entities/q3vm.md) — Quake III embeddable `.qvm` bytecode VM + LCC compiler (AC dynamic-script prototyping)
- [qbdi-tracer-android](entities/qbdi-tracer-android.md) — Android QBDI + Dobby per-instruction native tracer (linker SO-load hooks, backtrace, memory/pattern scan; ARM64 Android/iOS)
- [Hardened-qemu](entities/hardened-qemu.md) — stealth QEMU/KVM build hiding VirtualBox/VMware/Bochs/QEMU artifacts (anti-VM analysis VMs; Hidden QEMU)
- [qemu-anti-detection](entities/qemu-anti-detection.md) — Hidden QEMU (device-string / fingerprint spoof)
- [qemu-apple-silicon](entities/qemu-apple-silicon.md) — ChefKissInc QEMU fork; Apple Silicon virtualization + iOS device emulation; hardware-accelerated ARM VMs on macOS; iOS security RE / app testing (IOS Emulator)
- [qemu_blog](entities/qemu-blog.md) — Airbus SecLab QEMU internals guide (machine/device, memory regions, interrupts, timers, PCI, TCG; Markdown + source refs; Guide)
- [qemu-patched](entities/qemu-patched.md) — Hidden QEMU fork (CPUID / SMBIOS / ACPI anti-VM spoof)
- [QemuUnrealDumper-4.25](entities/qemu-unrealdumper-4-25.md) — QEMU/memflow UE4.25 dumper (C++; object arrays/name pools; names/objects; per-game offsets; UE SDK Dump By QEMU)
- [qemu-gvm](entities/qemu-gvm.md) — QEMU (AMD/Intel; Android emulator research)
- [QEMU-Nyx](entities/qemu-nyx.md) — Intel-PT QEMU fuzzing (fast reset / PT decode / breakpoint hooks; Cheat QEMU/KVM)
- [ispras/qemu](entities/ispras-qemu.md) — ISP RAS QEMU fork (analysis / instrumentation / windbg tree; Cheat QEMU/KVM)
- [qemu-wasm](entities/qemu-wasm.md) — Emscripten WASM QEMU in browser (x86/arch guests; VirtIO; Cheat QEMU/KVM lab)
- [QuickAsm](entities/quickasm.md) — x86/x64 assemble-and-run GUI (Keystone)
- [QuickPGTrigger](entities/quickpgtrigger.md) — PatchGuard stress testing (C/C++; cheat / PatchGuard-related; gmh5225)
- [quickemu](entities/quickemu.md) — optimized QEMU VM create/run (Win/macOS/Linux; Cheat QEMU/KVM lab)
- [query-gpu-name-rs](entities/query-gpu-name-rs.md) — Rust Windows GPU display-name query (Detection:HWID; gmh5225)
- [query-shadow-stack](entities/query-shadow-stack.md) — Windows CET shadow-stack query/mismatch PoC (return-address integrity; gmh5225)
- [QueryWorkingSetExample](entities/query-working-set-example.md) — C working-set `.text` anti-tamper demo (`QueryWorkingSet`; breakpoint/protection detection; Midi12)
- [qiling-il2cpp-dump](entities/qiling-il2cpp-dump.md) — Qiling emulation IL2CPP metadata dump (no game launch; obfuscated/anti-tamper; cheat / game engine explorer:Unity)
- [qiomem](entities/qiomem.md) — BYOVD via Qualcomm `QIOMem.sys` (QCI0701 ACPI; virtual device → IOCTL physmem R/W; gmh5225)
- [QorTroller](entities/qortroller.md) — ConWan30 hardware-rooted controller attestation (VAPI; DualShock bridge; PoEP; Circom/Groth16 ZK verified-human proofs; session receipts; game security / anti-cheat research; Cryptographic console anti-cheat)
- [qualcomm_avb_exploit_poc](entities/qualcomm-avb-exploit-poc.md) — Qualcomm AVB bypass PoC (crafted partition data skips boot-image verification; persistent code execution; atlas4381)
- [QtScrcpy](entities/qtscrcpy.md) — Qt GUI scrcpy client (USB/TCP Android mirror; keyboard/mouse, drag-and-drop, recording, multi-device; no root; barry-ran)
- [QQTang](entities/qqtang.md) — QQ Tang (QQ堂) client/protocol/memory/AC research (Tencent casual game; gmh5225)
- [QQTang Cheat Engine](entities/qqtang-cheat-engine.md) — QQ Tang (QQ堂) title-specific cheat engine (C++/C; memory scan/edit; cheat / game:qqtang [Cheat Engine]; gmh5225)
- [Quack](entities/quack.md) — universal anti-cheat research kit (C++; modular client monitoring, game integration examples, docs, red-team adversarial tooling; experimentation—not production; JonathanBerkeley)
- [QSynthesis](entities/qsynthesis.md) — IDA Pro MBA expression synthesizer (Python; oracle-guided program synthesis + SMT; Hex-Rays; Cheat IDA Plugins)
- [Qvoid Token Grabber](entities/qvoid-token-grabber.md) — .NET Discord/browser credential stealer (webhook exfil; anti-debug/anti-VM/anti-sandbox; token-abuse malware-analysis research; Enum0x539)
- [RabsztynCC CS2 Internal](entities/rabsztyncc-cs2-internal.md) — BrufelFX; C++ internal CS2 research framework; ESP/chams/triggerbot/aimbot/bhop; DX11 Present hook + ImGui menu; direct NT syscalls, PE header wipe, signature busting, thread hiding, optional kernel driver + shared-memory IPC; companion loader + Offsets.h SDK; educational game-internals / AC evasion study; cheat / game:cs2 [Internal]
- [Raccine](entities/raccine.md) — Windows anti-ransomware (Neo23x0; debugger registration for vssadmin/wmic; YARA command-line rules; shadow-copy deletion block; no resident agent; README [EDR])
- [Raung](entities/raung.md) — Java bytecode assembler/disassembler (early-stage; cheat / RE tools)
- [Recaf](entities/recaf.md) — modern JVM/Android bytecode editing workstation (Col-E; multi-decompiler, assembly, recompile, deep search, deobfuscation transforms; `[Java]`)
- [rAthena](entities/rathena.md) — Ragnarok Online server emulator (login/char/map; NPC/WoE/MySQL; [MMORPG])
- [rAthenaCN](entities/rathenacn.md) — Chinese-localized rAthena fork (C/C++; asset pipelines / plugins / modding; cheat / game:ro; gmh5225)
- [raylib](entities/raylib.md) — simple C/C++ videogame library (OpenGL / Vulkan; Game Develop / source)
- [r3d](entities/r3d.md) — C/C++ 3D rendering extension for raylib (PBR, deferred/forward, shadow mapping, SSAO, bloom, decals, skeletal animation, particles; OpenGL pipeline; Game Engine / source)
- [raytracing](entities/raytracing.md) — CUDA mesh ray tracing with BVH + PyTorch bindings (ashawkey; RayTracer)
- [raybot-zero](entities/raybot-zero.md) — kernel-mode CS:GO cheat; C++ driver + C# loader; triggerbot, bunnyhop, glow, kernel key-state reads; no traditional usermode controller (R4YVEN; Kernel-mode)
- [ravengine](entities/ravengine.md) — modern C++ ECS game engine (Vulkan via RGL; GameNetworkingSockets; CMake cross-platform; input/GUI/audio + resource packing; C++ 3D)
- [raival-file-explorer](entities/raival-file-explorer.md) — lightweight Kotlin/Java Material 3 Android file manager (multi-tab, task handling, code editor, deep content search; Gradle baseline; Cheat Android File Explorer; Raival-e; slug disambiguated from [[file-explorer]])
- [razer-rzctl](entities/razer-rzctl.md) — BYOVD via Razer `rzctl.sys` (kernel mouse/keyboard simulation or IOCTL kernel access; gmh5225)
- [R3nzSkin](entities/r3nzskin.md) — LoL skin changer (C++; client-side skin rendering; DLL injector; pattern scan + Python auto-updaters; KsDumper integration; Skin; Kurok00; cheat / game:lol)
- [R3nzSkinTFT](entities/r3nzskin-tft.md) — LoL/TFT skin changer (C++; champion skin ID memory patch; client-only cosmetic swap; Skin; gmh5225; cheat / game:lol)
- [R6 Siege BattlEye Launch Bug](entities/r6-siege-battleye-launch-bug.md) — Markdown issue report: R6 Siege Y11S3 BattlEye/Sentinel dual-AC handshake failure on standard launch paths; Windows/Ubisoft/BEDaisy evidence, checksum parity, troubleshooting timeline; RainbowSixHelper.exe working path (brandenbailey23; Cheat / Explore AntiCheat System:BE)
- [R6-Internal-V3](entities/r6-internal-v3.md) — R6 internal: modding / SDK generation / memory analysis (C/C++)
- [r6-internal](entities/r6-internal.md) — R6 internal cheat base: C++ SDK, hooking utils, ImGui + D3D11 overlay; snapline ESP, targeting, entity access (JGonz1337; educational internal architecture; cheat / game:r6 [Internal])
- [r6-chams-public](entities/r6-chams-public.md) — R6 chams: Chameleon Models + visual check (educational; cheat / game:r6 [Chams])
- [r6-cheat-dumper](entities/r6-cheat-dumper.md) — R6 external cheat dumper: driver + rendering + animation (C/C++; cheat / game:r6 [External]; gmh5225)
- [r5apex-usermode](entities/r5apex-usermode.md) — Apex Legends user-mode external framework: C++ shared-memory IPC with mapped kernel driver for process R/W; glow/highlight samples + extensible baseline (3nolan5; external cheat design + driver-assisted memory access research; cheat / game:apex legends [External])
- [r6-external](entities/r6-external.md) — R6 external: driver development (C/C++; External)
- [r6-intel](entities/r6-intel.md) — R6 ranked-stat suspicion scorer: R6Data API heuristics (Node.js; integrity / moderation research; baldspots440)
- [r6-updater](entities/r6-updater.md) — R6 offset dumper/updater: C++ pattern scan + memory modules for post-patch signature refresh (Kix48; cheat / game:r6 [Dump])
- [r6s-external-v2](entities/r6s-external-v2.md) — R6 external v2: kernel driver/handle elevation ESP + aimbot (C++; cheat / game:r6 [External]; gmh5225)
- [r6s-internal-cheat](entities/r6s-internal-cheat.md) — R6 internal: modding + overlays + memory analysis (C++; cheat / game:r6; gmh5225)
- [rainbow](entities/rainbow.md) — UEFI EDK-II pre-kernel bootkit; OVMF/QEMU debug + VS UEFI build; pre-boot attack vectors / firmware persistence (SamuelTulach; cheat / [HWID])
- [rainbow-efi](entities/rainbow-efi.md) — UEFI boot-stage HWID spoof: EDK II + `rainbow.efi`; ExitBootServices → OslLoaderBlock → IopLoadDriver hook (gmh5225; [HWID])
- [rainbow-6-siege-cheat](entities/rainbow-6-siege-cheat.md) — R6 cheat: rendering + hooking (C/C++; cheat / game:r6; gmh5225)
- [rainbow-six-cheat](entities/rainbow-six-cheat.md) — R6 external: kernel driver + external menu + shared-memory comm; ESP/chams + silent-aim/recoil/spread + unlock/movement (NMan1; kernel-assisted cheat framework RE; cheat / game:r6 [External])
- [rainbow-six-siege-rs6-external-esp-aimbot-hack-cheat](entities/rainbow-six-siege-rs6-external-esp-aimbot-hack-cheat.md) — R6 leaked external ESP/aimbot; WndProc-only input hook (cheat / game:r6; gmh5225)
- [r6table-internal](entities/r6table-internal.md) — R6 internal: UE SDK ESP/aimbot + in-engine overlay (C++; cheat / game:r6)
- [r69-driver](entities/r69-driver.md) — HalPrivateDispatchTable + NtQueryAuxiliaryCounterFrequency KM comm (CR3 phys R/W; gmh5225)
- [r0ak](entities/r0ak.md) — kernel-level work and modding (C/C++; Some Tricks / Windows Ring3; gmh5225)
- [roak](entities/roak.md) — HAL timer-query hook + packet KM R/W; kernel offset resolution (KeServiceDescriptorTable; NtQueryAuxiliaryCounterFrequency)
- [rbfx](entities/rbfx.md) — Urho3D fork: C# support + WYSIWYG editor (Game Engine source)
- [r2a](entities/r2a.md) — retired radare2 local-LLM pointer (repo gone; successor r2ai; Cheat Radare Plugins)
- [r2ai](entities/r2ai.md) — LLM-based reversing assistant for radare2 (interactive LLM↔r2; Cheat Radare Plugins)
- [r2garlic](entities/r2garlic.md) — radare2 Garlic DEX/Dalvik decompiler plugin (DEX/APK/ELF/PE/Mach-O; Cheat Radare Plugins)
- [r2morph](entities/r2morph.md) — radare2/r2pipe metamorphic binary transform (Python+C; Cheat Radare Plugins)
- [r2smt](entities/r2smt.md) — radare2 SMT opaque-predicate deobfuscator (Rust; Z3/CVC5/Bitwuzla; Cheat Radare Plugins)
- [RaceCondition](entities/racecondition.md) — Ahora57; C++ Visual Studio anti-anti-debug PoC; native NT API debug-port/hidden-thread probes; race-condition timing bypasses against userland hide mechanisms; RE technique research (Anti Debugging)
- [radare2-mcp](entities/radare2-mcp.md) — radare2 MCP server (C; r2pipe disasm/decompile/xrefs; CLI/plugin modes; sandbox/readonly; MCP for radare2)
- [radius2](entities/radius2.md) — radare2 fast binary emulation + symbolic execution (Rust/C; Cheat Radare Plugins)
- [rax](entities/rax.md) — Hex-Rays self-checking multi-arch CPU emulator (Rust; x86/x64/ARM32/AArch64/Hexagon/RISC-V; SMIR JIT; KVM/QEMU oracle diff; Linux boot, SDE trace, GDB stub for IDA; binary analysis / fuzzing; HexRaysSA)
- [rnidbg](entities/rnidbg.md) — Android ARM64 kernel emulator (Rust rewrite of unidbg; kernel-level work, graphics, animation; cheat / Android kernel explorer)
- [rubik-cube](entities/rubik-cube.md) — Windows DX9/DX11 3D Rubik's Cube mini-game (MKXJun; C++; HLSL; custom render/camera/input; keyboard/mouse cube manipulation + timing; full source/assets/releases; README [DX9/11 Mini Game]; Game Develop / source)
- [rudroid](entities/rudroid.md) — Educational Rust Android ELF emulator (ELF loader, memory management, syscalls, filesystem abstractions, ARM64 Unicorn scaffolding; walkthrough docs + sample binaries)
- [rprof](entities/rprof.md) — lightweight CPU scope profiler (TLS timing; ImGui/ImPlot flame graphs; LZ4 captures; Game Testing)
- [rdtsc-kvm-handler](entities/rdtsc-kvm-handler.md) — KVM RDTSC timing intercept (Intel VMX + AMD SVM; fake timestamp deltas; QEMU RDTSCP disable; timing AC / VM-evasion research; WCharacter; Bypass RDTSC)
- [RCE Shield](entities/rce-shield.md) — RCE hardening toolkit for PC gamers (detect/prevent/remediate RCE in launchers, mod loaders, overlays, voice chat, peripherals; bad-antics; Game Tools)
- [ReadDirectoryChanges](entities/readdirectorychanges.md) — C++ `ReadDirectoryChangesW` wrapper (async recursive directory watch; sync/security monitoring)
- [ReadPhys](entities/readphys.md) — phys mem via manual PTE map (no MmCopyMemory/MmMapIoSpace; AXE-BASE.sys; ACE)
- [ReadWriteDriver](entities/read-write-driver.md) — `ntUserSetSysColors` KM↔UM channel (Win11 22000.376; cheat / driver communication)
- [React](entities/react.md) — Paper/Folia Minecraft aim-assist AC plugin (Java; GCD-error scoring, acceleration-delta tracking, mode-averaged rotation quantization; optional ML inference service; PacketEvents; streak-based violation buffering; staff alerts; g4vrk; Anti Cheat / game:minecraft)
- [React Native Device Risk Signals](entities/react-native-device-risk-signals.md) — React Native TurboModule device-intel probes (root/jailbreak, emulator, Frida, VPN/proxy, hardware/runtime; raw typed signals for backend fraud models; no client score or vendor upload; Android+iOS)
- [React Native ShieldScan](entities/react-native-shieldscan.md) — React Native RASP module (root/jailbreak, Frida, debugger, emulator, Xposed/Substrate hooks; weighted risk score; screenshot/recording protection; Android+iOS)
- [readwrite-kernel-stable](entities/readwrite-kernel-stable.md) — stable kernel read/write driver (C/C++; cheat / RPM; driver development / modding)
- [rw_socket_driver](entities/rw-socket-driver.md) — kernel socket RPM/WPM for protected processes (manual-map friendly; external cheat comm; adrianyy; cheat / Socket)
- [RWXFinder](entities/rwxfinder.md) — VirtualQueryEx RWX page scanner (size-filtered exploitable regions for code injection; S12cybersecurity; cheat / injection:windows)
- [RwxScanner](entities/rwxscanner.md) — kernel-mode page-table RWX scanner (PML4/PDPT/PD/PT walk via physical reads; suspicious writable+executable mappings + process metadata; Oliver-1-1; AC/malware detection research; README [RWX Memory scanner])
- [Recast Navigation](entities/recastnavigation.md) — Recast & Detour navmesh toolset (voxelize → pathfind/steer; Game Tools)
- [ReClass.NET](entities/reclass-net.md) — .NET memory class reconstruction + remote process inspection (x86/x64; scanners/debuggers; legacy ReClass import/export; C#/C++ layout export; cheat / debugging)
- [ReClass DMA](entities/reclass-dma.md) — ReClass.NET plugin: DMA-backed structure recon (C/C++; external PCIe FPGA path; cheat / debugging)
- [ReClass.NET-DriverReader](entities/reclass-net-driverreader.md) — ReClass.NET plugin: kernel-driver mem vs RPM (AC-blocked structure recon; C#/C++)
- [ReClassEx](entities/reclass-ex.md) — extended Windows class reconstruction tool (ajkhoury; C++; RTTI, PDB, module targeting, plugins; cheat / debugging)
- [Reclass](entities/reclass.md) — structured binary editor for unknown data layouts (IChooseYou; C++17/Qt 6; structs/arrays/pointers; process-memory + WinDbg plugins; MCP; cheat / debugging)
- [regenny](entities/regenny.md) — interactive live-memory struct reconstruction (cursey; C++; nested structs/arrays/pointers/enums/bitfields; header export; cheat / sdk codegen)
- [registry-callbacks](entities/registry-callbacks.md) — registry-callback KM↔UM PoC for manually mapped drivers via jump gadget in legitimate module; memory R/W, protected patching, process-base lookup, heartbeat (0xGREG; Registry Callback)
- [recompiler](entities/recompiler.md) — Xbox360→Windows executable porting (console emulator / Xbox RE)
- [Red Alert 2 on Web](entities/redalert2.md) — RA2/YR RTS engine reimplementation (unit AI, buildings, resources, multiplayer, map rendering; Game Engine / source)
- [RedTalaria](entities/red-talaria.md) — UE Hermes deep-link plugin (Blueprint nodes/assets/editor URLs; UE 5.3/4.27; team collaboration; Plugins:Unreal; cdpred)
- [Reborn](entities/reborn.md) — Rust Fortnite cheat framework (web server / SQLite / Discord bot; modular crates)
- [RebirthGuard](entities/rebirth-guard.md) — Windows C++ open-source anti-cheat library (modding / SDK generation; Open Source Anti Cheat System; chztbby)
- [Rebirth](entities/rebirth.md) — MapleStory GMS-095 private-server emulator (C#; login/character/map/monster AI/skills/quests/party-guild; client-server protocol; Private Server-GMS-095 / game:maplestory; gmh5225)
- [RemnantESP](entities/remnant-esp.md) — Remnant UE ESP cheat (C#; modding / Unreal Engine / memory analysis; cheat / game:remnant; gmh5225)
- [ReGameDLL_CS](entities/regamedll-cs.md) — reversed CS1.6 server `mp.dll` (GoldSrc; plugin API; Game Engine / RE)
- [rel-fuscate](entities/rel-fuscate.md) — ELF JMPREL/GOT relocation obfuscation (jmprel `r_offset` misdirection; partial RELRO; Python patch toolchain; caprinux)
- [RelocBonus](entities/relocbonus.md) — Attack Reloc (DEF CON 26; AC / Obfuscation Engine)
- [Renamaida](entities/renamaida.md) — IDA Pro plugin: Jaro-Winkler instruction-signature rename for firmware/static libs (JSON sig DB; cheat / IDA Plugins)
- [RenHook](entities/renhook.md) — Windows x86/x86-64 inline hooking library (modern C++; Zydis disassembly; safe APIs + trampolines; RE/instrumentation; WopsS)
- [RPGMakerDecrypter](entities/rpgmakerdecrypter.md) — RPG Maker XP/VX/VX Ace encrypted-archive extractor (CLI; RE tools)
- [RE-Architect](entities/re-architect.md) — automated RE platform (binary analysis + ML; cheat / RE tools)
- [re-harness](entities/re-harness.md) — OpenCode agent harness for Qwen 27B/35B with read-only IDA 9.3/IDASQL PE static analysis; NeverD/LLVM lift→O3→redecompile fallback; malware/game-security RE
- [re-ue4ss](entities/re-ue4ss.md) — UE4/UE5 scripting/modding framework (Lua + C++ mod APIs, blueprint loading, live property editing, SDK dumpers; runtime hooks; UE4SS-RE)
- [re4f](entities/re4f.md) — Coldzer0 Obsidian RE curriculum (x86/x64, NASM/MASM, Windows memory/PE, static/dynamic analysis, anti-analysis packing/anti-debug; Cheat / Guide)
- [reai-ida](entities/reai-ida.md) — RevEng.AI IDA Pro plugin: binary upload, similarity-based function matching, automated renaming, auto-unstrip, AI decompilation views (Python/Qt; ML-assisted stripped-binary RE; cheat / IDA Plugins / `[RevEng.AI]`)
- [remap](entities/remap.md) — Windows kernel page-remapping PoC; copies protected-process pages into surrogate process VA for R/W and dump workflows (EBalloon; C++; Windows 10 caveats; cheat / Clone process)
- [remem](entities/remem.md) — header-only C++ Windows memory library (0xenia; typed RPM/WPM, pointer validation, optional exception handling/logging, pattern scan, calling-convention call wrappers; RE tools / game memory research; cheat / RPM for Windows)
- [RemoteCall](entities/remote-call.md) — Windows kernel APC + KeUserModeCallback remote user-mode execution (1401199262; C++; driver I/O pivot, controlled context restore; no RWX shellcode alloc in target; advanced process injection + AC detection trade-off research; README [APC Remote Call])
- [remotery](entities/remotery.md) — lightweight real-time CPU/GPU profiler (single C library + browser viewer; multithreaded; D3D11/12/OpenGL/Vulkan/CUDA/Metal; Game Testing)
- [reshade](entities/reshade.md) — cross-API post-processing injector (frame color/depth + ReShade FX; Renderer / graphics-programmer tooling; crosire)
- [RETools](entities/retools.md) — curated RE/security tool catalog (disasm/debug/decompiler; toolkit guide)
- [retoolkit](entities/retoolkit.md) — Windows Inno Setup bundle (80+ RE tools: debug/decompile/PE/hex/network/YARA)
- [retoolsync](entities/retoolsync.md) — multi-tool RE cursor/goto sync (mrexodia; Tornado WebSocket hub; IDA/BN/x64dbg/WinDbg/VS Code plugins; Ctrl+click hex jump)
- [RetDec](entities/retdec.md) — retargetable machine-code decompiler (binary lifting; limited maintenance; Cheat Decompiler)
- [rev-tools-setup](entities/rev-tools-setup.md) — One-click Windows RE toolchain (Scoop): CE/Ghidra/x64dbg + read-only CE MCP + AI agent client config
- [reverify](entities/reverify.md) — Python AI-assisted RE toolkit; PE/ELF/Mach-O parse/disasm/emulate; Capstone/Unicorn/LIEF; deterministic VERIFIED/REFUTED/INCONCLUSIVE claim verifier + reconstruction-agent loop with established-facts ledger; Frida hook gen; MCP + CLI (2akouwu; Cheat RE Tools)
- [Retract](entities/retract.md) — Go static binary workbench (PE/ELF/Mach-O; disasm, CFG, pseudocode, YARA; browser UI)
- [reverse-engineering](entities/reverse-engineering.md) — curated RE awesome list (networking / editors; Cheat guide lane)
- [revert-mapper](entities/revert-mapper.md) — post-execution cleanup for manually mapped kernel drivers
- [rezygisk](entities/rezygisk.md) — standalone open-source C Zygisk API stack; Magisk/KernelSU/APatch; lighter binaries, module packaging (PerformanC; Transparent implementation of Zygisk)
- [RescueX](entities/rescuex.md) — Magisk/KernelSU/APatch boot-loop auto-rescue (watchdog, module snapshots, WebUI recovery)
- [RESimGhidraPlugins](entities/resim-ghidra-plugins.md) — Ghidra Debugger plugins for RESim reverse-engineering simulator (Java; gdb-multiarch/Simics port 9123; bookmarks, watchmarks, stack console, listing hovers; mirrors RESim IDA Pro plugins; Cheat RE Tools / Ghidra Plugins; mfthomps)
- [Ret-Spoofing](entities/ret-spoofing.md) — minimal x64 return-address spoofing without exception handlers (Peribunt; C++ + ASM stubs; low-overhead fake return targets; Windows x64 nonvolatile-register assumptions; Cheat Spoof Stack)
- [Return-address-spoofer](entities/return-address-spoofer.md) — return-address / stack spoof illustration (C/C++; Cheat Spoof Stack)
- [Return-address-spoofing](entities/return-address-spoofing.md) — compact x64 return-address spoofing for invoker pipelines (Apex-master; C++ templates + ASM stubs; native function invocation bypass; anti-detection evasion research; Cheat Spoof Stack)
- [RASD](entities/rasd.md) — R5AC/Apex Legends return-address spoofing detector (cryotb; `RtlCaptureStackBackTrace` stackwalk; gadget + unbacked-RWX heuristics; Detection:Spoof Stack)
- [ricochet-deobfuscator](entities/ricochet-deobfuscator.md) — Ricochet AC deobfuscator (C/C++; driver / memory analysis)
- [ricochet-disabler](entities/ricochet-disabler.md) — Ricochet AC disable/bypass (kernel driver + user-mode; COD research)
- [rider-source-code-access](entities/rider-source-code-access.md) — JetBrains UE plugin; Rider as selectable external source editor in Unreal Editor; cross-platform install discovery; configurable paths; C++ plugin modules; Unreal C++ dev workflow
- [rico-cheat-rust-external](entities/rico-cheat-rust-external.md) — Facepunch Rust external cheat (C++/C/C++; driver / rendering / Unity; cheat / game:rust [External]; gmh5225)
- [RiscyWorkshop](entities/riscy-workshop.md) — RISC-V payload obfuscation workshop (riscvm VM + llvm-mingw + insn mutation; red-team exercises)
- [RisohEditor](entities/risoh-editor.md) — free Win32 PE resource editor (dialogs, menus, icons, RC import/export; 32/64-bit)
- [RiskEngine](entities/risk-engine.md) — Android risk-control SDK + management platform (device fingerprinting; JNI root/hook/emulator/debug/VPN/sandbox detection; WsttXm)
- [ripr](entities/ripr.md) — IDA/BN function rip → Python/Unicorn harness (r2pipe; Cheat IDA/BN Plugins)
- [Rigel-Driver](entities/rigel-driver.md) — C++ KM R/W driver; module-base/export lookup; protected-region writes; mapper load; dxgkrnl hook context (`NtGdiDdDDINetDispGetNextChunkInfo`; Lynnette177; driver-assisted memory access / AC bypass research)
- [Rikugan](entities/rikugan.md) — in-IDA/BN RE AI agent (multi-provider LLM chat; agentic tool loop, plan mode, Ollama; buzzer-re)
- [Ring Reaper](entities/ring-reaper.md) — Linux post-exploitation agent (MatheuZSecurity; C + Python control server; io_uring async I/O replaces traditional read/write/send/receive syscalls; file transfer, process/user enum, network inspection, session control; EDR evasion research)
- [Riru-MomoHider](entities/riru-momo-hider.md) — Riru Zygote-injection Magisk root-hide module (syscall + Java API hooks; mount spoof, file hide, property-query block; canyie; Cheat / Magisk)
- [ritz-amazing-fortnite-internal](entities/ritz-amazing-fortnite-internal.md) — Fortnite internal: from-scratch hook + x64 injector (cheat / game:fortnite)
- [ritz-amazing-fortnite-internal-updated](entities/ritz-amazing-fortnite-internal-updated.md) — Ritz-lineage Fortnite internal base (DontCry361x; UE object access; aim/ESP menu; offset helpers + call spoofing + weapon hooks; [Internal])
- [RIVER](entities/river.md) — Bitdefender dynamic binary analysis framework (ELF/PE loader; external mapping; native import resolution; x86 runtime instrumentation; cheat / DBI)
- [ROM Shifter](entities/rom-shifter.md) — Android app for custom-ROM flash, backup, restore, and migration (ShivamXD6; Kotlin/Compose + shell backend; Magisk/KernelSU/APatch; cheat / Android)
- [RobloxCheats](entities/roblox-cheats.md) — macOS Roblox dylib injector (Mach VM / shared-memory IPC; internal+external ESP; offset finder)
- [RookieAI_yolov8](entities/rookieai-yolov8.md) — Passer1072 YOLOv8 Ultralytics FPS aim-assist (Python; multi-process capture/inference; PyTorch/TensorRT/ONNX; Win32/Logitech/kmNet input; configurable aim/trigger; cheat / Machine Learning YOLOv8)
- [rootAVD](entities/rootavd.md) — root Android Virtual Devices (Magisk/AVD; Cheat Magisk / Android Emulator)
- [RootAppDetector](entities/root-app-detector.md) — Java Android POC: detect installed root-manager apps via package/activity launch + SecurityException (Detection:Android root; apkunpacker)
- [Root Detection Low level](entities/root-detection-low-level.md) — Frida JS dynamic analysis: `java.io.File`/`Runtime.exec` hooks, keyword path filters (`su`/`bin`/`apk`), shell-command logging, Java stack traces for root-detection/malware RE (3v1lC0d3; cheat / Frida)
- [Root My Galaxy](entities/root-my-galaxy.md) — Samsung Galaxy one-tap KernelSU installer (CVE-2026-43499; Kotlin/Compose + NDK; firmware-profile matching; external exploit/KernelSU feed; KASLR probes; cheat / Android root)
- [ROOTURK Kernel](entities/rooturk-kernel.md) — POCO X7 Pro Android 15 GKI 6.6 custom kernel (AnyKernel3 + Bazel; KernelSU Next + SuSFS root hiding + game idle tuning; mobile kernel RE; cheat / Android Kernel Source)
- [Root My Pixel](entities/root-my-pixel.md) — one-tap temporary Pixel root (CVE-2026-43499 IonStack + ReSukiSU/KernelSU; Shizuku; Pixel 7–10; Kotlin/JNI; cheat / Android root)
- [RootSentry](entities/rootsentry.md) — zero-dependency Python mobile RASP CLI/library (root/jailbreak, emulator, Frida/Xposed hook, tamper scoring → TRUSTED→CRITICAL; fleet cohort + MITRE ATT&CK for Mobile; Kotlin/Swift collectors; cognis-digital)
- [Rootect](entities/rootect.md) — zero-dependency Android RASP (Kotlin + native syscalls; Magisk/KernelSU/Frida/Xposed/repack/emulator/debugger; scored reports + Key Attestation; sample app + reference server; SloMR; Anti Cheat / Detection:Android root)
- [RootRaven](entities/rootraven.md) — self-hosted Android/iOS pentest web dashboard (Flask; ADB, Frida, JADX, Burp, logcat; SSL pinning, root/jailbreak, anti-debug, biometric, crypto hooks; MASVS tracker; Kakaxh1)
- [rootkit](entities/rootkit.md) — MatheuZSecurity Linux rootkit sample collection (kernel/user/eBPF; hiding, hooking, privesc, persistence, anti-forensics; educational offensive/defensive research)
- [rootkit-2](entities/rootkit-2.md) — CSRSS CSR_PROCESS walk to detect hidden processes (kernel PoC; gmh5225)
- [rootkit-detection-ebpf-time-trace](entities/rootkit-detection-ebpf-time-trace.md) — Linux eBPF getdents timing-anomaly framework for file-hiding rootkit detection (ait-aecid; semi-supervised anomaly scoring)
- [rtcore64-vulnerability](entities/rtcore64-vulnerability.md) — BYOVD driver mapper via MSI Afterburner `RTCore64.sys` (R/W primitives + data-ptr hook; `MmAllocateIndependentPagesEx` search; manual unsigned map; gmh5225)
- [RToolZ](entities/rtoolz.md) — rootkit-like process/callback utility (hide/unhide, callback enum/remove, protection-level control; ProcExp152.sys; gmh5225)
- [RootSocketKit](entities/root-socket-kit.md) — Android LKM + Unix-socket root memory R/W (Magisk/KernelSU/APatch JNI; GUI)
- [rp](entities/rp.md) — fast C++ ROP gadget finder (0vercl0k; rp++; PE/ELF/Mach-O x86/x64/ARM/ARM64; instruction gadgets + pointer values; cross-platform; exploit dev / binary attack-surface audit; cheat / ROP Finder)
- [rop-compiler](entities/rop-compiler.md) — x86 ROP compiler for game cheat payloads (assembly-like scripts → chains; CS:GO/BF3/BF4; triggerbot/glow ESP/minimap; gadget scan + offsets; C++; cheat / ROP Generation)
- [ropium](entities/ropium.md) — ROP chain builder (C++ core + Python bindings; gadget extract/analyze + semantic queries; CLI + scriptable; exploit dev / binary security education; Boyan-MILANOV; cheat / ROP Generation)
- [ropgadget](entities/ropgadget.md) — Python ROP gadget finder (Capstone; ELF/PE/Mach-O/raw; multi-arch filter/search; optional chain gen; JonathanSalwan; cheat / ROP Finder)
- [ropgadget-rs](entities/ropgadget-rs.md) — Rust ROP gadget finder (parallel PE/ELF/Mach-O scan; ret-terminated chains; exploit-chain RE)
- [rsdkv5-decompilation](entities/rsdkv5-decompilation.md) — Retro Engine v5/v5U decompilation (RSDKModding; Sonic Mania and other Retro Engine titles; cross-platform; modding API; multiple audio/rendering backends; legacy engine compatibility; Game Engine / source)
- [rs-native-kit-security](entities/rs-native-kit-security.md) — React Native Nitro RASP SDK (root/jailbreak, Frida/Xposed/Magisk hook, tamper/integrity, VPN/proxy, device risk scoring; Android+iOS)
- [rs-ldr](entities/rs-ldr.md) — Rust no_std hash-based WinAPI resolution (PEB walk, LdrLoadDll, XOR strings, Hell's Gate-style SSN resolver; stealth API resolution)
- [rtti-parser](entities/rtti-parser.md) — IDA script: parse RTTI (IDA 9.2; cheat / IDA Plugins)
- [RTM](entities/rtm.md) — realtime 3D/4D math lib (fast arithmetic; Mathematics)
- [rwProcMem33](entities/rw-proc-mem33.md) — ARM64 Linux KM suite; process R/W, HW breakpoints, CE-style server demos, module hiding (Cheat Memory Explorer; abcz316)
- [SKRoot-linuxKernelRoot](entities/skroot-linux-kernel-root.md) — Android Linux kernel root patch toolkit (deeply hidden root; su install/inject; C/C++ + Java/JNI; multi-kernel without rebuild; abcz316; cheat / Android root)
- [rwMem](entities/rwmem.md) — rwProcMem33 fork; Android process-memory R/W (Cheat Memory Explorer)
- [Rumba](entities/rumba.md) — Python VMProtect analysis (symbolic exec / traces; Fix VMP / MBA-tagged)
- [rustFrida](entities/rust-frida.md) — Frida-like Android ARM64 hook (QuickJS, Java/native/stealth hook, QBDI; pairs with wxshadow/mkpms; cheat / Frida)
- [rust-auto-dumper](entities/rust-auto-dumper.md) — Facepunch Rust C++ auto-dump pipeline (Akandesh; Steam build-ID monitoring + dump scripts; regex parse of dump.cs/script data → JSON, C++ headers, C# constants incl. encrypted fields; cheat `[Auto Dump]` / game:rust)
- [rust-auto-weapon-detection-opencv-example](entities/rust-auto-weapon-detection-opencv-example.md) — Facepunch Rust OpenCV weapon detection sample (C++; color filtering + weapon index mapping; screen-based state recognition; YouNeverKnow00)
- [rust-cheat-external](entities/rust-cheat-external.md) — Facepunch Rust external cheat (C/C++; driver / modding / SDK generation; cheat / game:rust [External]; gmh5225)
- [rust-cheat-external-main](entities/rust-cheat-external-main.md) — Facepunch Rust external framework (Disline1337; Windows driver IOCTL memory R/W + usermode overlay + gameplay SDK helpers; UnityPlayer/GameAssembly module handling; driver-assisted external + AC attack-pattern research; cheat / game:rust [External])
- [rust-dma-cheat](entities/rust-dma-cheat.md) — Facepunch Rust DMA cheat framework (IntelSDM; C++; ESP + recoil/FOV/lighting/admin-view mods; PCILeech/MemProcFS/Il2CppDumper/DMALibrary; hardware-assisted external cheat research; cheat / game:rust [DMA])
- [rust-dll-crab](entities/rust-dll-crab.md) — Rust Windows DLL injector (multiple methods; Injection Testing; gmh5225)
- [RustBlox](entities/rustblox.md) — Rust Windows Roblox launcher with TheWatcher client-side watchdog (cheat process/DLL injection/executor scan; isolated CDN install; FastFlags; egui dashboard; no1qq)
- [SetWindowHookEx (ekknod)](entities/setwindowhookex.md) — SetWindowHookEx preinjected DLL research (C; hooking; Some Tricks / Windows Ring3; ekknod)
- [setwindowshookex-injector](entities/setwindowshookex-injector.md) — SetWindowsHookExW injection-testing PoC (C/C++; hooking / modding / Unreal Engine; Injection Testing; gmh5225)
- [simple-setwindowshookexw-injector](entities/simple-setwindowshookexw-injector.md) — SetWindowsHookExW DLL injector (Skengdo; C++; PE parsing + registry helpers + optional cert spoofing; window-class targeting; Injection Testing)
- [rust-external](entities/rust-external.md) — Facepunch Rust external cheat (C/C++; rendering / networking; cheat / game:rust; gmh5225)
- [rust-external-1](entities/rust-external-1.md) — Facepunch Rust external cheat (C++; kernel driver/RPM; overlay ESP; EAC Unity; gmh5225)
- [rust-external-and-driver-aliencheats](entities/rust-external-and-driver-aliencheats.md) — Facepunch Rust external cheat (C++/C/C++; driver / overlays / memory analysis; cheat / game:rust [External]; gmh5225)
- [rust-external-cheat](entities/rust-external-cheat.md) — Facepunch Rust external (bootmgfw): WDM DriverRW IOCTL R/W + usermode Rust SDK; ESP/aimbot; DX9 ImGui overlay (C++; cheat / game:rust [External])
- [lord-abbot-rust-external-cheat](entities/lord-abbot-rust-external-cheat.md) — Facepunch Rust external framework (LordAbbot; C++; custom kernel driver memory R/W + external DLL; ImGui/DirectX overlay; ESP/aimbot/recoil; driver-assisted external + AC detection-surface research; cheat / game:rust [External])
- [rust-external-source](entities/rust-external-source.md) — Facepunch Rust external cheat source (C/C++; driver / shader / audio; cheat / game:rust [External]; gmh5225)
- [rust-internal](entities/rust-internal.md) — Facepunch Rust internal cheat framework (C++; Horizon core + DX11/ImGui; memory/map helpers; gmh5225)
- [kors-lol](entities/kors-lol.md) — Facepunch Rust internal cheat source (C++; ESP/hooks/Unity IL2CPP + ImGui menu; detours/spoofcall utilities; ZentifyZ [Internal])
- [rust-obfuscator](entities/rust-obfuscator.md) — Rust source obfuscator (proc macros; `cryptify` string encrypt / `labyrinth_macros` CFF / symbol rename; AC Obfuscation Engine)
- [rust-rustinternal](entities/rust-rustinternal.md) — Facepunch Rust Unity internal cheat (C++; Mono/IL2CPP hooks + game-object memory; ESP/aimbot/no-recoil; EAC; gmh5225)
- [rustsecure-re](entities/rustsecure-re.md) — Static RE of RustSecure client anti-cheat (Leeksov; loader/core DLL + 13 detection modules; Python/C# decrypt/deobfuscate; bypass notes; game:rust / Anti Cheat)
- [rust-u4pak](entities/rust-u4pak.md) — Rust UE4 .pak unpack/pack/list/check/mount (limited versions; Game Assets)
- [runtime-viewer](entities/runtime-viewer.md) — Objective-C Runtime Viewer for macOS and iOS (MxIris-Reverse-Engineering; Swift/ObjC; live ObjC/Swift metadata browse, export, framework loading, local/network runtime access; WIP injection; dynamic RE)
- [Ryujin](entities/ryujin.md) — x86 PE bin2bin protector/obfuscator (Bin2Bin transformation research; AC Obfuscation Engine)
- [Sark](entities/sark.md) — IDAPython Made Easy (IDA plugins / older IDA-6.x branch)
- [s2x](entities/s2x.md) — COD MW2 (2009) client mod framework: Arxan bypass, code healing, integrity neutralization, custom console, server emulation, modding infra (Brentdevent; cheat / game:cod mw2 modding)
- [s4killer](entities/s4killer.md) — BYOVD via Samsung S4 `probmon.sys` (IOCTL phys/virt kernel R/W; unsigned load / AC bypass research; gmh5225)
- [s4mapper](entities/s4mapper.md) — BYOVD driver mapper via Samsung S4 `SignalRgbDriver.sys` (memory-access IOCTLs; manual unsigned map; gmh5225)
- [s6-pcie-microblaze](entities/s6-pcie-microblaze.md) — PCIe DIY DMA toolkit for Xilinx SP605 (Verilog + MicroBlaze; raw TLP over Ethernet; Python host R/W + IOMMU audit; UEFI DXE / Hyper-V / Boot Backdoor PoCs; Cr4sh; DMA / FPGA research)
- [sakura](entities/sakura.md) — CS1.6 public cheat (C++; DirectX + OpenGL + anti-cheat research; cheat / game:cs1.6; bit-paper)
- [Sako RE Studio](entities/sako-restudio.md) — mobile-first Android disassembler/decompiler (Maxamedxasa; Capstone + IR decompiler; APK/ELF/PE/DEX; ptrace debugger; call graph; SakoScript plugins; SQLite projects; optional AI explain; offline Jetpack Compose; Cheat RE Tools)
- [saturn-mapper](entities/saturn-mapper.md) — Windows kernel PE manual mapper (iqvw64e.sys; BYOVD / unsigned map)
- [sumap (ekknod)](entities/sumap.md) — EFI manual map (C/C++; pre-boot unsigned driver PE mapping; driver development / memory analysis; cheat / EFI Manual Map)
- [sapphire](entities/sapphire.md) — FFXIV private-server emulator (patch 3.3 branch; in development; Private Server / MMORPG; gmh5225)
- [saphire](entities/saphire.md) — internal CS:GO cheat framework (M3351AN; C++; DirectX 9 ImGui overlay menu; FreeType fonts + custom widgets; built-in code editor; modular cheat interface with config; cheat UI framework study; [Internal])
- [Samidare](entities/samidare.md) — M3351AN external CS2 cheat (C++; FIFO-based kernel driver comm + DirectX overlay; offset management + game-data reads + coordinate math; driver-assisted external cheat + overlay rendering research; cheat / game:cs2 [External Ring3/Ring0])
- [Sanctum](entities/sanctum.md) — experimental Windows EDR PoC (0xflux; Rust; kernel driver + user-mode engine + Tauri UI; process/thread/filesystem/syscall monitoring; ETW consumers, minifilter, kernel hooking/containment; low-level defensive tooling research; README [EDR])
- [sea-of-choros](entities/sea-of-choros.md) — Sea of Thieves modding / SDK generation / hooking scaffold (C/C++; Unreal; cheat / game:sea of thieves; gmh5225)
- [Seaside](entities/seaside.md) — internal CS:GO visual cheat framework (0TheSpy; C++; Source interfaces, hooking, netvars, pattern scan; ImGui DirectX 9 menu; aim, recoil, skin/inventory, event listeners, config; internal cheat architecture research; cheat / game:csgo [Internal])
- [SENinja](entities/seninja.md) — Binary Ninja symbolic execution plugin (Python; BN IL path exploration; constraint tracking, unreachable-code detection, interactive UI; Cheat Symbolic Execution; borzacchiello)
- [so_loader](entities/so-loader.md) — C/C++ Android native `.so` memory loading (Cheat / Android memory loading)
- [sbox](entities/sbox.md) — C++ compile-time AES-128 / S-box string obfuscation (Obfusk8 spin-off)
- [scc](entities/scc.md) — open-source shellcode compiler (Vector35; C/C++ CMake; compact PIC output; Binary Ninja integration; internal CTF origin; shellcode compiler / exploit-dev codegen)
- [scfw](entities/scfw.md) — cross-platform C++ Windows shellcode framework (AC shellcode engine & tricks)
- [scrcpy](entities/scrcpy.md) — upstream Android screen mirror/control over USB/TCP (C/Java; audio, recording, virtual display, HID input; low latency; no root; Genymobile)
- [screencapture](entities/screencapture.md) — Windows DXGI Desktop Duplication capture library (C++/C#; multi-monitor GPU copy; `[DX11]`)
- [screenshot](entities/screenshot.md) — Windows capture-method comparison (BitBlt/DDA/PrintWindow/DWM; AC screenshot research; README `[BitBlt]`; gmh5225)
- [screenshot-detection-bypass](entities/screenshot-detection-bypass.md) — C++ PoC; gdi32 BitBlt hook returns clean frame to AC screenshot pipelines; class-based hook; educational capture-hook evasion (Mes2d; README `[BitBlt]`)
- [segcap](entities/segcap.md) — D3D12 hook extracting per-pixel object-ID segmentation masks from shipping UE4/UE5 retail titles (MinHook command intercept + CustomDepth runtime introspection; automated virtual-gamepad capture; masks/RGB/JSON export; Qervas)
- [SecureGame](entities/secure-game.md) — Pong-like POC; core game logic in Windows VBS enclave; host render/input + enclave DLL state/rules; SDL2; trusted execution / anti-cheat research (SamuelTulach)
- [SEH Helper](entities/seh-helper.md) — Binary Ninja plugin: inspect PE Structured Exception Handler chains (list entries, cursor handler, follow context; Python; EliseZeroTwo; Windows PE static RE)
- [sguard_limit](entities/sguard-limit.md) — Windows ACE-Guard client restriction/patch toolkit (H3d9; UM C++ + kernel C/asm; virtual memory ops, VAD traversal, suspend/resume, detour hooks; anti-cheat RE / bypass experimentation)
- [sherloq](entities/sherloq.md) — open-source digital image forensics GUI (Python; ELA, EXIF, frequency/gradient/histogram, cloning detection, TruFor NN; AC screenshot tampering / authenticity review; GuidoBartoli)
- [shellcode-factory](entities/shellcode-factory.md) — C++ shellcode factory tooling (AC shellcode engine & tricks)
- [shellcode-obfuscation](entities/shellcode-obfuscation.md) — Caesar-cipher encoding pipeline (Python obfuscator + C VirtualAlloc loader; AV bypass-rate measurements; academic lab)
- [Shellcoder](entities/shellcoder.md) — Binary Ninja plugin: multi-arch shellcode assemble/disassemble; inline/spaced hex, Python byte strings, C arrays; rapid payload iteration (0xricksanchez; RE / exploit prototyping)
- [shellcrypt](entities/shellcrypt.md) — Cross-platform Python shellcode obfuscation; AES/ChaCha20/RC4/Salsa20/XOR; chained encode/compress; C/C#/Go/Rust/Nim/Python/PowerShell emit (Lavender-exe; payload packing / loader prototyping)
- [shellcode-EntropyFix](entities/shellcode-entropyfix.md) — Shannon entropy reduction for shellcode/packed payloads (English-word substitution / padding; AV/EDR evasion)
- [shellcode-plain-sight](entities/shellcode-plain-sight.md) — C demo; hide shellcode in large randomized RW region at random offset; VirtualProtect to RX; post-exec zero cleanup (LloydLabs; memory evasion / AC detection testing)
- [ShellcodeFluctuation](entities/shellcode-fluctuation.md) — cyclic shellcode encrypt/decrypt; RW/NoAccess↔RX fluctuation (mgeeky; page protection)
- [Shelter](entities/shelter.md) — Kudaes Rust ROP-based sleep obfuscation (AES-128 in-memory/whole-PE encrypt; strips execute permission while sleeping; ROP resume; stack spoofing + indirect syscalls; avoids timer/APC patterns; assembly stubs; in-memory evasion research)
- [ScyllaHide-For-IDA9.0RC](entities/scyllahide-for-ida9.0rc.md) — IDA 9.0 SDK ScyllaHide anti-anti-debug build (C/C++ hook libs, injector, debugger plugins; masks debugger artifacts; TKazer)
- [ScyllaHideDetector2](entities/scyllahidedetector2.md) — ScyllaHide Detector V2 (C/C++; debug hide / byte restore; Anti Debugging)
- [Scythe AntiCheat](entities/scythe-anticheat.md) — Minecraft Bedrock behavior-pack AC (JavaScript/JSON; Scripting API; combat/movement/packet-abuse/chat-spam/scaffold detection; moderation commands + player stats; Realms/worlds/servers; MrDiamond64; Anti Cheat / game:minecraft)
- [SDCM](entities/sdcm.md) — Microsoft Partner Center CLI: WHQL/Attestation submissions, signed driver download, Windows Update shipping labels
- [sdk](entities/sdk.md) — Source-engine RE SDK headers (netvars / interfaces; likely CS:GO; C++)
- [sdkgenny](entities/sdkgenny.md) — general C++ SDK generation library (cursey; PEGTL optional parser; cheat / sdk codegen)
- [SE-tools](entities/se-tools.md) — Switch homebrew memory/cheat toolkit (Atmosphere dmnt:cht; scanner / pointer / viewer)
- [SEWindows](entities/sewindows.md) — Windows TPM measured-boot verifier (TCG event log, PCR replay, WBCL policy, EK/AK remote attestation; CPU virt/IOMMU/Secure Boot/VBS/HVCI/DSE/blocklist; fsquirt)
- [Sentinel Anti-Cheat](entities/sentinel-anti-cheat.md) — educational usermode AC daemon (HEEAAP; suspended launch + pre-resume attach; remote-debugger/HWBP/INT3 polling; log/suspend/terminate policies; TaskDialog splash; Open Source Anti Cheat System)
- [Sentinel AntiCheat (NeoForge)](entities/sentinel-anticheat-neoforge.md) — NeoForge server-side MC mod (Charlie328402; Java; tick/event movement/combat/x-ray checks; JSONL log + Discord violation bot; alert-only staff workflow; Anti Cheat / game:minecraft)
- [SentinelAC](entities/sentinelac.md) — OSS Windows AC skeleton (SDK + UM service + ObRegisterCallbacks; overlay / stack-walk)
- [Sensum](entities/sensum.md) — internal CS:GO cheat (actively developed; cheat / game:csgo)
- [Serenity.gg-FN-and-Loader](entities/serenity-gg-fn-and-loader.md) — Fortnite: kernel driver + shader work + module loader (C/C++; cheat / game:fortnite; gmh5225)
- [Serious Engine Base](entities/serious-engine-base.md) — open-source Croteam Serious Engine core (Serious Sam; C/C++; render/world/entities/network/audio/scripting; VS + Ogg/Vorbis; Game Engine / source)
- [SF_TRT_61](entities/sf-trt-61.md) — AMXZzzz Windows C++ computer-vision aiming framework (DXGI capture; OpenCV; ImGui; TensorRT + DirectML/ONNX; YOLO-style models; PID/FOV movement + trigger logic; multiple input injection; AI game automation + AC evasion research; cheat / Machine Learning YOLO)
- [shibari](entities/shibari.md) — C++/C PE/PE+ multi-file linker (merge into one; modding; Anti Cheat → Binary Packer)
- [ShinobiX](entities/shinobix.md) — live browser MMORPG (React/Vite + TypeScript API + Supabase); server-authoritative combat/economy/saves; settlement receipts, currency ledgers, save locks; documented auth/reward-integrity patterns + audit docs (Timehue; Anti Cheat / Open Source Anti Cheat System)
- [shader-injector](entities/shader-injector.md) — D3D12 pixel-shader runtime inject/replace for FF7 Rebirth PC (MinHook + ImGui live edit; DX12 interceptor adaptable to other titles; DirectX / hook)
- [Shard](entities/shard.md) — Paper/Folia Minecraft AI anti-cheat plugin (Kotlin Gradle; PacketEvents; player tick data to remote inference API; SQLite/MySQL/MariaDB + Redis cross-server alerts; monitoring, profiling, punishment rules, WorldGuard/Geyser integrations; KaelusAI; Anti Cheat / game:minecraft)
- [Shark](entities/shark.md) — Windows kernel research toolkit (9176324; C/C++/assembly; x86/x64 driver + loader; runtime PatchGuard disable; VS/NMAKE builds; virtualization-assisted loading references; cheat / PatchGuard-related)
- [Shadow](entities/shadow.md) — iOS jailbreak detection bypass for modern jailbreaks (cheat / iOS jailbreak; per-app success not guaranteed)
- [shadow-stack-walk](entities/shadow-stack-walk.md) — CET/HSP shadow-stack stack walk to catch thread stack spoofing (`CaptureStackBackTrace` / `StackWalk64`; gabriellandau; Detection:Spoof Stack)
- [shprotect-ac](entities/shprotect-ac.md) — server-first Roblox Luau AC (movement/remote spam/fly/noclip; heartbeat/watchdog; scoring/rollback/kick)
- [shredder-rs](entities/shredder-rs.md) — x86_64 polymorphic instruction shredding (Rust)
- [ShredOS x86_64](entities/shredos-x86-64.md) — bootable Buildroot Linux disk eraser (nwipe; DoD/Gutmann/PRNG/verification; multi-drive; BIOS/UEFI IMG/ISO; optional wipe certificates/logs; security/forensics/IT media sanitization; PartialVolume)
- [Shoggoth](entities/shoggoth.md) — polymorphic x86/x64 shellcode encoder (asmjit JIT; dual encryption + randomized decoders; COFF/PE reflective loaders; Polymorphic Encryptor)
- [shootergame](entities/shootergame.md) — Unreal ShooterGame Demo with MIT improvements (Cheat / Game Engine Explorer:Unreal; cqcallaw)
- [shootergame-hack](entities/shootergame-hack.md) — Unreal ShooterGame Demo offensive research (C/C++; rendering / debugging; Cheat / Game Engine Explorer:Unreal; gmh5225)
- [showstopper](entities/showstopper.md) — Windows anti-debug exploration tool (CheckPointSW; malware/research check collection; exposes function addresses; debugger attach/compare across tools, plugins, mitigations; anti-anti-debug validation; Anti Debugging)
- [ShimCacheParser](entities/shimcacheparser.md) — AppCompat ShimCache parser (SYSTEM hive; paths/timestamps/flags; CSV/timeline; AC/IS forensics)
- [Shirakumo](entities/shirakumo.md) — M3351AN usermode RPM/WPM proxy PoC (C++; named-pipe IPC; read/write in separate process; optional DLL proxy; experimental x64-only; process-separated memory access for game tooling and evasion research; cheat / RPM for Windows)
- [Shtreeba](entities/shtreeba.md) — Windows manual-map DLL injector (MMap library; UI process picker; Injector)
- [sig-database](entities/sig-database.md) — IDA FLIRT sigs for Linux libs (OpenSSL/Ubuntu amd64·i386; RE / library ID)
- [SigFlip](entities/sigflip.md) — patch Authenticode signed PE without breaking signature (WIN_CERTIFICATE inject; SigLoader; Some Tricks / Ring3)
- [SigThief](entities/sigthief.md) — steal PE Authenticode signatures (certTable transplant; Some Tricks / Ring3)
- [SignatureKid](entities/signature-kid.md) — header-only C++ Authenticode signature theft + registry-hook trust patching (WIN_CERTIFICATE; code-signing bypass research)
- [StealingSignatures](entities/stealing-signatures.md) — C++ PE Authenticode security-directory blob copy; certificate metadata transplant without valid signature (Sentient111; verifier/tamper-detection testing)
- [sign-expired](entities/sign-expired.md) — signtool XmlLite.dll sideload; patch cert/time APIs to bypass expiry (Sign Leaked Cert)
- [sigmakerex](entities/sigmakerex.md) — enhanced IDA Pro signature maker (code/IDA/x64dbg formats; uniqueness verify; batch; clipboard; cheat / IDA Plugins)
- [Signature-Forge](entities/signature-forge.md) — x86 wildcard byte signature generator (Elinam03; FastAPI + React/Electron; x64dbg/CE/raw hex input; anchor scoring; AOB/mask/IDA/CE/C/x64dbg export; cheat / RE Tools)
- [SpartanEngine](entities/spartan-engine.md) — C++ research game engine (bindless GPU-driven renderer; real-time GI + hardware ray tracing; high-frequency physics; engine subsystems/assets/build scripts; engine programmers + graphics researchers; Game Engine / Research-focused game engine)
- [spf-ghidra-pattern-helper](entities/spf-ghidra-pattern-helper.md) — Ghidra script: SPF-style byte signature generate/search (Pattern Generator/Finder; wildcards/ranges/alternation; SPF-Framework PatternFinder compat; ATS/ETS2 plugin RE; TrackAndTruckDevs)
- [SignToolEx](entities/signtoolex.md) — Sign Leaked Cert; expired/leaked Authenticode signing; no timestamp spoofing (Anti Cheat → Sign Tools)
- [SignToolGUI](entities/signtoolgui.md) — Windows Forms signtool.exe GUI (cert store / PFX / Azure Trusted Signing; batch sign; Anti Cheat → Sign Tools)
- [SilentMoonwalk](entities/silent-moonwalk.md) — TRUE call-stack spoofer PoC from joint stack-spoofing research (klezVirus; Cheat Spoof Stack)
- [Silent Packer](entities/silent-packer.md) — pure C ELF/PE packer (section insert, code caves, text infection; XOR/AES; loader/asm unpack stub; RE/obfuscation/defensive packed-binary study; Anti Cheat → Binary Packer)
- [SJCAM](entities/sjcam.md) — SJ4000 Air (Allwinner V3) firmware RE; AVIOCTRL TCP client; Lelouch Android ARM CFW; EGON/BCL1 parsers; CVE-2026-52656 PoC
- [SkipHook](entities/skiphook.md) — trampoline skips first insn (bypass JMP/INT3 AC hooks; HDE)
- [sk3wldbg](entities/sk3wldbg.md) — IDA Pro Unicorn in-IDA emulation (x86/ARM/MIPS; register/memory setup; step without live target; Cheat Unicorn)
- [skCrypter](entities/skcrypter.md) — C++ header-only compile-time XOR string crypter (constexpr; AC Compile Time / String Crypter)
- [hwid_spoofer (Skotschia)](entities/skotschia-hwid-spoofer.md) — Windows C++ HWID spoofer PoC; disk serial / SMART / SMBIOS; low-level helper modules + Visual Studio project files; educational anti-cheat evasion research (Skotschia; cheat / HWID)
- [SnakeRoyal](entities/snake-royal.md) — C++ lightweight multiplayer Snake prototype (custom networking; serialization/sockets; CLI host/join; optional headless server; real-time multiplayer learning; Game Develop / Mini Game With Server; ZehMatt)
- [SkyEngine](entities/sky-engine.md) — WoW Lua unlocker (adde88; C++; protected Lua / taint-state reset; scripting research / cheat prototyping / AC detection study; cheat / game:wow [Wow Lua Unlocker])
- [Skylicht Engine](entities/skylicht-engine.md) — lightweight Irrlicht-evolved engine (Android/iOS; Game Engine source)
- [Skynet](entities/skynet.md) — multi-user Lua actor-model game server framework (Chinese industry staple; Game Network / source)
- [AntiCheat (SLAUC91)](entities/slauc91-anticheat.md) — Windows rootkit/cheat scanner (C++ console + partial KM driver; hooks, handles, drivers, modules, PE/PEB, USN/DNS; user-mode IAT + kernel MSR/IDT/SSDT/IRP hook detection; Anti Cheat)
- [SlothBP](entities/slothbp.md) — x64dbg collaborative breakpoint manager (Cheat x64dbg Plugins)
- [sloader](entities/sloader.md) — alternative Linux ELF dynamic loader (modern C++; replace glibc ld-linux.so; library load + symbol resolution; linker-internals research; Anti Cheat → Binary Packer `[ELF]`)
- [stelf-loader](entities/stelf-loader.md) — Linux x64 ELF→self-loading shell script toolchain (Python + NASM shellcode; segment map, mprotect restore, compressed/base64/one-liner modes; exploit/payload/ELF loader research; Anti Cheat → Binary Packer `[ELF]`)
- [SmallWorld](entities/smallworld.md) — multi-emulator binary harness (angr/Ghidra/PANDA/Unicorn; coverage/crash/firmware)
- [Smep-Bypass](entities/smep-bypass.md) — Windows SMEP bypass PoC (CR4 / ROP / vuln-driver; kernel exec user shellcode)
- [smap](entities/smap.md) — Windows kernel shellcode mapper (BYOVD PIC shellcode → kernel pool + exec primitive; no PE image; btbd; Scatter Manual Map)
- [SmKernel-CSGO](entities/smkernel-csgo.md) — educational CS:GO kernel-driver PoC (DeiVid-12; shared-memory KM↔UM comm; module-base lookup + process memory R/W; triggerbot sample; detectability tradeoffs vs kernel AC; cheat / game:csgo [Driver])
- [smm (ekknod)](entities/smm.md) — SMM cheat (C/C++; driver development / graphics / networking; cheat / SMM; Ring -2 below-OS research)
- [SmmBackdoorNg](entities/smm-backdoor-ng.md) — UEFI SMM backdoor framework (Cr4sh; DXE + SMM firmware + Python Windows/Linux clients; flash-image infection or pre-boot DMA-assisted loading; privilege escalation / hypervisor-interaction demos; firmware persistence / pre-OS research; README [UEFI backdoor])
- [SmmInfect](entities/smm-infect.md) — SMM backdoor research framework (Oliver-1-1; UEFI/EDK2 SMI handler + Windows/Linux clients; BIOS patch workflows; firmware trust-boundary / persistence research; README [SMM Driver])
- [smt-server](entities/smt-server.md) — Rust QF_BV SMT solver server (SMT-LIB 2; bit-blast→SAT; C++/Python clients; binary analysis/deobfuscation; LLVMParty; Cheat constraint-solver lane)
- [smite-esp-aimbot](entities/smite-esp-aimbot.md) — Smite internal ESP/aimbot reference (JackBro; C++; reverse-engineered UE3 SDK headers + hook helpers; target acquisition + on-screen ESP; learner base for older UE3 titles; cheat / game:smite [Internal])
- [SniParInject](entities/sniparinject.md) — Python Scapy game packet sniffer/parser (YAML opcode→field maps; IP/port filter; inject planned; Mana Plus demo; cheat / Packet Sniffer&Filter; airvzxf)
- [SoftGLRender](entities/softglrender.md) — tiny C++ software rasterizer + OpenGL/Vulkan comparison backends (Renderer)
- [Software D3D9](entities/software-d3d9.md) — software Direct3D 9 implementation targeting real games/programs (DirectX Emulation / Compatibility; code-tom-code)
- [Socket.IO](entities/socket-io.md) — Node.js/browser real-time event I/O (WS + long-poll; Game Network)
- [Splitgate-Internal](entities/splitgate-internal.md) — Splitgate internal (C/C++; cheat / game:splitgate)
- [SubGetVariable (ekknod)](entities/sub-get-variable.md) — EFI GetVariable RPM (C/C++; kernel-level driver development / graphics; cheat / EFI RPM)
- [subhook](entities/subhook.md) — super-simple C/C++ inline hook lib (Win/Linux/macOS; x86 32/64; cheat / hook research)
- [subzero-fortnite-cheat](entities/subzero-fortnite-cheat.md) — SubZero Fortnite external cheat (Saxmason; C++ VS; kernel-driver RPM; DX9 ImGui overlay; mesh visibility aimbot; NtUserSendInput + stack/library spoofing + XOR obfuscation; cheat / game:fortnite [External])
- [Solemn](entities/solemn.md) — HVCI HvciDisallowedImages blocklist CLI (Windows Security Features)
- [source-engine](entities/source-engine.md) — open TF2-era Source Engine tree (CI / cross-platform; Game Engine / source)
- [source-engine-2003](entities/source-engine-2003.md) — early HL2-era Source engine archival snapshot (2003 tree; material/graphics, game DLL logic, legacy VS toolchains; Game Engine / source; UTINKA)
- [source-engine-2007](entities/source-engine-2007.md) — Orange Box Source Engine 2007 source mirror (se2007; networking/demos/rendering; Game Engine / source; gmh5225)
- [SourceRenderer](entities/source-renderer.md) — Rust toy engine/renderer (K0bin; Bevy infra + custom Vulkan 1.3/Metal/WebGPU; Source BSP/VPK/VMT/VTF/MDL + glTF loaders incl. CS:GO; bindless/RT/PBR; map/asset RE; Game Engine / source)
- [source-sdk-2013](entities/source-sdk-2013.md) — official Valve Source SDK 2013 (HL2/HL2DM/TF2; VS + Steam Runtime builds; non-commercial mods; Game Engine / source; ValveSoftware)
- [source-sdk-orangebox](entities/source-sdk-orangebox.md) — Orange Box Source SDK tree (C/C++; shaders/rendering/drivers; Game Engine / source; gmh5225)
- [sourceengineexplorer](entities/sourceengineexplorer.md) — Source Engine² explorer (cheat/debug, exploit dev, network emulator, cloud decompiler; Explorer)
- [Source2Gen](entities/source2gen.md) — Source 2 SDK generator (neverlosecc/praydog; C++ class/enum headers; game engine explorer:source)
- [source2sdk](entities/source2sdk.md) — generated Source 2 SDKs for multiple games (C++; game engine explorer:source)
- [source2dumps](entities/source2dumps.md) — aggregated Source 2 netvars/interfaces/class IDs (Dota 2, Artifact, HL:Alyx, Sandbox; C++ headers; [Dump])
- [Splendid Implanter](entities/splendid-implanter.md) — BattlEye-compatible user-mode injector (secret.club; exploits UM BE flaw; Injector)
- [Spoof-RetAddr](entities/spoof-ret-addr.md) — x64 WinAPI return-address spoofing PoC (HulkOperator; C + NASM; stack manipulation; call-stack obfuscation education; Cheat Spoof Stack)
- [Spoofer (AlfredIU)](entities/spoofer.md) — Windows C++ mixed overlay cheat + HWID-evasion package (user-mode aimbot/ESP/entity cache/projectile prediction via DirectX9 ImGui; kernel driver artifacts; cheat / HWID)
- [SpoofingCollection](entities/spoofing-collection.md) — Magisk + LSPosed Android device-fingerprint profiles (build props + Build API hooks; Play Integrity / attestation research)
- [Speed-Hack](entities/speed-hack.md) — Windows C++ Visual Studio injectable DLL (Cheat Engine–style Detours timing hooks; keyboard slowdown/accelerate/restore; cheat practice + AC time-manipulation research; Letomaniy)
- [Speedhack](entities/speedhack.md) — Lightweight Windows Detours timing-API hook DLL (accelerate/slow/pause perceived runtime; cheat / SpeedHack; time-tampering research)
- [Spoofer-AMIDEWIN](entities/spoofer-amidewin.md) — AMIDEWIN HWID / system-identifier spoof research (C/C++; Cheat HWID)
- [spoof-stack-SafeCall](entities/spoof-stack-safecall.md) — Windows return-address spoofing library (SafeCall; fake legitimate stack returns; Cheat Spoof Stack; gmh5225)
- [sprite-sheet-creator](entities/sprite-sheet-creator.md) — AI 2D pixel-art sprite sheets & parallax backgrounds (fal.ai; Next.js; walk/jump/attack/idle, sandbox; AI category)
- [spark-engine](entities/spark-engine.md) — cross-platform C++23 3D game engine (Krilliac; DX12/Vulkan/Metal RHI, ECS, Jolt Physics, ImGui editor; dedicated servers, replication, prediction, lag compensation, encryption, packet validation, memory integrity checks; ARPG/MMO/MMOFPS samples; Game Engine / source)
- [sqlite-unity3d](entities/sqlite-unity3d.md) — Unity C# SQLite save/load sample (OguzKaira; DatabaseManager; player coordinates via StreamingAssets; keyboard shortcuts; learner persistence foundation; Game Engine / Unity SQLite)
- [SpookiMystic-GTA-Leak](entities/spookimystic-gta-leak.md) — leaked GTA V online mod-menu source (RAGE scripting hooks; money drops / teleport / griefing; cheat / `[Menu]`; gmh5225)
- [SpyExternal1337hax](entities/spy-external1337hax.md) — external CS:GO cheat framework (0TheSpy; C++; Win32 + Direct3D9 overlay; out-of-process memory reads; BSP parsing, obfuscation helpers, configurable features; external cheat design reference; cheat / game:csgo [External])
- [Squally](entities/squally.md) — 2D platformer teaching game hacking via gameplay (C++ Cocos2d-x; values/operators/logic for memory reasoning; Win/macOS/Linux; Squalr)
- [Squalr-Sharp](entities/squalr-sharp.md) — C#/.NET Windows memory editor (SIMD scan, pointers, NASM asm inject, WPF GUI + CLI + engine API, .NET object inspect; Squalr)
- [StackSpoofer_Macro](entities/stack-spoofer-macro.md) — easy-to-use C/C++ macro for stack spoofing (gmh5225; Cheat Spoof Stack)
- [speedfan-exploit](entities/speedfan-exploit.md) — SpeedFan `Speedfan.sys` BYOVD (IOCTL → physmem R/W; legacy monitoring-tool kernel exploitation; gmh5225)

- [simple-cs-16-multihack](entities/simple-cs-16-multihack.md) — CS1.6 multihack (C/C++; asset pipelines + Unity + hooking; cheat / game:cs1.6; execnone)
- [SimpleFPSTemplate](entities/simple-fps-template.md) — UE4 FPS demo template (bloated C++ starter; Game Develop / Unreal source)
- [simple-quest](entities/simple-quest.md) — UE5.6+ event-driven questline plugin (TheGeebus; C++ + Blueprint; visual graph authoring; objectives/prerequisites/rewards; quest components; save/load + SimpleCore; PIE debugging; Plugins:Unreal)
- [simple-eft-base](entities/simple-eft-base.md) — Escape From Tarkov OOP cheat base (C/C++; driver / rendering / animation; stale offsets)
- [simple-eft-superman-training-bot](entities/simple-eft-superman-training-bot.md) — EFT Arduino HID training automation (.ino sketches + Python coords; keyboard/mouse emulation; skill-grinding; ZhaoKunqi)
- [Simple Manual Map Injector](entities/simple-manual-map-injector.md) — compact Windows manual-map DLL injector (x86/x64; optional PE header/section strip; configurable protections; x64 exception handling; sample loader + test DLLs; Manual Map; TheCruZ)
- [SimpleMemoryEditor](entities/simple-memory-editor.md) — portable Windows memory scanner/editor (C + custom NCRT + Win32 GUI; process attach, value scan/edit/freeze, equal/increased/decreased filters; static 32/64-bit XP–Win10 builds; external game memory editing; daveymcq)
- [Simple-MmcopyMemory-Hook](entities/simple-mmcopymemory-hook.md) — educational Windows kernel driver hooks MmCopyMemory to observe AC scanner memory-copy telemetry; intentionally simple/unstable/detectable; Spuckwaffel; cheat / Hook MmcopyMemory
- [simple-rust-base](entities/simple-rust-base.md) — Facepunch Rust OOP cheat base (C/C++; driver / rendering / modding; legacy)
- [simple-rust-hack](entities/simple-rust-hack.md) — Facepunch Rust simple cheat source (C/C++; cheat / game:rust; gmh5225)
- [SimpleUEFI](entities/simpleuefi.md) — Visual Studio + EDK-II UEFI app dev framework (MSVC templates, property sheets, Python setup; bootkit / UEFI security research; Th3Spl)
- [simple_ac_internal_cheat](entities/simple-ac-internal-cheat.md) — educational C++20 AssaultCube internal (Detours DX / ImGui / ESP / aimbot)
- [simpleperf_demo](entities/simpleperf-demo.md) — Android simpleperf / Perf demo (app profiling)
- [simplify](entities/simplify.md) — Android Dalvik deobfuscation framework (CalebFenton; Java; virtual execution + optimizer passes — constant propagation, dead code, reflection cleanup; obfuscated APK/DEX analysis; `[Java]`)
- [sinmapper](entities/sinmapper.md) — user-mode mapper into signed-driver section via physmem + PTE flip; trace cleanup; stealthy kernel load (armvirus; Manual Map In Signed Driver)
- [sogen](entities/sogen.md) — Windows userspace PE emulator (Unicorn + Capstone; minidump / Zstd state; React web UI; FlatBuffers trace IPC; Windows User Space Emulator)
- [snapshot](entities/snapshot.md) — Rust WinDbg extension; JSON CPU register state + VM physical memory crash dump for snapshot-based kernel fuzzing (0vercl0k; dbgeng cdylib; full-kernel/active-kernel modes; companion to wtf; WinDbg extension reference)
- [stackplz](entities/stackplz.md) — Android eBPF stack tracing + hook analysis (SeeFlowerX; Go + C eBPF; syscall/uprobe/hardware-breakpoint capture on ARM64; args/registers/stacks; filtering, structured output, optional Frida RPC; rooted mobile security / game protection RE; cheat / eBPF-based debugger for Android)

- [Static String Obfuscation](entities/static-string-obfuscation.md) — Zig compile-time static string crypter (build-time randomized XOR keys; stripped x86_64 Windows; lightweight runtime decrypt; AC String Crypter; Reijaff)
- [Static-Variables-Obfuscator-UE4](entities/static-variables-obfuscator-ue4.md) — UE4 static-variable obfuscation vs memory scanners
- [STB (gmh5225)](entities/stb-gmh5225.md) — compile-time IDA-style string-to-array for stack trace building / spoofing research (gmh5225; Cheat Compile Time)
- [stb](entities/stb.md) — single-header public-domain C libs (stb_image / truetype / vorbis; Image Codec)
- [stitch](entities/stitch.md) — x86 binary rewriting / obfuscation framework (function relocation, global ref patching, branch handling; CMake examples; badhive)
- [strolle](entities/strolle.md) — Rust real-time renderer (dynamic GI; ReSTIR; wgpu standalone or Bevy plugin; consumer GPU; Game Engine / Real-time rendering engine)
- [static-analyzer-factory](entities/static-analyzer-factory.md) — Rust LLVM IR static analysis (C/C++; pointer/value-flow/taint/IFDS; abstract interpretation, points-to, call graphs; Python SDK, CLI, SARIF/HTML export)
- [sts2-kitlib](entities/sts2-kitlib.md) — Slay the Spire 2 in-game mod dev toolkit (C# Harmony; dev rail, cheat presets, Harmony analysis, hooks, MCP bridge; WRXinYue; cheat / Game Develop)
- [SteamAntiAntiDebug](entities/steam-anti-anti-debug.md) — bypass Steam anti-debug for debugger attach (x64dbg; Steam)
- [steam-hook-render-poc](entities/steam-hook-render-poc.md) — Steam GameOverlayRenderer render-pipeline hijack PoC (custom draw via trusted overlay; gmh5225; README [Steam])
- [steam-overlay-x64](entities/steam-overlay-x64.md) — Steam overlay / modding research (C; memory analysis)
- [StrongSteam](entities/strongsteam.md) — kernel-assisted Steam overlay GDI renderer (Splitx12; C++/ASM; Steam-overlay-style in-game visual demo; overlay / cheat UI rendering research; README [GDI + Steam])
- [star-rail](entities/star-rail.md) — Honkai: Star Rail cheat: DirectX / hooking (C/C++; cheat / game:honkai star rail; gmh5225)
- [starrail-ace-b](entities/starrail-ace-b.md) — Honkai: Star Rail Tencent ACE RE (kernel driver, integrity checks, detection/bypass; explore anticheat; gmh5225)
- [starrail-s-gc](entities/starrail-s-gc.md) — Honkai: Star Rail simple cheat (C/C++; Unity / hooking; cheat / game:honkai star rail; gmh5225)
- [starrailcopilot](entities/starrailcopilot.md) — Honkai: Star Rail automation copilot (Python; screen recognition + input; daily/stamina/farming; cheat / game:honkai star rail [Script]; gmh5225)
- [Stoic](entities/stoic.md) — Block JVMTI Android attach tooling (debuggable API 26+; no APK mod; live Java/Kotlin hooks, heap inspection, plugin system; Android RE / developer tooling)
- [Stockfish](entities/stockfish.md) — open-source chess engine (alpha-beta + NNUE eval; UCI; C++; Chess Engine / game AI)
- [Storm Engine](entities/storm-engine.md) — Akella Sea Dogs/PotC C++ engine (DX9 / physics / scripting; Game Engine source)
- [Storytime](entities/storytime.md) — MapleStory remake (branching dialogue / quest progression / interactive storytelling; Game Develop / source)
- [Stresser](entities/stresser.md) — endpoint security platform (AvivShabtay; C++ UM/KM agents + centralized management; ETW telemetry, dynamic/static detection, policy/response; malware defense / AC-adjacent endpoint experiments)
- [strings2](entities/strings2.md) — extract strings from binary files and process memory (C/C++; modding / memory analysis; cheat / RE tools)
- [Strings x64dbg](entities/stringsx64dbg.md) — x64dbg plugin: dedicated string search/browse tab (C++/Qt; SearchStringsWidget; Cheat x64dbg Plugins)
- [Stride](entities/stride.md) — open-source C# 3D engine (formerly Xenko; PBR / Vulkan+D3D+GL; Game Engine)
- [STP](entities/stp.md) — Simple Theorem Prover (bitvector/array SMT; MiniSat/CryptoMiniSat; MBA lane)
- [SuperDllHijack](entities/super-dll-hijack.md) — generic Windows proxy-DLL hijack helper (C/C++; renamed original + replacement DLL; DllMain export passthrough; loader/sideload research; anhkgg; Cheat / DLL Hijack)
- [SuperMega](entities/super-mega.md) — PE infection shellcode loader (Cordyceps parasitic injection; web UI; anti-emulation; static-analysis evasion; dobin)
- [SuperSplat](entities/supersplat.md) — PlayCanvas web 3D Gaussian Splat editor (PLY/splat export; 3D Graphics / AI splat)
- [SwishDbgExt](entities/swishdbgext.md) — WinDbg extension; expand/fix built-in commands (Matt Suiche / Comae; WinDbg Plugins)
- [swsim](entities/swsim.md) — pure-software USIM/UICC SIM simulator (APDU/MILENAGE; SIMtrace2; Cellular/SIM)
- [Sushi](entities/sushi.md) — PatchGuard (PG) monitoring (tandasat; cheat / PatchGuard-related)
- [Swift-String-Obfuscator](entities/swift-string-obfuscator.md) — Swift string crypter (AC Compile Time / String Crypter)
- [swift-ida](entities/swift-ida.md) — IDA Pro plugin: retag Swift/Golang/fastcall conventions + tuple-like multi-return structs (Python; cheat / IDA Plugins)
- [swiftshield](entities/swiftshield.md) — Swift identifier obfuscator for iOS (SourceKit rename; vs RE/tweaks)
- [swap-control-ioctl](entities/swap-control-ioctl.md) — SpeedFan.sys `IRP_MJ_DEVICE_CONTROL` dispatch trampoline hijack; process memory copy/alloc/protect + module-base ioctl handlers (Barracudach; Hijack IRP SpeedFan.sys; driver comm hook / AC detection study)
- [swapchain-bottleneck](entities/swapchain-bottleneck.md) — DXGI swapchain/MPO overlay injection architecture analysis (Present-hook collisions, TDR cascades, AC whitelist friction; dantebuilds)
- [super-mario-bros-game](entities/super-mario-bros-game.md) — C++ Super Mario Bros remake (Luxon98; SDL2/SDL_image/SDL_mixer; Visual Studio; original-inspired and custom levels; 2D rendering, level flow, gameplay; game development learning; README [Remake of Super Mario]; Game Develop / source)
- [super-fighter](entities/super-fighter.md) — Windows DX11 shoot-'em-up remake (MKXJun; C++; Direct3D + HLSL + DirectSound; data-driven stages/enemies, replay, Xbox controller; arcade game loop; README [DX11 Mini Game]; Game Develop / source)
- [super-people-esp-aimbot-magic-hack](entities/super-people-esp-aimbot-magic-hack.md) — Super People UE4 ESP/aimbot + gameplay mods via SDK entity reads (C++; battle royale; cheat / game:super people; gmh5225)
- [Super People SDK](entities/super-people-sdk.md) — Super People UE SDK dump (EBalloon; generated C++ headers; weapons, vehicles, player pawns, AI, animation blueprints, game systems; SDK generation study; cheat / game:super people)
- [superpeople-client](entities/superpeople-client.md) — Super People client: driver / rendering / modding (C++; cheat / game:super people; gmh5225)
- [Symbridge](entities/symbridge.md) — live IDA ↔ x64dbg annotation/type sync (module+RVA; Python broker)
- [Symless](entities/symless.md) — IDA structure/type recovery on stripped binaries (data-flow; Hex-Rays)
- [SymlinkCallback](entities/symlink-callback.md) — symlink LinkTarget → access callback (Ring0 / AC research)
- [syser](entities/syser.md) — Windows x86/x64 debugger (C/C++; RE / plugin / modding; Cheat Debugging)
- [syscall-detect](entities/syscall-detect.md) — detect direct/indirect syscalls via Instrumentation Callback or stack inspection (C; AC / Windows)
- [SyscallTables](entities/syscall-tables.md) — combined Windows NT syscall tables (ntoskrnl/win32k/IUM; Vista→Win11 x64/ARM64; Zydis extraction + scg/sstComposer; hfiref0x)
- [syscalls-cpp](entities/syscalls-cpp.md) — C++20 header-only direct syscall invocation (AC Compile Time)
- [System Informer](entities/systeminformer.md) — Process Hacker successor; Windows process/system explorer (kernel explorer lane)
- [StealthAPCDispatcher](entities/stealth-apc-dispatcher.md) — stealth kernel APC dispatch with encrypted shellcode (non-standard queue paths; AC APC monitoring bypass research; gmh5225)
- [StealthSytemThreadFinderBE](entities/stealth-sytem-thread-finder-be.md) — find hidden system threads BE misses (PspCidTable; scheduler queue; manual-map)
- [Stealthy-Kernelmode-Injector](entities/stealthy-kernelmode-injector.md) — kernel-mode stealth DLL injector (APC/thread hijack/image-load callbacks; PEB unlink + metadata cleanup; PTE/VAD manual map; charliewolfe)
- [SystemThreadFinder](entities/system-thread-finder.md) — detect hidden/manual-map system threads (NtQuerySystemInformation; BE-style)
- [tabby](entities/tabby.md) — minimal PIC C shellcode micro-framework (PEB/EAT + FNV-1a API hashing; indirect NT syscalls; Linux mingw-w64/nasm → flat `.bin`; cocomelonc; AC shellcode engine & tricks)
- [T-1](entities/t-1.md) — C++ shellcode loader; scikit-learn decision-tree VM detection exported to native C++ checks; shellcode vs self-removal on sandbox hits (0xTriboulet; sandbox-awareness / malware-analysis research)
- [Tartarus-TpAllocInject](entities/tartarus-tp-alloc-inject.md) — TpAllocInject loader + Tartarus' Gate indirect syscalls (cheat / injection:windows)
- [tableflipper](entities/tableflipper.md) — partial PatchGuard disable up to Win11 21H2 (C++; cheat / PatchGuard-related; emlinhax)
- [Taiga74164 Akebi GC](entities/taiga74164-akebi-gc.md) — upstream Akebi GC Genshin Impact mod framework (C++ injector + in-game menu; protection bypass, teleport, ESP, debug utilities; 360NENZ/Taiga74164)
- [tanto](entities/tanto.md) — Binary Ninja program-slicing plugin (Vector35; Python; HLIL variable/block slices for faster comprehension; Cheat / [Slices Functions])
- [taskbarhero-bot](entities/taskbarhero-bot.md) — TaskbarHero Unity IL2CPP external trainer/bot (C#/.NET 10; ACTk bypass, batch-read automations, WPF panel; matheusbranhann)
- [TaxiDriver](entities/taxi-driver.md) — ALittlePatate; Linux LKM + user-mode pair; device-interface RPM/WPM, base-address lookup, example clients; low-level game memory tooling + Linux security research (cheat / W/RPM Driver and usermode for Linux)
- [tastsong-game-programmer-study-notes](entities/tastsong-game-programmer-study-notes.md) — TastSong Unity C# study notes + sample projects (design patterns, rendering, networking, AI, engine architecture; Game Development notes / guide)
- [TaskScheduler](entities/task-scheduler.md) — cross-platform fiber-based C++ task scheduler (multi-threaded jobs, task grouping, work-stealing; Windows/POSIX; tests/examples; Game Engine / Task Scheduler)
- [TDE](entities/tde.md) — Themida IDA plugin / Fix Themida (devirtualization engine; sodareverse)
- [Terminator](entities/terminator.md) — BYOVD AV/EDR/AC process terminator via Zemana `zam64.sys` (arbitrary process-termination IOCTL; gmh5225)
- [Termux](entities/termux-app.md) — Android terminal / Linux env (no-root; pkg+apt / proot; Cheat Terminal Emulator)
- [thats_no_pipe](entities/thats-no-pipe.md) — Frida Windows named-pipe interceptor (NtRead/WriteFile; IPC → HTTP/WS proxy)
- [the-poor-mans-obfuscator](entities/the-poor-mans-obfuscator.md) — lightweight LLVM IR obfuscator (insn sub / CFF / string encrypt; ELF/Mach-O)
- [ThePerfectInjector](entities/the-perfect-injector.md) — NtCreateThreadEx + runtime LdrLoadDll-resolving PIC shellcode DLL injector (can1357; WoW64; cheat / injection:windows)
- [teamfortress2-internal](entities/teamfortress2-internal.md) — TF2 internal: modding / hooking (C++; cheat / game:team fortress 2; gmh5225)
- [TF2BD Database](entities/tf2bd-database.md) — community-maintained TF2 cheater/suspicious-player/scammer JSON lists and chat word-filter rules for TF2 Bot Detector (TF2BD v3 schemas; client-side moderation; Garou3299)
- [tft-ocr-bot](entities/tft-ocr-bot.md) — TFT OCR automation bot (Python; asset pipelines / overlay; screen OCR; cheat / game:lol [TFT]; gmh5225)
- [the-finals-interior-cheat](entities/the-finals-interior-cheat.md) — The Finals internal: rendering / SDK generation / hooking (C/C++; cheat / game:the finals; gmh5225)
- [The Dreamers Guards](entities/the-dreamers-guards.md) — Fabric client+server AC (Java; encrypted join payloads; mod blacklist scanning; progressive four-phase suspension; anti-evasion; operator kick/ban/pardon/trust; Discord webhooks; IamFriendly0242u; Anti Cheat / game:minecraft)
- [TheHive](entities/the-hive.md) — archived SOC incident-response case-management platform (Scala backend + web UI; alert triage workflows; historical IR architecture study; README [EDR]; TheHive-Project)
- [Hwid-Spoofer (Theordernarkoz)](entities/theordernarkoz-hwid-spoofer.md) — Windows ImGui+DX9 one-click HWID spoofer launcher; downloads driver/helper binaries; CLI spoof step (Theordernarkoz; cheat / HWID)
- [Game-Hacking (TheZong)](entities/thezong-game-hacking.md) — curated game hacking/cracking learning link list (tutorials/forums/RE refs/dumpers/mappers; CS:GO/GTA V/RDR2 starter bases; cheat / guide)
- [tenet](entities/tenet.md) — IDA Pro plugin: execution-trace timeline (forward/backward stepping; register/memory state; multiple formats; gmh5225)
- [tenet-ida9.0](entities/tenet-ida9.0.md) — IDA Pro 9.0 port of Tenet: execution-trace timeline (forward/backward stepping; IDA 9.0 SDK; gmh5225)
- [tenrec](entities/tenrec.md) — Headless extendable multi-session IDA Pro MCP framework (ida-domain + FastMCP; multi-binary analysis; plugin entry points; axelmierczuk)
- [t7-linker](entities/t7-linker.md) — T7 engine GSC script / FastFile linker (compiled modules; T7 bytecode; cheat / Call of Duty modding; gmh5225)
- [The-Seed-Link-Future](entities/the-seed-link-future.md) — Unity VR (C#; OpenGL / shader / driver-dev; Game Develop)
- [Themida-Research](entities/themida-research.md) — Themida/WinLicense 3.x VM research (`VM_CONTEXT` / handlers / Triton; Fix Themida)
- [themida-spotter-bn](entities/themida-spotter-bn.md) — Binary Ninja plugin to detect Themida/WinLicense/Code Virtualizer obfuscated code regions (x86/x64; Oreans ≤3.1.9; Fix Themida)
- [themida-unmutate](entities/themida-unmutate.md) — Python 3 static mutation deobfuscator for Themida/WinLicense/Code Virtualizer 3.x (Fix Themida)
- [Themidie](entities/themidie.md) — x64dbg plugin: C++ MinHook hooks neutralize Themida anti-debug/anti-VM/monitoring on x64 Windows; attach-and-debug (not full unpack); VenTaz; Fix Themida / x64dbg Plugins
- [Thetan_ArenaSDK](entities/thetan-arenasdk.md) — Thetan Arena SDK (rendering / audio / physics; cheat lane)
- [Three.js](entities/three-js.md) — JavaScript 3D library (WebGL/WebGPU; scene graph / PBR / glTF / XR; Game Engine / HTML5)
- [ThreatResearch](entities/threatresearch.md) — Security Joes Ghidra/IDA plugins + malware RE scripts / YARA (Cheat Ghidra)
- [thread-call-stack-scanner](entities/thread-call-stack-scanner.md) — safe unload of hooked DLLs via thread call-stack scan (m417z; Anti Cheat / hook lifecycle)
- [ThreadHijackingInjector](entities/thread-hijacking-injector.md) — minimal C++ thread-hijack DLL injection PoC (NullTerminatorr; remote context manipulation + execution redirection; Injection Testing)
- [ThreadJect](entities/threadject.md) — manual thread-hijack DLL injector PoC (D4stiny; payload map + loader metadata + runtime shellcode patch + thread redirect; Visual Studio; Injection Testing)
- [ThreadSpy (KelvinMsft)](entities/thread-spy.md) — hardware-assisted Windows thread hijacking via PMI callback; in-flight thread takeover without instruction-byte patches; stealth execution redirection / AC bypass research
- [thread-namecalling](entities/thread-namecalling.md) — SetThreadDescription + remote GetThreadDescription via APC (working-set probe; cheat / injection:windows)
- [ThreadStackSpoofer](entities/thread-stack-spoofer.md) — PoC thread call-stack spoof for in-process shellcode hiding (mgeeky; Cheat Spoof Stack)
- [ThrottleStop-PoC](entities/throttlestop-poc.md) — CVE-2025-7771 PoC for **`ThrottleStop.sys`**; IOCTL physmem + I/O port R/W from user mode; VA translation + EPROCESS checks (U65535F; Cheat Vulnerable Driver)
- [TiEtwAgent](entities/tietwagent.md) — ETW Threat-Intelligence injection-detection agent (krabsetw / Yara / PPL)
- [TIGR](entities/tigr.md) — cross-platform framebuffer graphics library (Windows/macOS/Linux/iOS/Android; Image Codec)
- [TinyInst](entities/tinyinst.md) — Google Project Zero lightweight DBI (C/C++; module-selective hooking / debugging; Cheat / DBI)
- [TinyLoad](entities/tinyload.md) — minimal Windows PE manual-map loader + packer/crypter (custom VM stub; Binary Packer)
- [TelemetrySourcerer](entities/telemetry-sourcerer.md) — kernel driver: enumerate/disable callbacks & ETW (unsigned; test signing / DSE)
- [TeleParser](entities/teleparser.md) — Python Telegram chat/channel parser (Telethon; JSON/CSV/MongoDB; NLTK lemmatizer; IS forensics / OSINT)
- [tim_apple](entities/tim-apple.md) — external CS2 cheat (Source 2 SDK / pattern scan; offset JSON bootstrap; kristofhracza + gmh5225 forks; cheat / game:cs2)
- [Titled Gui CS2](entities/titled-gui-cs2.md) — external CS2 cheat framework (C#; ImGui overlay; Win32 memory; cs2-dumper offsets; ESP / aimbot / D3D11 chams; GPLv3; cheat / game:cs2)
- [TLAC (Modern Local Anti-Cheat Reunioned)](entities/tlac-modern-local-anti-cheat-reunioned.md) — lightweight MIT-licensed Linux local anti-cheat (Rust + C eBPF/kernel module + Python ONNX; signature scan, self-integrity, HWID bans, Tokio IPC; Steam Deck; TuncorReUnion; Open Source Anti Cheat System)
- [ThreatIntelligenceConsumer](entities/threat-intelligence-consumer.md) — Threat-Intelligence ETW consume without driver/PPL (Win11 24H2/25H2)
- [Titan](entities/titan.md) — VMProtect devirtualizer (Triton emulation/symbolic exec; AST handler matching; LLVM-oriented lift + CFG recovery; archercreat; Fix VMP)
- [TitanHide](entities/titanhide.md) — SSDT-hook kernel driver: hide debuggers from selected processes (Nt* return tamper; cheat / debugging)
- [TOG](entities/tog.md) — The Online Gamer offsets generator (online-game cheat tooling; Offsets Generator)
- [TOPMOST-Detection](entities/topmost-detection.md) — Win32 topmost-window detector (Oliver-1-1; C++; visible HWND enumeration + `WS_EX_TOPMOST` flagging; companion `SetWindowPos` test console; AC overlay-detection prototyping)
- [TotalPE2](entities/totalpe2.md) — WPF PE viewer (headers, imports/exports, .NET metadata)
- [tpm-mmio](entities/tpm-mmio.md) — MMIO TPM 2.0 public EK read (bypass OS hooks; Detection:HWID)
- [tpm-spoofer](entities/tpm-spoofer.md) — KM TPM request-path hook + UM EK/serial checker (C/C++ WDK; TPM HWID spoof PoC; SamuelTulach + s0ngidong3; Cheat [TPM])
- [traccar-geocoder](entities/traccar-geocoder.md) — self-hosted OSM reverse geocoder (Rust + C++ PBF; Game Network / Location)
- [tracee](entities/tracee.md) — Linux/Android runtime security + forensics via eBPF (Go; kernel telemetry + behavioral detections; K8s/container paths; Aqua Security)
- [TrickyStore](entities/trickystore.md) — Android key-attestation cert-chain module (per-app config, SPL spoof; 5ec1cff + beakthoven rewrite; cheat / HWID research)
- [Triton](entities/triton.md) — dynamic binary analysis library (symbolic exec, taint analysis, SMT simplification; x86/x64/ARM/AArch64/RISC-V; LLVM/Z3 lift; Z3/Bitwuzla; C++/Python; JonathanSalwan; DBA RE automation)
- [triton-bn](entities/triton-bn.md) — Binary Ninja Triton DBA plugin scaffold (symbolic exec / lifting base; ergrelet; Cheat Binary Ninja Plugins)
- [Trinity](entities/trinity.md) — Windows kernel exploitation framework (modular driver/memory/priv-esc chain → arbitrary kernel code execution; disables & removes Defender; cpz)
- [TrinityCore](entities/trinitycore.md) — open-source WoW MMORPG server framework (modular auth/world servers; async DB pooling; scripting APIs; multi-expansion combat/quests/achievements/battlegrounds; protocol emulation; cheat / game:wow [Server for WOW])
- [TShock](entities/tshock.md) — Terraria server framework (Pryaxis; C# .NET Terraria Server API; Bouncer packet/action anti-cheat; permissions, regions, warps, item bans; SQLite/MySQL/PostgreSQL + REST + plugin system; protocol guards; Open Source Anti Cheat System / game:terraria)
- [Tracy](entities/tracy.md) — C++ real-time frame profiler (CPU/GPU; Game Testing)
- [TraceCleaner](entities/trace-cleaner.md) — minimal C++ KM driver; MmUnloadedDrivers + PiDDBCacheTable cleanup; manual-map trace hygiene; educational kernel forensics (BadPlayer555; Driver Trace Cleaner)
- [TrollStore](entities/trollstore.md) — iOS perma-signed jailed IPA installer (CoreTrust/AMFI; arbitrary entitlements)
- [TS-Fucker](entities/ts-fucker.md) — runtime TestSigning toggle via Dell `dbutil_2_3.sys` BYOVD (kernel live-patch; symbol-assisted offsets; no reboot; gmh5225)
- [TrustDevice Android](entities/trustdevice-android.md) — TrustDecision Android fingerprint SDK (Kotlin/Java; integrity / risk signals)
- [TrustDevice iOS](entities/trustdevice-ios.md) — TrustDecision iOS fingerprint SDK (CocoaPod; integrity / risk signals)
- [TrustMeBro](entities/trustmebro.md) — Authenticode signature manipulation toolkit (Python/C++; signature steal/clone, PKCS#7 SigStash, SIP hijack 19 types, WinVerifyTrust FinalPolicy bypass, Smart App Control evasion, SIPExec/FormatGhost; YARA/Sigma; KriyosArcane)
- [TWMS Hacking Data](entities/twms-hacking-data.md) — Taiwan MapleStory live-client hacking corpus (offsets, packets, encryption keys, GameGuard bypass; cheat / game:maplestory [TMS CT]; gmh5225)
- [TtdAntiDebugging](entities/ttd-anti-debugging.md) — C/C++ TTD debug-testing / hooking anti-debug stress sample (Debug Testing)
- [ttddbg](entities/ttddbg.md) — IDA Pro plugin: replay WinDbg TTD `.run` traces (forward/backward stepping; Time Travel Debugging)
- [TWindbg](entities/twindbg.md) — pykd PEDA-like WinDbg UI; registers, disasm, stack smart-deref, memory/symbol commands (WinDbg Plugins)
- [titancf](entities/titancf.md) — CrossFire (CF) cheat: driver development / rendering / graphics (cheat / game:crossfire; gmh5225)
- [tiny-csgo-client](entities/tiny-csgo-client.md) — minimal CS:GO client for dedicated servers (modding / SDK)
- [tinygltf](entities/tinygltf.md) — header-only C++11 glTF 2.0 loader/saver (JSON/GLB; Game Assets)
- [tinyrenderer](entities/tinyrenderer.md) — ~500-line bare-C++ soft 3D renderer (pipeline course; Renderer)
- [tinyraytracer](entities/tinyraytracer.md) — brief CG/ray-tracing course (ssloy; Renderer)
- [pbrtbook](entities/pbrtbook.md) — Physically Based Rendering: From Theory To Implementation (kanition; Renderer / PBR)
- [tinyobjloader](entities/tinyobjloader.md) — single-header C++ Wavefront OBJ loader (verts/MTL; Wavefront Obj)
- [tobj](entities/tobj.md) — lightweight Rust Wavefront OBJ/MTL loader (mesh/material vectors; triangulation; feature flags; Twinklebear; Wavefront Obj)
- [tocode](entities/tocode.md) — binary-to-source export for coding agents (IDA Pro/radare2; decompile, similarity clustering, naming, Semgrep; buzzer-re)
- [toon](entities/toon.md) — modular C++ graphics-demo engine (driver dev + OpenGL/Vulkan; benjinx; Game Engine / source)
- [tool-diy-system-memory-dump](entities/tool-diy-system-memory-dump.md) — DIY live Windows system memory dump (crash-dump format; WinDbg / Volatility; gmh5225)
- [Tool-Tree](entities/tool-tree.md) — Android ROM/APK unpack-repack toolkit for ARM64 (boot/super/APK/APKS/APEX; apktool-style decode/build; root or non-root; Zenlua)
- [tp-2dside-scroller-bp](entities/tp-2dside-scroller-bp.md) — UE5 2D side-scroller blueprint template (Paper2D starter project, sample assets, optional PaperZD; CobraCodeDev; Game Develop / [UE5 2D template])
- [ToastyLink](entities/toastylink.md) — C++17 XBDM Xbox 360 trainer/debug (RGH/JTAG; pointer chains, scan/freeze, PPC patches, JSON cheat tables; Cheat Debugging)
- [Torque 2D](entities/torque2d.md) — open-source cross-platform 2D C++ game engine (Box2D physics; render/audio/animation; modular tooling; multi-platform; Game Engine / 2D)
- [Torque 3D](entities/torque3d.md) — open-source Torque 3D C++ game engine (CMake; Assimp import; render/physics/network/scripting; multi-platform; Game Engine / 3D)
- [Tools](entities/tools.md) — doomedraven malware-analysis infra scripts (KVM/QEMU, IDA deobfuscation, Volatility3 plugins, CAPE/Cuckoo sandbox setup; QEMU Script)
- [ts-ue4dumper](entities/ts-ue4dumper.md) — TypeScript + Frida UE4 dumper (modular; C++ offsets)
- [tx-holdem](entities/tx-holdem.md) — JavaScript Texas Hold'em poker logic library (card/hand modeling, combination compare, highest-hand selection, draw calculations; Node.js + browser; Merisho; Texas Holdem Poker made by JS)
- [TurboDiff](entities/turbodiff.md) — IDA Pro plugin: function-level binary diff between two binaries (cheat / IDA Plugins / diff)
- [Turbulenz Engine](entities/turbulenz-engine.md) — HTML5/TypeScript game engine (WebGL + server services; Game Engine)
- [UTM](entities/utm.md) — QEMU VM host for iOS/macOS (Hypervisor.framework / JIT; IOS Emulator)
- [UkiaRPM](entities/ukia-rpm.md) — M3351AN external CS2 cheat (C++; kernel driver RPM; DirectX 9 ImGui menu + overlay; aimbot/ESP/radar/RCS + config; RPM-based external cheat + kernel driver game-memory comm research; cheat / game:cs2 [External])
- [Usugumo](entities/usugumo.md) — M3351AN kernel-mode PoC driver (C/C++ + MASM; DIRECT_IO IRP RPM/WPM, process/module lookup, mouse/keyboard injection; anti-capture + comm examples; non-production; kernel communication / game-security experimentation; Kernel-mode W/RPM/mouse_event for Windows)
- [UptimeFaker](entities/uptime-faker.md) — CookiePLMonster Windows Detours timing hook library; fakes system uptime via configurable timer API redirection; DLL/ASI inject + INI; diagnose high-uptime game bugs + Game Testing / AC uptime-signal research; Detecting High PC Uptime
- [uWebSockets](entities/uwebsockets.md) — C++ WebSocket/HTTP server (TLS / pub-sub; Game Network)
- [umium](entities/umium.md) — C++/CLI NT anti-tamper (undocumented syscalls + runtime mods; Anti Debugging)
- [umap](entities/umap.md) — minimalist Windows kernel driver mapper (BYOVD physmem → pool alloc, sections, relocs, imports, entry from user mode; no registry/standard load traces; btbd; cheat / EFI Manual Map)
- [umap-mapper](entities/umap-mapper.md) — Windows kernel-mode manual mapper PoC (FarmEquipment69; C; kernel function-pointer hook on NtConvertBetweenAuxiliaryCounterAndPerformanceCounter; PE copy + import/reloc + entry; pattern scan + protected writes; VS driver; driver-load / AC evasion research; cheat / NtConvertBetweenAuxiliaryCounterAndPerformanceCounter)
- [udmp-parser](entities/udmp-parser.md) — cross-platform C++ Windows user-mode minidump parser (0vercl0k; threads/register contexts/virtual memory/modules; library API + parser utility; optional Python bindings; debugger tooling / dump triage / IR)
- [symbolizer](entities/symbolizer.md) — Windows execution-trace symbolizer (0vercl0k; C++ CLI; dbgeng + crash-dump data; raw instruction pointers → function-level symbols; crash triage / exploit debugging / postmortem trace workflows)
- [UrekMazino-Malware](entities/urek-mazino-malware.md) — CyberSecurityUP C++ malware-style PoC; **`viragt64.sys`** BYOVD IOCTL security-process kill; WinINet payload download + temp execute; executable-memory shellcode loader; BYOVD threat simulation / IR / endpoint tampering research; README `[viragt64.sys]`
- [UMPMLib](entities/umpmlib.md) — C/C++ usermode memory analysis (cheat / RPM)
- [ultimate-anti-cheat](entities/ultimate-anti-cheat.md) — open-source Windows C++ anti-cheat framework (AlSch092; user-mode debug/memory-patch/runtime tamper detection; optional client-server heartbeat; configurable hybrid user-mode + kernel-assisted deployment; educational AC reference)
- [UE-BUIValidator](entities/ue-buivalidator.md) — UE4 UI texture validator plugin (configurable rules; multiple allowed values per setting; Game Engine Plugins:Unreal; benui-dev)
- [UE Clang-Format](entities/ue-clang-format.md) — Clang-Format preset for Unreal C++ Epic-style conventions (VS Code setup; lightweight config/docs; Game Engine; TensorWorks)
- [UE-Interview-Cheat-Sheet](entities/ue-interview-cheat-sheet.md) — Unreal Engine interview cheat sheet (Game Engine / Unreal guide)
- [UE-Plugin-SCUE4-Plugin](entities/ue-plugin-scue4-plugin.md) — UE4 SCUE4 anti-cheat plugin (integrity checks, variable memory protection, packet encryption, binary tamper detection; Game Engine Protection:Unreal; gmh5225)
- [UE-UnrealEngineSDK](entities/ue-unreal-engine-sdk.md) — reverse-engineered UE4/UE5 SDK headers (UObject/UWorld/ULevel; internal cheat/mod dev; Universal Cheat development kit; gmh5225)
- [UE4Injector](entities/ue4-injector.md) — UE4 process-injection PoC (C++; legacy UE4 vulnerability for shellcode/DLL payloads; Visual Studio CLI; privilege requirements; Inject / security research; Zebratic)
- [UE4-Freecam](entities/ue4-freecam.md) — UE4 FOV changer (hooking / overlays; Game Engine Explorer:Unreal)
- [UE4-Silent-Aim](entities/ue4-silent-aim.md) — minimal UE4 silent-aim PoC (viewpoint/camera API hooks; aim manipulation research; N-T33)
- [UE4-c-](entities/ue4-c-.md) — Valorant external UE4 cheat (EFI manual-mapped kernel driver + IOCTL dispatch hooks; DirectX 9 ImGui overlay; UE4 actor/player reads; cheat / game:valorant [External]; frankelitoc)
- [UE4 Cheat Engine](entities/ue4-cheat-engine.md) — Android UE4-aware CE (memory scan / GObject enum / UProperty / SDK gen; Cheat / Game Engine Explorer:Unreal)
- [ue4-cheat-source-code](entities/ue4-cheat-source-code.md) — educational UE4 cheat codebase + guide (1hAck-0; C++ ESP/aimbot/trigger + gameplay manipulation; function hooking + pattern scanning; hands-on game-security/RE training; cheat / guide)
- [ue4-apk-dumper](entities/ue4-apk-dumper.md) — Android APK UE4 SDK dumper (UObject/property/offset extraction; modding / SDK generation; gmh5225)
- [ue4_base](entities/ue4-base.md) — C++ UE4 cheat base (SDK wrappers + MinHook PostRender hooks; world/actor/canvas helpers; lazy_importer/xorstr; W2S actor drawing; game security research / rapid UE4 tool prototyping; YMY1666527646; SDK Template)
- [ue4dumper](entities/ue4dumper.md) — Android UE4 SDK dumper (C/C++; modding / SDK generation)
- [ue4dumper-emulator](entities/ue4dumper-emulator.md) — Android emulator UE4 SDK dumper (C/C++; modding / SDK generation / memory analysis; gmh5225)
- [ue4genny](entities/ue4genny.md) — runtime UE4 reflection SDK generator (C++; UObject/UClass/UStruct/UEnum/UFunction → C++ headers; SDK Generator; cursey)
- [ue4-hacking-guideline](entities/ue4-hacking-guideline.md) — UE4 engine security assessment methodology (GameCrashProject; Markdown chapters on engine background, attack vectors, tooling, build setup, analysis process; systematic engine-level vulnerability study; Game Engine / Unreal guide)
- [ue4-processevent-intercept](entities/ue4-processevent-intercept.md) — compact UE4 ProcessEvent interceptor (C++; VMT shadowing on selected objects; hook lifecycle reapplied on object recreation; gameplay call capture/modify; UE4 RE / internal instrumentation; Skengdo)
- [EZFNDEV UEDumper](entities/ezfndev-uedumper.md) — Unreal Engine SDK-style dumper (C++; injection workflow; object name extraction, offset discovery, header generation; automated offset finding; version limitations noted; EZFNDEV; cheat / SDK Dump)
- [UEDumper](entities/uedumper.md) — all-in-one Unreal Engine dumper + live memory editor (C++; ImGui; UE 4.19–5.3; SDK generation, structure dump, runtime browse; Spuckwaffel; cheat / SDK Dump)
- [UEDumper-MemProcFS](entities/uedumper-memprocfs.md) — Unreal Engine dumper + live editor with MemProcFS/LeechCore backends (C++; ImGui; UE 4.19–5.2; SDK generation, class browsing, live R/W; external physical-memory access; BadBrojo; cheat / SDK Dump)
- [Shh0yaUEDumper](entities/shh0yauedumper.md) — Windows UE4 dumper + SDK generator (C++; process memory + pattern scan + engine structure parse; names/objects/SDK headers; configuration-driven version handling; Shhoya; cheat / SDK Dump)
- [ue4-fps](entities/ue4-fps.md) — UE4 FPS demo (KitchenGun; C++ + Blueprint assets/maps; standard input/engine config; lightweight native gameplay layer; FPS learning sandbox + engine-level game research target; UE4 FPS Demo)
- [ue4-fps-game](entities/ue4-fps-game.md) — UE4 FPS sample (QianMo; C++ gameplay module + character control; Blueprint assets, input bindings, camera setup, starter maps; UE4 Game / C++ gameplay and editor workflow learning)
- [ue4-tank-game](entities/ue4-tank-game.md) — UE4 tank prototype (QianMo; C++ pawn + player/AI controllers; crosshair targeting; Blueprint maps; UE4 Game / architecture learning)
- [ue4-tutorials](entities/ue4-tutorials.md) — UE4 C++ tutorials (audio / physics / animation; Game Engine / Unreal guide)
- [UE4 Test Automation](entities/ue4-test-automation.md) — UE4 Gauntlet integration-test plugin (C++; assertions, delays, simulated input, trigger checks, parameterized + performance scenarios; unattended CI regression validation; DaedalicEntertainment; Game Testing)
- [UE426 ABInfinite Win64 Shipping](entities/ue426-abinfinite-win64-shipping.md) — Arena Breakout Infinite UE4.26 SDK dump (C/C++; SDK generation; cheat / game:arena breakout infinite; cra0)
- [unreal-development-guides-and-tips](entities/unreal-development-guides-and-tips.md) — community UE4 Markdown guides (scene creation, optimization, materials, lighting, ray tracing, Chaos Physics, Blueprints→C++; Game Engine / Unreal guide; JaredP94)
- [unreal-engine-guide](entities/unreal-engine-guide.md) — curated Unreal Engine apps/libraries/tools guide (Game Engine / Unreal guide; mikeroyal)
- [Unreal Engine](entities/unreal-engine.md) — official Epic Games engine source + API documentation (complete runtime: build, rendering, physics, networking, platform abstraction, plugins, Python scripting; Game Engine / source)
- [unrealcpp](entities/unrealcpp.md) — UE4 C++ tutorial lesson projects (actor movement, camera, input, components; compile-as-reference; Game Engine / UE4 C++ examples; Harrison1)
- [Unreal Engine Tools](entities/unreal-engine-tools.md) — official CE Lua scripts for UE4/UE5 runtime structure discovery (GNames/GObjects/UObject/UClass/FProperty; Structure Dissect; no inject; cheat-engine)
- [Unreal Finder Tool](entities/unreal-finder-tool.md) — C++ UE runtime discovery + SDK generator (`GNames`/`GObjects`, instance dumping, SDK output; ImGui UI; kernel-assisted memory R/W; per-engine configuration profiles; CorrM; cheat / SDK View)
- [unreal-image-capture](entities/unreal-image-capture.md) — UE C++ high-FPS RGB / segmentation / depth capture to disk for ML synthetic datasets (non-blocking render path; Game Engine / Unreal guide; TimmHess)
- [unreal-source-explained](entities/unreal-source-explained.md) — profiler-driven UE4 source analysis (init / game loop / task graph / RHI / Metal·D3D11; Game Engine / Unreal guide; donaldwuid)
- [unreal-mcp](entities/unreal-mcp.md) — MCP servers for Unreal Editor (kvick-games + chongdashu; asset/level/blueprint automation; Game Develop / MCP)
- [UnrealClaude](entities/unreal-claude.md) — UE5.7 editor plugin; Claude AI copilot via MCP bridge; context-aware actors/blueprints/materials/replication/Slate UI assistance; built-in UE5.7 docs (Natfii; Game Develop / MCP)
- [ue-live-bridge](entities/ue-live-bridge.md) — UE4SS Lua mod + Python MCP driver; external live UObject/UFunction read-write over JSONL IPC; verified CONFIRMED/FALSE_SUCCESS write claims; modding / automation / RE (Glmour; Game Develop / MCP)
- [UnrealModLoader](entities/unreal-mod-loader.md) — UE4 mod loading framework (Blueprint + SDK-based C++ mods; MinHook + ImGui hooks; injector + proxy DLL bootstrap; RussellJerome; Mod Loader)
- [UnrealEngine5-UltimateStreetFighters](entities/unrealengine5-ultimate-streetfighters.md) — UE5 Street Fighters game (audio / physics / animation; C#/C++; Game Develop / Unreal source)
- [UnrealDumper-4.25](entities/unrealdumper-4-25.md) — external UE4.25+ SDK dumper (C++; GObjects/GNames pattern scan; no inject)
- [UnrealSDKDumper-4.25](entities/unrealsdkdumper-4-25.md) — compilable UE4.23–4.27 SDK generator (C++; dependency-aware class ordering, identifier sanitization, sdk.h + SDK folder; wide-character Chinese name handling; BobHUnrealTech; cheat / SDK Dump)
- [Unreal-Engine-5-PDB](entities/unreal-engine-5-pdb.md) — UE5 PDB symbol mirror (function/type/struct layouts; IDA/x64dbg; RE / Game Engine Explorer:Unreal)
- [ue5-cardgame](entities/ue5-cardgame.md) — UE5 card game (deck / turn-based / UMG / replication; Game Develop / Unreal source)
- [ue5-fps-crypt-raider](entities/ue5-fps-crypt-raider.md) — UE5 FPS game (editor tooling / modding; C++/C; Game Develop / Unreal source)
- [ue5-mcp](entities/ue5-mcp.md) — UE5↔Blender MCP pipeline design docs (text-driven scenes, asset transfer, level automation, Blueprint assistance; paused; Game Develop / MCP)
- [ue5-roll-a-ball-game](entities/ue5-roll-a-ball-game.md) — UE5 Roll a Ball tutorial (asset pipelines / editor tooling / modding; Game Develop / Unreal source)
- [ue5-style-guide](entities/ue5-style-guide.md) — comprehensive UE style guide (naming conventions, asset organization, workflow rules, linting guidance; Game Engine / Unreal; Allar)
- [UE5MultiplayerProject](entities/ue5-multiplayer-project.md) — UE5 horror multiplayer template (replication / sessions / dedicated server / GAS; README anti-cheat tag)
- [UE5-With-Dear-ImGui](entities/ue5-with-dear-imgui.md) — UE 5.0.1 C++ Dear ImGui sample (Game Engine Plugins:Unreal)
- [uefi-bootkit](entities/uefi-bootkit.md) — compact UEFI boot-chain PoC (ajkhoury; mostly C; UEFI app + runtime driver; ExitBootServices persistence; pre-OS boot security research)
- [UEFI-Graphic](entities/uefi-graphic.md) — C++ UEFI graphics framework (Oliver-1-1; VisualUefi; framebuffer classes for screens/colors/text/shapes; mouse input + file ops; pre-boot graphical tooling; firmware / low-level security research)
- [UEFI-Bootloader](entities/uefi-bootloader.md) — simple UEFI runtime-driver mmapper (C/C++; cheat / EFI driver)
- [UEVR](entities/uevr.md) — universal UE4/UE5 VR inject mod (stereo / OpenXR·OpenVR; reflection + pattern scan)
- [U3D](entities/u3d.md) — Unity-centered C++ 2D/3D community tree (Game Engine / source)
- [U3D MiniDNF](entities/u3d-minidnf.md) — Unity mini Dungeon & Fighter clone (side-scrolling action RPG; combos/skills/monster AI; Game Develop / source; gmh5225)
- [UABE](entities/uabe.md) — C++ Win32 Unity `.assets`/AssetBundle editor (plugin import/export; PNG/WAV/OBJ/DAE; multi-version; Extracting assets)
- [UAssetAPI](entities/uassetapi.md) — C#/.NET low-level UE asset read/write library (JSON round-trip; Kismet bytecode; `.usmap`; Game Assets)
- [UAssetGUI](entities/uassetgui.md) — C# GUI for UE4–UE5 `.uasset`/`.umap` view/edit (exports/imports/properties; Game Assets)
- [UE-Explorer](entities/ue-explorer.md) — Windows UE1–UE3 package browser/decompiler (C# WinForms; UnrealScript decompile, class/sound export, dependency inspection, hex viewer; Game Engine Explorer:Unreal / Game Assets)
- [UETools](entities/uetools.md) — .NET UE4 binary asset libraries (PAK VFS; asset structures/registries; C# modules; offline inspection/modding/research; Game Assets)

- [UniCli](entities/unicli.md) — Unity Editor terminal CLI (compile/test/build/inspect; AI-agent ready)
- [UniStory](entities/unistory.md) — Unity MapleStory client reimplementation (WIP TMS v245; C#; WzComparerR2.WzLib WZ parse; map layers/foothold physics/portals/sprite animation/BGM; no server yet; Game Develop / source / game:maplestory; ppodds)
- [GamesTestAutomationExample](entities/games-test-automation-example.md) — Unity mobile game test automation (Appium + in-game logs; Android/iOS; Game Testing)
- [UnityAutomatedQAExamples](entities/unity-automated-qa-examples.md) — Unity Automated QA Guidebook (docs/reference; Game Testing)
- [Unity-GameCI-Sample](entities/unity-gameci-sample.md) — Unity Game CI sample (C#; build/release automation; Game CI)
- [Lore](entities/lore.md) — Epic Games open-source Rust VCS for games (content-addressed chunk storage, sparse workspaces, tamper-evident history, large binary assets; cloud-native backends; UEFN; Game CI)
- [Unity202x-eXternalrEsolve](entities/unity202x-externalresolve.md) — header-only C++17 Unity 2020–2023 external runtime introspection (Mono/IL2CPP GOM scan, IL2CPP metadata, W2S, DumpSDK)
- [unity-mcp](entities/unity-mcp.md) — MCP server for Unity (justinpbarnett + wondeks; Game Develop / MCP workflow)
- [unity-skills](entities/unity-skills.md) — Unity Editor AI automation skills plugin (animator/audio/camera/materials/NavMesh/physics/rendering/shaders/terrain/UI; batch executor; Game Develop / AI Agents)
- [Unity Markdown Viewer](entities/unity-markdown-viewer.md) — zero-setup Unity Editor markdown viewer (Plugins:Unity)
- [Unity Design Pattern](entities/unity-design-pattern.md) — Unity C# GoF + game programming pattern sample library with runnable scenes (QianMo; Game Engine / Unity Design)
- [Unity Script Collection](entities/unity-script-collection.md) — maintained free Unity scripts/libraries/plugins/extensions catalog (Game Engine / Plugins:Unity)
- [Unity-Cheat-Sheet](entities/unity-cheat-sheet.md) — Unity engine/API cheat sheet (Game Engine / guide)
- [Unity C# Reference](entities/unity-cs-reference.md) — official Unity engine/editor managed C# reference source (reference-only license; Game Engine / [C# reference]; Unity-Technologies)
- [UnityDecompiled](entities/unity-decompiled.md) — unofficial ILSpy decompiled Unity 5.x editor/engine assembly mirror (00christian00; large C# solution; internal APIs/editor behavior; engine RE, tooling research, compatibility analysis; decompiled Unity dll files)
- [UnityExplorer](entities/unityexplorer.md) — runtime Unity inspector (BepInEx/MelonLoader; hierarchy/REPL; Mono+IL2CPP)
- [unispect-dma-plugin](entities/unispect-dma-plugin.md) — Unispect Mono dump + DMA (Razchek fork fix; Memory Plugin dispose; cheat / game engine explorer:Unity [DMA])
- [unity-vrchat-template](entities/unity-vrchat-template.md) — Unity VRChat starter template (graphics / audio / physics; Game Develop / source)
- [Unity-game-hacking](entities/unity-game-hacking.md) — small Unity asset/code extraction and modding guide (asset pipelines; cheat / guide)
- [Unity-ImGUI-Android](entities/unity-imgui-android.md) — Android Unity native ImGui template (C++ Dobby hooks on eglSwapBuffers + Unity input injection; touch/key overlay; IDA/SigMaker libunity nativeInjectEvent tutorial; mod-menu prototyping / mobile Unity RE; Octowolve; Imgui For Unity)
- [UnityResolve.hpp](entities/unityresolve-hpp.md) — C++ Unity cheat framework (rendering / physics / modding; game engine explorer:Unity)
- [UnityVulnerableEntryPoint](entities/unity-vulnerable-entrypoint.md) — Unity Mono vulnerable entry points (Assembly-CSharp / MonoBehaviour inject demos)
- [USecurity](entities/usecurity.md) — Unity runtime data + PlayerPrefs encryption (Game Engine Protection:Unity)
- [unitySpeedTools](entities/unityspeedtools.md) — iOS Unity IL2CPP speed/modding tools (C/C++ / ObjC)
- [Uncloaking-RAID0-HWID-Serials](entities/uncloaking-raid0-hwid-serials.md) — RAID0 disk-serial uncloaking for HWID detection (gmh5225; Detection:HWID)
- [UltraDriver Game Cheat](entities/ultra-driver-game-cheat.md) — kernel driver cheat framework (physical translate / MDL mapping; AC handle bypass; Cheat Driver; gmh5225)
- [UnderVolter](entities/undervolter.md) — native UEFI x64 Intel CPU undervolting via MSR/MMIO before OS/hypervisor; FIVR MSR 0x150; NVRAM Setup/CFG Lock unlock; Secure Boot SelfEnroll; bypasses Hyper-V/VBS MSR filtering; Sandy Bridge–Arrow Lake; Plundervolt-class pre-boot research (wesmar; Cheat / EFI Driver)
- [underthehoodofexecutables](entities/underthehoodofexecutables.md) — C source→binary guide: linking, loading, executable formats (cheat/guide + AC engineer primer)
- [unflat](entities/unflat.md) — Python unflattener; plugin development (Fix OLLVM / CFF recovery)
- [unflutter](entities/unflutter.md) — Flutter/Dart AOT snapshot static analyzer (symbol recovery)
- [unkover](entities/unkover.md) — hidden kernel-thread/rootkit scanner (scheduler/PspCidTable/stack cross-ref; NMI/APC mapped-driver detection; eversinc33)
- [unmapper](entities/unmapper.md) — automatic dumped-PE header repair for decompilers (Dump Fix)
- [UnSign](entities/unsign.md) — CLI Authenticode signature removal from PE/COFF (EXE/DLL/SYS; C; 32/64-bit; re-signing / RE / malware analysis; SV-Foster)
- [unlicense](entities/unlicense.md) — Python 3 Frida dynamic unpacker for Themida/WinLicense 2.x/3.x (OEP + IAT rebuild; native PE + .NET; Fix Themida)
- [Unpacker](entities/unpacker.md) — modular Python PE/ELF packer detection + unpack pipeline (UPX, ASPack, Themida, VMProtect; Unicorn/Qiling emulation; Fix VMP / Unpacker)
- [Unwinder](entities/unwinder.md) — Kudaes Rust call-stack spoofing crate (SilentMoonWalk-inspired; macros for functions + indirect syscalls; stable traces; chained spoof without linear stack growth; Rust + ASM; Cheat Spoof Stack / thread stack spoofing)
- [unicorn-pe](entities/unicorn-pe.md) — Unicorn-based Windows PE emulation for packed binaries (per-instruction disasm; cheat / DBI)
- [unxorer](entities/unxorer.md) — IDA Pro/Home stack-string deobfuscator (C++; Unicorn emulation; branching-path exploration + stack scan; configurable start points; cheat / IDA Plugins; SamuelTulach)
- [UsbDetectionBypass](entities/usb-detection-bypass.md) — LSPosed/Xposed module masking in-app USB connection and USB debugging detection (SystemProperties, UsbManager, broadcasts, getprop/dumpsys, sysfs; Kotlin + native C++; RytterMohn; Cheat / Xposed); complements [[xiaomi-usb-security-bypass]] vendor-side MIUI USB gates
- [usb-monitor-bof](entities/usb-monitor-bof.md) — Cobalt Strike async BOF: USB connect/disconnect via WM_DEVICECHANGE (Conquest; optional NetNTLM coerce; Some Tricks / Ring3)
- [usbmon (KelvinMsft)](entities/usbmon.md) — kernel USB/HID monitoring framework; IRP/IOCTL/URB hooks + HID report parse; trace device data flows to consumer processes; input-stack RE / HID attack-detection surfaces
- [usbliter8-fun](entities/usbliter8-fun.md) — iOS 27.0 beta CFW jailbreak via usbliter8 SecureROM exploit (34306; iPhone 11 Pro/A12–A13; RP2350 Pico 2 + Lightning PWN DFU; Python CFW/patch/ramdisk tooling; destructive — breaks SEP/WiFi/baseband/Apple services)
- [usbsn (ekknod)](entities/usbsn.md) — root-only USB serial number changer (C++/Java; Windows/Linux/mobile; Some Tricks / Android; peripheral HWID spoof)
- [UWPDumper](entities/uwp-dumper.md) — UWP runtime package dumper (C++ DLL + injector; Windows 10 SDK; inject into target process; Explore UWP / Microsoft Store game RE; Wunkolo)
- [uwpinject](entities/uwpinject.md) — UWP early-startup CLI DLL injector (C; Win32 + AppModel APIs; suspended launch flow; UWP RE, runtime instrumentation, and debugging; Francesco149)
- [uwpspy](entities/uwpspy.md) — UWP/WinRT interface hook and spy DLL (C++; console runtime logging; reusable hook scaffolding; UWP instrumentation and RE; Francesco149)
- [UnrealVTDbg](entities/unreal-vtdbg.md) — VT-x/EPT Unreal kernel debugger (Delphi UI + VMX/EPT driver, EPT hooks, Detours breakpoints; Win10/11)
- [UnrealCLR](entities/unrealclr.md) — UE CoreCLR / .NET 6 C# gameplay plugin (actors/components/Blueprints; Plugins:Unreal)
- [UnrealImGuiTools](entities/unreal-imgui-tools.md) — UE ImGui tools + game-specific tool-window framework (Plugins:Unreal)
- [UnrealLive2D](entities/unreal-live2d.md) — UE4 Live2D Cubism runtime plugin (C++ + Unreal shaders; model loading, motion playback, physics, rendering; sample Blueprints for expressions, lip sync, eye blink; 2D character animation; Plugins:Unreal; Arisego)
- [UnrealEngine-Protection](entities/unreal-engine-protection.md) — UE4 SCUE4 Secure-Client plugin (SafeGameInstance + Safe Types + Game-Guard; Game Engine Protection:Unreal)
- [UnrealEngine4-SwissKnife](entities/unrealengine4-swissknife.md) — UE4 SDK View (UObjects under GEngine World Actors; Game Engine Explorer:Unreal)
- [Unreal-Binary-Builder](entities/unreal-binary-builder.md) — C# UE source builder (Game Tools; Build UE Source)
- [UnrealNetworkProfiler](entities/unreal-network-profiler.md) — C# UE network profiler (Game Tools; networking / asset pipeline)
- [UnrealSharp](entities/unrealsharp.md) — Unreal SDK View (Cheat / Game Engine Explorer:Unreal)
- [Urho3D](entities/urho3d.md) — lightweight cross-platform 2D/3D engine (Game Engine source)
- [Ursine3D](entities/ursine3d.md) — AustinBrunkhorst academic C++ game engine (ECS + reflection + editor + animation + 3D rendering; Bullet Physics, Wwise audio, CEF HTML/CSS/JS UI; education/prototyping/full projects; Game Engine / source)
- [Ursus](entities/ursus.md) — Rust Vulkan game engine (render graph + automatic barriers; deferred pipeline + bindless textures + FSR1; lock-free game/render threads; hecs ECS; OBJ/glTF async load; puffin GPU profiling; ash + SPIR-V; Linux/Windows; Game Engine / source)
- [USN](entities/usn.md) — NTFS USN / change-journal tooling (C++; AC / IS forensics)
- [SearchEx](entities/searchex.md) — SearchEx IS forensics (C++; hooking / memory analysis; AC)
- [Seiun AC](entities/seiun-ac.md) — Fabric **1.21.11** client-integrity AC (mod/resource-pack hash whitelists/blacklists/gray lists; mid-session pack-change detection; Discord alerts; clementine44613; Anti Cheat / game:minecraft)
- [como-funciona-vac](entities/como-funciona-vac.md) — CS2 VAC usermode architecture write-up (Trusted Launch, scanners, evidence pipeline; forensic RE overview)
- [vac](entities/vac.md) — VAC module RE corpus: decompiled detection modules, signature/memory/integrity scanning, Steam comms (danielkrupinski; explore anticheat:vac)
- [vac-bypass](entities/vac-bypass.md) — Steam-client VAC scan inhibition via `Steam.exe` injection and `steamservice.dll` patching (C DLL; danielkrupinski; explore anticheat:vac)
- [vac-bypass-loader](entities/vac-bypass-loader.md) — C loader/injector for vac-bypass into Steam (VS 2019 / v142; danielkrupinski; explore anticheat:vac)
- [vac-bypass-kernel](entities/vac-bypass-kernel.md) — kernel-mode VAC bypass against external scanner `NtReadVirtualMemory` reads (crvvdev; explore anticheat:vac)
- [vac3_inhibitor](entities/vac3-inhibitor.md) — VAC3 exploration via hooking / memory analysis (C++)
- [vac3-dumper](entities/vac3-dumper.md) — VAC3 multi-module dumper (timed loads; explore anticheat:vac)
- [vac-emulator](entities/vac-emulator.md) — VAC module emulator (sandboxed execution + detection/signature logging; gmh5225; explore anticheat:vac)
- [vac-dumper](entities/vac-dumper.md) — VAC3 live module dumper via Steam `steamservice.dll` MinHook (gmh5225; Dump lane; explore anticheat:vac)
- [vacation3-emu](entities/vacation3-emu.md) — VAC3 module emulator (fake game memory + scan logging; explore anticheat:vac)
- [VAC-ModuleDumper](entities/vac-module-dumper.md) — VAC module dump for offline RE (C/C++; explore anticheat:vac)
- [VACKeyRetrieval](entities/vackeyretrieval.md) — VAC module ICE encryption key retrieval (C++; explore anticheat:vac)
- [VALVeAntiCheat1](entities/valveanticheat1.md) — GoldSrc/WON-era VAC1 ModuleC/ModuleS bytecode VM rebuild (2002–2004; RE notes + tooling)
- [vac-hooks](entities/vac-hooks.md) — WinAPI hook/logging on VAC-used APIs (C DLL; danielkrupinski; explore anticheat:vac)
- [Vook](entities/vook.md) — VAC hook research (explore anticheat:vac)
- [vanguard-import-resolver](entities/vanguard-import-resolver.md) — Resolve Vanguard `vgk.sys` protected kernel imports; document import-resolution mechanism (gmh5225)
- [vanguard-service-manager-vgk-control](entities/vanguard-service-manager-vgk-control.md) — Windows CLI: check `vgk` status/auto-start and toggle Vanguard service auto-start via SCM (Karwmam)
- [vanguard-update-notifier](entities/vanguard-update-notifier.md) — Discord bot: poll Riot clientconfig, hash Vanguard setup, alert on AC updates
- [vanguardtrace](entities/vanguardtrace.md) — Decrypt/intercept Vanguard `vgk.sys` encrypted imports; signature-scan table, hook with re-encrypt (armvirus)
- [val-exception-handler](entities/val-exception-handler.md) — Vanguard exception-dispatch PoC (hardware exceptions / VEH; ZwRaiseException dump)
- [valo-driver](entities/valo-driver.md) — Valorant kernel external memory read (phys translate / CR3 / MDL; bypass Vanguard API monitoring; gmh5225)
- [ViGEmBus-Driver-Exploitation](entities/vigembus-driver-exploitation.md) — `ViGEmBus.sys` virtual gamepad driver IOCTL/access-control PoC (insecure IOCTL + ACL flaws; privilege escalation / instability demos; RE artifacts; CyberSecurityUP)
- [vigil](entities/vigil.md) — Rust eBPF Linux-native anti-cheat (BPF ELF loading, perf events, CLI, client–server distributed monitoring; kernel event tracing; TOSTcRa; Open Source Anti Cheat System)
- [vgk-illegal-pf-logger](entities/vgk-illegal-pf-logger.md) — Log intentional illegal page faults from Vanguard `vgk.sys` (integrity-check RE)
- [VGK DMA bypass](entities/vgk-dma-bypass.md) — Modified PCILeech Artix-7 CFG-space/MSI-X SystemVerilog for Vanguard DMA threat-model research (d1skq)
- [valorant-aimbot-bypass](entities/valorant-aimbot-bypass.md) — Valorant aimbot with human-like aim smoothing (cheat / game:valorant; gmh5225)
- [valorant-cheat](entities/valorant-cheat.md) — Valorant internal cheat (StuzziKLL source fork; anti-cheat research + driver dev; cheat / game:valorant [Internal]; gmh5225)
- [valorant-cheat-external](entities/valorant-cheat-external.md) — Valorant external cheat (gmh5225 ValorantCheatExternal ESP/aimbot via kernel RPM; Valorant-CheatExternal driver/shader/rendering scaffold; AryuInka Valorant-Cheat-External C++ aimbot/ESP + driver-assisted memory, overlay, HWID spoofing; cheat / game:valorant [External])
- [valorant-cheat-internal](entities/valorant-cheat-internal.md) — Valorant internal cheat; Insert-key menu toggle (rebindable); cheat / game:valorant [Internal] (gmh5225)
- [valorant-dumper](entities/valorant-dumper.md) — Valorant UE offset/SDK dumper (GObjects/GNames; Vanguard research)
- [valorant-dumper-tool](entities/valorant-dumper-tool.md) — Valorant UE dump tooling (C++; `[Dump]`; cheat / game:valorant; gmh5225)
- [valorant-esp-aimbot-cheat-hack](entities/valorant-esp-aimbot-cheat-hack.md) — Valorant ESP/aimbot via external or internal memory access; UE4 entity outlines/health/distance (cheat / game:valorant [External]; gmh5225)
- [valorant-esp-aimbot-hack](entities/valorant-esp-aimbot-hack.md) — Eduty: fully featured Valorant internal ESP/aimbot (C++; cheat / game:valorant; gmh5225)
- [valorant-esp-hack-with-driver](entities/valorant-esp-hack-with-driver.md) — Valorant ESP: Vanguard driver vuln + early load before AC; kernel injector (cheat / game:valorant; gmh5225)
- [valorant-external](entities/valorant-external.md) — Valorant external cheat (latest; enhanced security; cheat / game:valorant; gmh5225)
- [valorant-external-1](entities/valorant-external-1.md) — Valorant external cheat (C/C++; OpenGL overlay; cheat / game:valorant; gmh5225)
- [valorant-external-cheat](entities/valorant-external-cheat.md) — VEX: open-source Valorant external (C++20; UE5 SDK + kernel driver; aimbot/triggerbot/lineups; DX11 ImGui; VGK decrypt; LLVM obfuscation; bootmgfw; cheat / game:valorant [External])
- [valorant-external-p2c-leaked](entities/valorant-external-p2c-leaked.md) — Leaked Valorant external P2C: ESP/aimbot/triggerbot via kernel driver RPM; UE state reads under Vanguard (cheat / game:valorant [External]; gmh5225)
- [valorant-external-source](entities/valorant-external-source.md) — Valorant external cheat source: ESP/aimbot/player info via kernel driver RPM; overlay window/hijack; no inject (cheat / game:valorant [External]; gmh5225)
- [valorant-externals](entities/valorant-externals.md) — Valorant external offset feed (incremental refresh; cheat / game:valorant [Offset]; gmh5225)
- [valorant-offsets](entities/valorant-offsets.md) — Valorant memory offset dump (C++ header; address/structure constants; cheat / game:valorant [Offset]; apekros)
- [valorant-offsets-autoupdater](entities/valorant-offsets-autoupdater.md) — Valorant automatic offset updater (C++ VS; JSON + network fetch; incremental refresh without loader rebuild; cheat / game:valorant [Offset]; GLX-ILLUSION)
- [valorantoffsets](entities/valorantoffsets.md) — Valorant lightweight offset pack (C/C++ engine/gameplay constants; minimal quick-update feed; cheat / game:valorant [Offset]; 10HEAD)
- [valorant-gui-imgui-remake](entities/valorant-gui-imgui-remake.md) — Valorant ImGui cheat GUI framework (tabs/toggles/sliders; ESP/aimbot/visual mods; cheat / game:valorant [GUI]; gmh5225)
- [valorant-hack-esp-aimbot-skinchanger](entities/valorant-hack-esp-aimbot-skinchanger.md) — Valorant ESP/aimbot/skin changer via kernel driver; UE4 entity overlays; bypasses Vanguard user-mode protections (cheat / game:valorant; gmh5225)
- [valorant-hack-esp-aimbot-skinchanger-source](entities/valorant-hack-esp-aimbot-skinchanger-source.md) — Valorant ESP/aimbot/skin changer C++ source; typical cheat architecture; kernel-driver UE4 reads; Vanguard kernel protection bypass (cheat / game:valorant [Internal]; gmh5225)
- [valorant-internal](entities/valorant-internal.md) — Valorant internal: UE SDK generation + hooking (C/C++; cheat / game:valorant; gmh5225)
- [valorant-internal-base](entities/valorant-internal-base.md) — Valorant internal base: UE SDK generation + hooking (C/C++; cheat / game:valorant [Internal]; gmh5225)
- [valorant-internal-cheat](entities/valorant-internal-cheat.md) — Valorant internal: UE SDK generation + hooking (C/C++; cheat / game:valorant [Internal])
- [Valorant-SDK-2024](entities/valorant-sdk-2024.md) — Valorant SDK: shader / rendering / audio systems (C/C++; cheat / game:valorant [SDK])
- [VALORANT-FNamePool](entities/valorant-fnamepool.md) — iterate/decrypt Valorant FNamePool->Entries (C/C++; cheat / game:valorant)
- [ValorantCC](entities/valorantcc.md) — Valorant crosshair setting (cheat / game:valorant)
- [valthrun](entities/valthrun.md) — CS2 external read-only kernel framework (Rust; kernel driver + overlay + radar; no in-process DLL injection; ESP/bomb/spectator/trigger; stream-proof overlay; anti-detection research; cheat / game:cs2 [External]; Valthrun)
- [valthrun-pubg](entities/valthrun-pubg.md) — PUBG external cheat framework (Rust; Zenith kernel driver; ESP/radar/health/distance; CR3 process-protection bypass + keyboard/mouse input; cheat / game:pubg [External]; Valthrun)
- [valthrun-uefi-mapper](entities/valthrun-uefi-mapper.md) — Rust UEFI boot mapper; bootable ISO/USB; pre-OS game driver load; boot-time driver init and stealth security research (EFI Manual Map; Valthrun)
- [ValveGen](entities/valvegen.md) — Source Engine SDK generator (CallumCVM; C++; ClientClass/RecvTable/data-table parse from client metadata → class definitions and offsets; [SDK Generator])
- [Van1338](entities/van1338.md) — timing-attack handle elevation; Windows object-callback design (AC stress testing)
- [VanderLeague](entities/vanderleague.md) — hypervisor-assisted LoL offensive stack (C/C++; kernel driver + rendering; gmh5225; cheat / game:lol)
- [VaultGuard](entities/vaultguard.md) — FSFilter minifilter + process access block (x64 MASM; anti-debug/tamper)
- [VDK](entities/vdk.md) — Vulnerable Driver Kit; multi-backend BYOVD (Speedfan.sys; kernel R/W, process manipulation, driver load)
- [VDM](entities/vdm.md) — Voyager Driver Manager; multi-backend BYOVD physmem/kernel-exec library (gdrv, cpuz; backend for kdmapper/msrexec; backengineering)
- [veh](entities/veh.md) — VEH software debugger (no Debug API; CE plugin / manualmap VEH DLL)
- [veh-dumper](entities/veh-dumper.md) — x64 VEH/VCH → synthetic PE64 dumps for IDA
- [veh-printf-hook](entities/veh-printf-hook.md) — VEH + PAGE_GUARD non-invasive printf/output hook (VEH interception RE)
- [veh_hide_memory](entities/veh-hide-memory.md) — VEH + PAGE_NOACCESS memory-analysis sample (AC page protection)
- [vfdynf](entities/vfdynf.md) — Application Verifier DynFault provider (stack-hash low-resource fault injection; OS API hooks + optional buffer fuzzing; PCRE2 exclusions; `vfdynf.dll`; jxy-s)
- [Vk-Engine](entities/vk-engine.md) — WIP Jai Vulkan engine (clustered forward / PBR / ImGui + Jolt; Game Engine)
- [Volatility](entities/volatility.md) — original Python 2 memory forensics (profiles; pslist/modules/rootkit)
- [Volatility 3](entities/volatility3.md) — Python 3 memory forensics (RAM images; Win/Linux/macOS plugins)
- [Voyager](entities/voyager.md) — Hyper-V hacking framework (backengineering upstream; Win10 x64 AMD & Intel; builds 1507–2004; VDM/msrexec ecosystem; cheat / windows kernel explorer)
- [vmem-decrypt](entities/vmem-decrypt.md) — VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram decrypt (pure-Python AES-256-CBC; vmem_flatten.py → Volatility 3; Win11 partial VM encryption; AC/IS forensics)
- [Volatile Data Collector](entities/volatile-data-collector.md) — lightweight Windows C utilities for live volatile IR (handles, kernel modules, sessions, drivers, ICMP, registry)
- [VolkDMA](entities/volk-dma.md) — C++ LeechCore/MemProcFS DMA library (scatter I/O, module dumps, signature scans, CR3 fix, kernel-derived input state; cheat / DMA)
- [vm (ekknod)](entities/vm.md) — cross-platform C/C++ memory library (unified `vm.h`; kernel/RPM/DMA/KVM/Proton/EFI backends; CR3 walk, PEB/LDR, pattern scan)
- [vm_str.hpp](entities/vm-str-hpp.md) — header-only C++20 compile-time string obfuscator (obfuscation bytecode schema at compile time + stack-based VM runtime reconstruct; narrow/wide string macros; keeps plaintext out of static data; software hardening / RE resistance; AC String Crypter; Mowokuma)

- [Void Engine](entities/void-engine.md) — Godot 4.x GDScript editor plugin with WhiteVoid AntiCheat autoload (debugger/process/window detection, honeypot integrity checks, HWID ban enforcement), VoidNet ENet/Firebase WebRTC multiplayer stack, and VoidForge editor tooling (lannden1245; Anti Cheat / Open Source Anti Cheat System)
- [Voidmaw](entities/voidmaw.md) — VEH + PAGE_GUARD code-hiding (AV/AC page-protection research)
- [VEN0m-Ransomware](entities/ven0m-ransomware.md) — BYOVD via iMFForceDelete.sys (IObit; AV/EDR evasion)
- [venom](entities/venom.md) — Linux kernel rootkit hooking (LKM hooks; cheat / linux kernel explorer)
- [vermagic](entities/vermagic.md) — change Linux LKM vermagic / CRCs (cheat / RE tools)
- [Vesta](entities/vesta.md) — open-source external CS2 cheat (Read1dno; C++23; no inject/kernel driver; RPM + DX11 overlay ESP/chams; aim/trigger; grenade prediction; Lua 5.4 web-radar API; ballistics simulation; cheat / game:cs2 [External])
- [vmlinux-to-elf](entities/vmlinux-to-elf.md) — raw Linux kernel images → ELF with kallsyms (IDA/Ghidra RE)
- [VMAttack](entities/vmattack.md) — IDA Pro Python plugin for VM-based obfuscation (dispatcher/handler-table trace, devirt assist; gmh5225)
- [VMAware](entities/vmaware.md) — cross-platform header-only C++ VM detection (100+ techniques; CPUID/artifacts/timing/fingerprints; confidence scores; Detection:Virtual Environments)
- [VMwareCloak](entities/vmware-cloak.md) — PowerShell VMware Windows VM cloak (hide guest from VM-evasive malware; analyst / virtual-environments research)
- [VmwareHardenedLoader](entities/vmware-hardened-loader.md) — VMware anti-detection hardening (CPUID/SMBIOS/ACPI/registry/MAC spoof; hypervisor-level C/C++ loader; Windows + Linux guests)
- [vmdevirt-vtil](entities/vmdevirt-vtil.md) — broken VTIL VMP devirt demo (Fix VMP / IDA jmp-around-vmenter)
- [VMProtect-devirtualization](entities/vmprotect-devirtualization.md) — experimental dynamic VMProtect 3.x pure-function deobfuscation (Intel Pin trace + Triton symbolic exec; LLVM IR lift for MBA simplification; JonathanSalwan; Fix VMP)
- [vmp-devirtualization-lab](entities/vmp-devirtualization-lab.md) — Android native VMP devirt educational lab (mini-VM, dispatcher/handler recovery, symbolic lifting; QBDI/Unicorn/Triton/Frida; tomhamidi97-arch)
- [vmp-unpacker](entities/vmp-unpacker.md) — C++ dynamic VMProtect unpacker (Win32 debug attach; PEB/ntdll anti-debug bypass; OEP discovery; mutated IAT rebuild; Fix VMP / Unpacker; Lucyferek-nunu)
- [VMPacker](entities/vmpacker.md) — ARM64 ELF VM code protection (Go; native→custom bytecode; indirect dispatch, chained encryption, CRC integrity, function-split obfuscation; demo programs; binary protection / VM obfuscation RE; LeoChen-CoreMind; AC Obfuscation Engine `[VM]`)
- [vmtrace](entities/vmtrace.md) — WHP C++ trap-driven guest execution (host-backed memory, page traps, CPUID/syscall intercept, single-step VM exits; asmjit)
- [VirtualBox](entities/virtualbox.md) — Oracle open-source x86_64 VMM (CPU/memory virtualization, device emulation, guest additions, COM/IOCTL; hypervisor-internals and VM security research)
- [VisualUEFI-2.0](entities/visualuefi-2-0.md) — VisualUEFI-style Clang/DWARF UEFI dev setup (EDK2 samples + Visual Studio; VMware + CLion remote GDB; firmware/boot-time RE; Shtan7)
- [virtualbox-kvm](entities/virtualbox-kvm.md) — VirtualBox with KVM backend (manual GPU accel; cheat / QEMU/KVM/PVE/VBOX research-host lane; cyberus-technology)
- [virtualkd-redux](entities/virtualkd-redux.md) — VirtualKD revival; VM kernel debug acceleration for VMware/VirtualBox (driver + host-side; Win11 + current WinDbg; modern VS build; 4d61726b)
- [VMDragonSlayer](entities/vmdragonslayer.md) — VM detection/analysis framework (DTT / SE / ML; Cheat RE Tools)
- [VMkatz](entities/vmkatz.md) — in-place VM snapshot/VHD cred extract (LSASS/SAM/LSA/NTDS; AC/IS forensics)
- [VMPLift](entities/vmplift.md) — emulation-first VMProtect 3.8–3.10+ x64 handler walker/lifter (VIP trace, rolling-key recovery, closed-form recovery, LLVM IR/pseudo-C/devirt; IDA/Ghidra; Fix VMP; sexyiam)
- [VMP3 x64 Disasm (prerelease)](entities/vmp-vmp3-64bit-disasm-prerelease-.md) — VMProtect 3 x64 bytecode disassembler (custom insn decode, virtual opcode handlers, flow reconstruction; Fix VMP; gmh5225)
- [VMPImportFixer](entities/vmpimportfixer.md) — VMP 3.x import protection fix via Unicorn emulation (near-call stubs → real imports; Zydis + pepp; x86/x64; Fix VMP)
- [Vmp3_utils](entities/vmp3-utils.md) — Python VMP3 editor tooling utilities (Fix VMP; gmh5225)
- [VmpHelper](entities/vmp-helper.md) — C++ VMProtect helper (networking / plugin / modding; Fix VMP; fjqisba)
- [VMProtect](entities/vmprotect.md) — VM-based code obfuscation engine (software CPU + memory/I/O; Fix VMP study; gmh5225)
- [VMProtect Dumper](entities/vmprotect-dumper.md) — Windows C console live-memory VMProtect PE unpacker (OEP/IAT recovery, dynamic exec-region harvest, optional PE-sieve; drag-drop/dropper/DLL modes; IOC extract; password-protected artifact archive; Fix VMP / Unpacker; whoamicrash)
- [VMPStatic](entities/vmpstatic.md) — static Go VMProtect PE unpacker (VMP 1.x–3.x rebuild; Fix VMP / Unpacker)
- [vmpunpack](entities/vmpunpack.md) — Python x64 VMProtect/packer unpacker (sogen emulation to OEP; PE rebuild + IOC extract; no devirt; Fix VMP / Unpacker)
- [VMPUnpacker](entities/vmpunpacker.md) — VMProtect PE unpacker (C++/Python; LZMA → sections/IAT; Fix VMP / Unpacker)
- [VMUnprotect](entities/vmunprotect.md) — .NET Harmony instrument VMProtect methods (trace / anti-debug; Fix VMP)
- [VMUnprotect.Dumper](entities/vmunprotect-dumper.md) — dynamic .NET VMProtect unpack/dump (AsmResolver; Fix VMP)
- [vpgather](entities/vpgather.md) — AVX2 VPGATHER + VEH address-validity probe PoC (Peribunt; pre-fault accessibility checks; stealth memory probing; RE / AC bypass research)
- [vpnhide](entities/vpnhide.md) — Android VPN hide (LSPosed system_server + GKI kretprobe/KernelPatch/Zygisk; ioctl/netlink/`/proc/net`; optional localhost ports block; Cheat Magisk)
- [VansonMod](entities/vansonmod.md) — TrollStore iOS memory editor and debugging workstation (vaenshine; ObjC++/C++ Theos; external attach without tweak injection; value scan, hex edit, pointer chains, signature scan, JS scripts, IPA archive management; jailbreak adds RVA patch, ARM64 presets, hardware watchpoints; cheat / TrollStore iOS memory editor)
- [vphone-aio](entities/vphone-aio.md) — One-script pre-jailbroken vphone iOS emulator bundle (34306; macOS shell script + archive; automates vphone-cli setup; SIP/AMFI off; full bootstrap; iOS app analysis/testing lab)
- [vphone-cli](entities/vphone-cli.md) — Apple Silicon macOS virtualized iPhone CLI (Lakr233; Swift + Python iBoot/kernel/TXM patchers, ramdisk/CFW; Virtualization.framework PCC research VM; SIP/AMFI disabled, DFU/restore; SwiftUI GUI via vphone-ws; iOS security RE / virtualized iOS lab)
- [vPhone Workstation](entities/vphone-ws.md) — Native macOS SwiftUI front-end for vphone-cli: browse, create, boot, clone, export, and delete iOS research VMs (zqxwce; Virtualization.framework; creation wizard + host readiness checks; IOS Emulator)
- [vulchatgpt](entities/vulchatgpt.md) — BinAIVulHunter IDA plugin: multi-provider AI vuln analysis on decompiled functions (OpenAI/Gemini/Ollama; cheat / IDA Plugins)
- [WPeChatGPT](entities/wpechatgpt.md) — OpenAI-compatible IDA plugin: explain/rename, Python routine reconstruction, vuln checks, automated function-tree summarization (IDAPython; cheat / IDA Plugins / `[ChatGPT]`)
- [vulkan](entities/vulkan.md) — PE dumper for Hyperion/Theia dynamic code encryption (NOACCESS page resolve; import fixup; Roblox/The Finals; atrexus; Dump lane)
- [Vulkan-Hook](entities/vulkan-hook.md) — Vulkan API hook framework: `vkQueuePresentKHR` intercept + ImGui overlay menus / ESP (C++; Windows x86/x64; gmh5225)
- [Vocem Overlay](entities/vocem-overlay.md) — Linux Discord in-game overlay (Vulkan implicit layer + OpenGL LD_PRELOAD interposer; daemon RPC/shared memory; HDR/Flatpak; overlay-injection research; ales-drnz)
- [VoltClient](entities/voltclient.md) — educational AssaultCube external (C++; DX11 Dear ImGui transparent overlay; RPM/WPM ESP + tracers + FOV aimbot; ac_client.exe v1.3.0.2; TheHeadphonesAreNeeded)
- [vulnerable-driver-scanner](entities/vulnerable-driver-scanner.md) — C++ CLI directory scanner for vulnerable Windows drivers; BYOVD exposure triage in common system paths (Xxmmy)
- [vulnerable-drivers](entities/vulnerable-drivers.md) — curated collection of vulnerable signed Windows kernel `.sys` binaries; exploitable IOCTL/memory primitives; BYOVD cataloging and exploitation-surface analysis (KeServiceDescriptorTable)
- [VulnerableDriverScanner](entities/vulnerable-driverscanner.md) — C++ console PE-import triage; folder scan flags kernel drivers with indicative API imports; preliminary attack-surface assessment (Sentient111)
- [vulnerable-mcp-servers-lab](entities/vulnerable-mcp-servers-lab.md) — intentionally vulnerable MCP servers for pentest training (path traversal, prompt injection, eval, typosquatting, secret leakage; Game Develop / MCP security)
- [vulnerablekernel-driver](entities/vulnerablekernel-driver.md) — intentionally vulnerable **`MsIo64.sys`** training driver (IOCTL arbitrary R/W, overflow, UAF, races; kernel exploitation lab; gmh5225)
- [vulnerablepatchguardexploit](entities/vulnerablepatchguardexploit.md) — runtime vulnerable PatchGuard exploit to disable KPP (C++; cheat / PatchGuard-related; gmh5225)
- [volumetric-restir-release](entities/volumetric-restir-release.md) — Falcor C++/Slang volumetric ReSTIR research renderer (spatiotemporal reservoir resampling; RTX-class real-time; paper scene pipelines; Renderer)
- [volto-external-spowar-ud-eac-be-fortnite-external-cheat](entities/volto-external-spowar-ud-eac-be-fortnite-external-cheat.md) — Fortnite external: kernel driver + overlay; HWID-spoof / EAC-evasion naming (C/C++; cheat / game:fortnite [External]; gmh5225)
- [vibe-blocks-mcp](entities/vibe-blocks-mcp.md) — MCP server for Roblox Studio (SSE; studio actions as agent tools; Game Develop / MCP)
- [vifterpreter](entities/vifterpreter.md) — Rust PS2 VIF1 DMA packet and VIF command parser (0x5abe; binrw + bilge; unpack/MPG/state opcodes; Serde; mesh/graphics asset stream decode)
- [VioletWing](entities/violetwing.md) — Jesewe Python external CS2 helper (PyMeow overlay + customtkinter GUI; cs2-dumper startup offsets; triggerbot/ESP/bunnyhop/NoFlash; offline/private-server RE; cheat / game:cs2 Python external)
- [viv-ghidra-decompiler](entities/viv-ghidra-decompiler.md) — Vivisect↔Ghidra bridge (symbolik → p-code; headless JSON-RPC; Qt dock decompiled C; atlas0fd00m)
- [vscript-lua51](entities/vscript-lua51.md) — CS2 VScript Lua 5.1 external module DLL loader (VScript; cheat / game:cs2 scripting)
- [wasm-ceserver](entities/wasm-ceserver.md) — WebAssembly memory analysis (Python/JavaScript; Cheat Engine ceserver-style remote debug; Analyzing WebAssembly)
- [webcheat](entities/webcheat.md) — Chrome extension CE-style WASM memory scan/edit/freeze + game speed control (Manifest V3; Unity/Godot/Emscripten WebGL)
- [weightBufs](entities/weightbufs.md) — ANE multi-bug XNU kernel R/W exploit chain for iOS 15 and macOS 12 (IOKit/IOSurface; Neural-Engine Apple devices; 0x36)
- [WebUI X Portable](entities/webui-x-portable.md) — standalone Kotlin/Compose MMRL WebUI X host; HybridWebUI + JS bridge for Magisk/KernelSU/APatch modules; non-root + spoofed builds (MMRLApp)

- [w1tn3ss](entities/w1tn3ss.md) — C++/C DBI / analysis / patching framework (modding / hooking / memory; Cheat DBI)
- [Waldo](entities/waldo.md) — CS2 deep-learning triggerbot/aimbot detection (user-trained model; Detection:Aimbot)
- [WarriOrb](entities/warriorb.md) — public UE4 action-platformer source release (NotYetGames; C++ gameplay + engine config; code-only study of production Unreal architecture; Game Engine / source)
- [WardSweep](entities/wardsweep.md) — Windows Rust/WPF AC audit + orphan driver/service/registry/filesystem cleanup (Vanguard, EAC, BE, ACE; quarantine/rollback; poli0981)

- [WaryasSWHE](entities/waryasswhe.md) — usermode shatter-attack AC bypass PoC (0day; cheat / RPM; C++)
- [Wells Anti Cheat](entities/wellsanticheat.md) — Among Us host-side BepInEx AC (RPC abuse / crashers / spam; Harmony)
- [Weird Anti Cheat Ideas](entities/weird-anti-cheat-ideas.md) — unconventional AC design guide (anti-cheat research, networking, modding; Anti Cheat / guide; gmh5225)
- [WHIDS](entities/whids.md) — open-source Windows EDR platform (0xrawsec; Go; detection-driven response; ETW + Sysmon; Gene rules; alert-triggered artifact collection; manager + admin API; incident response / enterprise monitoring; README [EDR])
- [window_hijack](entities/window-hijack.md) — KM window-handle hijack for covert KM↔UM I/O (thread contexts)
- [Window-Hijack (SurgeGotTappedAgain)](entities/window-hijack-overlay.md) — external overlay window hijack PoC: existing HWND model + native flags; SetWindowsHookEx input; DX11/ImGui; visibility/detection tradeoff research
- [WindowProtect](entities/windowprotect.md) — window-hide research (driver / hooking; cheat / hide; gmh5225)
- [Wazuh](entities/wazuh.md) — open-source XDR / HIDS (agent–manager; FIM / log / vuln; Elasticsearch)
- [WickedEngine](entities/wickedengine.md) — open C++ 3D engine (`WickedEngine_Windows` static lib; Game Engine source)
- [wda_monitor_trick](entities/wda-monitor-trick.md) — WDA/D3D9 monitor hook (display capture intercept; C++)

- [WDACTools](entities/wdactools.md) — PowerShell WDAC CI policy build/deploy (UMCI, CiTool.exe, p7b decrypt)
- [WProtect](entities/wprotect.md) — C/C++ obfuscation engine (xiaoweime; Anti Cheat → Obfuscation Engine)
- [WProtectSDK](entities/wprotectsdk.md) — C/C++ WProtect SDK generation (Anti Cheat → Obfuscation Engine)
- [wpp](entities/wpp.md) — WPP trace-infrastructure DeviceControl hijack PoC (`disk.sys`/`mountmgr.sys`; IRP capture; HWID disk-serial research; btbd)
- [WDUTF](entities/wdutf.md) — Windows Driver Unit Test Framework (user-space MSTest for kernel drivers)
- [WindEffects](entities/wind-effects.md) — C++23 Vulkan/DX12 engine (ECS, editor, deferred/PBR; Game Engine)
- [WindMouse](entities/windmouse.md) — Python human-like mouse paths via WindMouse algorithm; curved variable-speed trajectories; AutoHotkey/PyAutoGUI backends (AsfhtgkDavid; UI automation / game scripting)
- [Windfall Anti-Cheat](entities/windfall-anticheat.md) — Spigot/Paper/Folia/Purpur packet AC (PacketEvents 2; combat/movement/inventory; lag compensation + prediction; Geyser/Bedrock; enis1enis2)
- [Windfall AntiCheat F](entities/windfall-anticheatf.md) — Fabric **1.21.5+** server-side packet AC (combat/movement/inventory checks; physics prediction + latency compensation; Geyser/Bedrock; enis1enis2)
- [windbg-decompile-ext](entities/windbg-decompile-ext.md) — WinDbg x64 extension; live disasm + LLM verified pseudocode (WinDbg Plugins)
- [WinDbg-JS-Scripts](entities/windbg-js-scripts.md) — KasperskyLab JS WinDbg dump triage; exception records, STL map walk, noexcept stack repair, x86-in-x64 kernel stacks (JS Scripts)
- [WinDbgCookbook](entities/windbg-cookbook.md) — JS WinDbg data-model scripts + dx query recipes; dependency/stack/TTD analysis (TimMisiak; WinDbg)
- [windbg-tool](entities/windbg-tool.md) — Windows CLI + MCP for WinDbg/TTD; `.run` trace replay, crash-dump triage, live probes; JSON for AI agents (Rust; Devolutions)
- [WinDbg Copilot](entities/windbg-copilot.md) — agentic C++ WinDbg extension; AI Q&A, auto command execution, multi-provider models, HTTP/MCP + CLI (0xeb; crash/exploit/Windows security analysis)
- [WinDbg-Extensions](entities/windbg-extensions.md) — WinDbg extension; enumerate process/thread/image notify callbacks + driver modules (Callback Extension)
- [WinDbg_Scripts](entities/windbg-scripts.md) — JS WinDbg scripts for kernel debug/modding (WinDbg Plugins)
- [WinDiff](entities/windiff.md) — web/CLI cross-build Windows PE symbol, type, and syscall browser/differ (Winbindex + Symbol Server → JSON; Next.js UI)
- [WatchDogKiller](entities/watchdog-killer.md) — WatchDog `amsdk.sys`/`wamsdk.sys` BYOVD EDR/AV terminator (IOCTL register + terminate; Silver Fox tradecraft; gmh5225)
- [win-driver-exp](entities/win-driver-exp.md) — multi-driver BYOVD exploit collection (IOCTL → kernel R/W, code exec, process manipulation; incl. `AsUpIO64.sys` CVE-2024-33218; gmh5225)
- [windows-10-22h2-vulnerable-driver-communication](entities/windows-10-22h2-vulnerable-driver-communication.md) — ASUS `asromgdrv.sys` BYOVD IOCTL wrapper (contiguous kernel pool + CR R/W; Win10 22H2 / Win11; gmh5225)
- [windows-desktop-duplication-sample](entities/windows-desktop-duplication-sample.md) — DXGI Output Duplication desktop capture sample (C++; cursor + dirty/moved regions; `[DXGI]`)
- [windows-screenshotcapture-directx](entities/windows-screenshotcapture-directx.md) — minimal DX9 front-buffer screenshot capture (`GetFrontBufferData` + WIC PNG; `[DX9]`)
- [Windows-DLL-Injector](entities/windows-dll-injector.md) — C++ Visual Studio multi-method Windows DLL injector (CreateRemoteThread, native thread variants, QueueUserAPC, SetWindowsHookEx, RtlCreateUserThread; x86/x64; injector + payload DLL projects; Injection Testing; KooroshRZ)
- [windows-dll-hijacking](entities/windows-dll-hijacking.md) — Windows DLL hijack DB (sideload / search-order / phantom DLL)
- [windows-forensic-artifacts](entities/windows-forensic-artifacts.md) — structured Markdown guide to Windows forensic artifacts (execution/account/file/network/persistence/user activity; locations, parsing, timeline correlation; DFIR reference; Psmths)
- [Windows-Spoofer](entities/windows-spoofer.md) — open-source Win10/11 spoofing + cleanup toolkit (Batch/PowerShell; system IDs, network values, trace cleanup; volume ID / SMBIOS via external utilities; anti-cheat fingerprinting research; Scrut1ny; cheat / HWID)
- [windows-software-policy](entities/windows-software-policy.md) — KiFilterFiberContext Windows kernel licensing path via `SystemPolicyInformation` (`NtQuerySystemInformation`); user-mode licensing ↔ kernel policy driver; C headers + Python binary helper; Windows internals / software protection RE
- [WindowsHardwareInfo](entities/windows-hardware-info.md) — WMI C++ hardware inventory CLI (Detection:HWID)
- [windows-process-injection](entities/windows-process-injection.md) — Windows injection techniques (shellcode / syscalls / stomping / stack spoof)
- [windows-kernel-debugging-guide](entities/windows-kernel-debugging-guide.md) — remote Windows kernel debugging guide (cheat / guide)
- [windows-kernel-exploits](entities/windows-kernel-exploits.md) — kernel exploit guide (Cheat / vulnerable driver)
- [windows-kernel-pagehook](entities/windows-kernel-pagehook.md) — PTE Hook (shared kernel VA / per-process CR3; Some Tricks Ring0)
- [windows-kernel-rs](entities/windows-kernel-rs.md) — Rust Windows kernel driver framework (bindings + IRP/device I/O abstractions; staged examples; StephanvanSchaik)
- [windows-rapl-driver](entities/windows-rapl-driver.md) — Windows KM driver for bare-metal RAPL energy metrics (Detection:HWID)
- [windows-runtime-attestation-report](entities/windows-runtime-attestation-report.md) — C++ GetRuntimeAttestationReport sample (signed driver + kernel hotpatch Runtime Report Packages; image hashes, publisher thumbprints, hotpatch sequence; VBS/HVCI; x64/ARM64; local inspection; CodeMaxx)
- [windows-kernel-shadow-stack](entities/windows-kernel-shadow-stack.md) — Synacktiv KM CET/shadow-stack research (KVAS / PG; Windows Security Features)
- [windows-intel-pt](entities/windows-intel-pt.md) — WindowsIntelPT KM driver + user-mode library (IPT MSR config; per-process/system-wide; coverage / fuzzing / execution tracing)
- [windows-subsystem-linux](entities/windows-subsystem-linux.md) — WSL Linux kernel source tree (full layout; WSL research hosts)
- [WSL](entities/wsl.md) — official Microsoft WSL stack (wsl.exe, Lxss Manager, DrvFS, GNS, init/VM infra; WSL lane)
- [WSL2 Linux Kernel](entities/wsl2-linux-kernel.md) — official Microsoft WSL2 utility-VM Linux kernel source (arch/drivers/fs; WSL lane)
- [WSL2 Linux Kernel Rolling](entities/wsl2-linux-kernel-rolling.md) — Nevuly rolling stable WSL2 kernel builds (CI x86/ARM64; reproducible guest-kernel workflows; config guidance; WSL lane)
- [WubbabooMark](entities/wubbaboomark.md) — debugger-use / anti-anti-debug trace detector (Ghidra/IDA/OllyDbg/x32dbg/x64dbg/WinDbg; Anti Debugging)

- [win11_apk_installer](entities/win11-apk-installer.md) — Win11 APK installer (Python; WSA / Android-on-Windows)
- [WSA Builds](entities/wsa-builds.md) — customized WSA build distribution (Magisk/KernelSU + optional GApps; automation scripts; install/troubleshoot/recovery docs; MustardChef)
- [WSA Kernel Build](entities/wsa-kernel-build.md) — Docker-based WSA Linux kernel build environment (x86_64/arm64 cross-compilation; reproducible local/CI builds; custom kernel testing/instrumentation; KiruyaMomochi; Cheat Build WSA Kernel with Docker)
- [WSA Kernel SU](entities/wsa-kernel-su.md) — kernel module for `/system/xbin/su` on WSA/Android kernels (syscall hooks; credential/SELinux root; optional stealth; LSPosed; Cheat WSA with KernelSU)
- [WSA Linux Kernel](entities/wsa-linux-kernel.md) — WSA Linux kernel mirror + build automation (stock + KernelSU branches; GitHub Actions x86_64/arm64; reproducible kernel customization; WSA-Community)
- [WSAPatch](entities/wsapatch.md) — WSA MSIX patcher for Win10/older Win11 (version-check + Hyper-V bypass; sideload; cinit)
- [WSA PacMan](entities/wsa-pacman.md) — Flutter/Dart GUI WSA package manager (APK/XAPK sideload, metadata, upgrade/downgrade; alesimula)
- [wsb-detect](entities/wsb-detect.md) — Windows Sandbox fingerprint C library (LloydLabs; modular process/username/device-path/DNS/registry/timing checks; combinable by false-positive tolerance; anti-analysis / environment-awareness research; Windows Sandbox ("WSB"))
- [winbo](entities/winbo.md) — overlay hijack detect via dxgkrnl ETW Present + GDI table (Detection:Overlay)
- [WineHooks](entities/winehooks.md) — classic PC game compatibility/enhancement hook framework (DirectX/OpenGL interception, resolution scaling, texture replacement, audio/input fixes, per-title patch profiles; native Windows + Wine/Linux; Daniel-Lobo; DirectX Compatibility)
- [WinNT5_src_20201004](entities/winnt5-src-20201004.md) — leaked Windows NT 5.x source tree (2000/XP/Server 2003; kernel/Win32 RE reference)
- [WinObjEx64](entities/winobjex64.md) — Windows Object Manager namespace explorer + callback enum (admin; AC / Ring0 callback research)
- [WinDefCtl](entities/windefctl.md) — Defender / Tamper Protection control via kernel priv-esc (Win11 26H1)
- [WinVisor](entities/winvisor.md) — WHP hypervisor emulator for Windows x64 user-mode PE (Windows Emulator)
- [Winlator](entities/winlator.md) — Android app: Windows x86/x64 via Box86/Box64 + Wine + PRoot (Mesa Turnip/VirGL; touch desktop; Windows Emulator)
- [WNF Driver Meme](entities/wnf-driver-meme.md) — WNF state-name covert KM↔UM driver + client; PID memory R/W; ObRegisterCallbacks handle stripping (zensenzay; game-security / AC / RE)
- [WinAFL](entities/winafl.md) — Windows AFL coverage-guided fuzzer (DynamoRIO/Intel PT; persistent mode; closed-source hook; corpus minimize + crash triage; Anti Cheat > Fuzzer)
- [WTF](entities/wtf.md) — distributed snapshot-based coverage-guided fuzzer (Windows + experimental Linux; emulator/VM snapshot backends; user/kernel; C++; corpus/coverage/trace tooling; game components, drivers, system services; 0vercl0k)
- [WinArk](entities/winark.md) — open-source Windows anti-rootkit and low-level system analysis platform (BeneficialCode; C++ drivers, symbol/PE parsers, monitoring modules, investigation UI; rootkit hunting and anti-cheat internals analysis; Tool)
- [Win32.Nebula](entities/win32-nebula.md) — Lima-X PoC packed/protected module loader framework (C++; loader library + builder; SDK APIs, dynamic service manager; patch/encrypt/pack; software protection / loader architecture / anti-analysis research; PE X64)
- [winipt](entities/winipt.md) — WinIPT library + tools for Intel Processor Trace on Windows (`ipt.sys`; per-process/per-CPU; coverage / fuzzing / execution tracing)
- [win32k-file-collection](entities/win32k-file-collection.md) — win32k.sys and related GUI-subsystem binaries across Windows builds (patch diff / vuln research)
- [Win32kHooker](entities/win32khooker.md) — win32k.sys session-space dispatch hooking; runtime disassembly + `.data` ptr swap for newer win32k builds (GetRektBoy724; GUI-subsystem / AC / RE research)
- [win32k-file-collection2](entities/win32k-file-collection2.md) — versioned win32k.sys binary corpus (Win10/11; offline diff / syscall & input-path RE)
- [winkernel-resources](entities/winkernel-resources.md) — curated Windows kernel internals & exploitation learning index (papers, talks, vulnerable-driver refs, sample driver VS solutions; NullArray; Guide)
- [win-shaper](entities/win-shaper.md) — WFP callout traffic shaper (latency/bandwidth/packet loss/queue sizing; CLI+GUI; Game Testing / network-sensitive game testing; WPO-Foundation)
- [WinRing0](entities/winring0.md) — WinRing0 driver/API CPU temperature sample (CPUID + MSR per-core temps; admin; hardware monitoring; ashleyhung)
- [Wizard-Loader](entities/wizard-loader.md) — Windows PE manual-map loader/injector (PE header erasure, thread hiding; Xwizard.exe side-load; gmh5225)
- [wizard101-spoofer](entities/wizard101-spoofer.md) — Wizard101 HWID spoofer (disk/MAC/motherboard UUID; Cheat HWID)
- [wkpe](entities/wkpe.md) — Windows kernel programming experiments; PoC drivers + user tools; process VAD enumeration; WDK/VS; build/symbol coupling (am0nsec; Enumerate VAD)
- [ward](entities/ward.md) — simple ELF runtime packer for stealthy droppers (Go/C; Anti Cheat → Binary Packer `[ELF]`)
- [WonTree RBLX Dumper](entities/wontree-rblx-dumper.md) — universal Roblox game analysis dumper (Luau; decompile stack, remote call graph, live remote logger, framework/AC pattern detection; markdown/CSV reports; LyeDevGit)
- [workflow-objc](entities/workflow-objc.md) — Binary Ninja Objective-C analysis workflow (Vector35; C++; objc_msgSend→direct-call HLIL cleanup; macOS/iOS; Cheat / [Objective-C])
- [woody_woodpacker](entities/woody-woodpacker.md) — ELF binary packer (outputs “woody”; Anti Cheat → Binary Packer)
- [wrappe](entities/wrappe.md) — Rust cross-platform app bundler (executable + resource dir → single binary; Zstandard; parallel pack/unpack; streaming decompression; metadata/resource transfer; portable one-file deployment; Anti Cheat → Binary Packer `[Rust]`; Systemcluster)
- [writemem](entities/writemem.md) — Java memory utility library for rooted Android (range search, offset filter, read/write, periodic freeze across `/proc` maps; map parsing, socket server; game memory experimentation/automation; ExploitTheLoop)
- [WoWDumpFix](entities/wowdumpfix.md) — x64dbg plugin; removes anti-dump obstacles from protected Blizzard/WoW processes; Scylla import/dump repair; attach-time breakpoint restore (C/C++; cheat / game:wow / Dump Fix)
- [wow-IAT-fix](entities/wow-iat-fix.md) — WoW client IAT repair (C/C++; plugin / modding / SDK generation; cheat / game:wow)
- [WoW Launcher](entities/wow-launcher.md) — WoW custom-server client launcher (Arctium; C#/.NET; TLS routing; multi-branch client versions + CDN endpoints; public build omits dev mode/mod loading; private-server ops + compatibility testing; cheat / game:wow [wow launcher])
- [wow-wowautofishing](entities/wow-wowautofishing.md) — WoW auto-fishing automation (C/C++; rendering / audio / memory analysis; cheat / game:wow; gmh5225)
- [vt-debuger](entities/vt-debuger.md) — Intel VT-x thin-hypervisor stealth debugger (VM-exit breakpoints/single-step/memory watch; anti-debug–invisible RE)
- [vt-debuuger](entities/vt-debuuger.md) — hacked hypervisor testing (C/C++ drivers / plugins)
- [vt-ida-plugin](entities/vt-ida-plugin.md) — VirusTotal official IDA plugin: cloud malware intelligence, byte/string/function code similarity, AI function-summary notebook (Python; cheat / IDA Plugins)
- [VTuberWithUE4](entities/vtuber-with-ue4.md) — UE4 VTuber (physics / animation / asset pipelines; Game Develop / Unreal source)
- [Veiled Experts SDK](entities/veiled-experts-sdk.md) — Veiled Experts UE SDK dump (EBalloon; generated C++ headers + names/objects dumps + offsets; agents, weapons, vehicles, UI, game modes, engine subsystems; SDK generation study; cheat / game:veiled experts)
- [VeiledExpertsSDK](entities/veiled-expertssdk.md) — Veiled Experts UE SDK dump (Da3kL3o; generated UE-style C++ headers + object/name tables; class/struct layouts and runtime metadata for static analysis and external tooling; cheat / game:veiled experts)
- [VX-It](entities/vx-it.md) — Unreal decrypt for Veiled Experts (C/C++; cheat / game:veiled experts `[Decrypt]`)
- [VxLang](entities/vxlang-page.md) — Windows x86-64/.NET binary protector (virtualization / flatten / anti-tamper; PE/DLL/SYS)

- [x14.08-coverstory-blizzard](entities/x14-08-coverstory-blizzard.md) — WoW cheat / Warden bypass (loader hooks / RunScript; C++)
- [x260-lenovo-opencore](entities/x260-lenovo-opencore.md) — ThinkPad X260 Hackintosh OpenCore EFI (macOS research host)
- [x64-EXE-Packer](entities/x64-exe-packer.md) — PE X64 binary packer (Anti Cheat → Binary Packer)
- [x64-virtualizer-rs](entities/x64-virtualizer-rs.md) — Rust toy x86-64 stack-VM obfuscator (iced-x86 lift; JIT vmenter/vmexit; VM internals study; AC Obfuscation Engine `[VM]`; cursey)
- [x64dbg](entities/x64dbg.md) — Windows x86/x64 debugger (plugins; Cheat Debugging)
- [x64dbg Call Finder](entities/x64dbg-call-finder.md) — x64dbg plugin: runtime call-frequency profiling (conditional breakpoints + counters; filter by call count; UI/gameplay handler discovery; C++; Kwansy98; Cheat x64dbg Plugins / Call Finder)
- [x64dbg-automate-pyclient](entities/x64dbg-automate-pyclient.md) — Python x64dbg Automate RPC client (ZeroMQ/msgpack; breakpoints/memory/registers/disasm/session/GUI; optional MCP server; scriptable debug sessions)
- [x64dbg-mcp](entities/x64dbg-mcp.md) — MCP server for x64dbg (TypeScript; 23 mega-tools / 151 REST endpoints; native plugin REST bridge; stepping/breakpoints/memory/disasm/tracing/anti-debug bypass/CFA/PE dump; Claude/Cursor/Windsurf)
- [x64DbgMCPServer](entities/x64dbgmcpserver.md) — x64dbg MCP plugin (C#/.NET Framework; MCP-compatible HTTP; self-hosted listener; memory/disasm/register/label/automation; AI-assisted RE; AgentSmithers; MCP for x64Dbg)
- [x64dbg Playtime](entities/x64dbg-playtime.md) — x64dbg plugin: embedded Lua scripting (memory/registers/breakpoints/labels/modules/assembler; autorun scripts; ZehMatt; Lua script)
- [x64dbgpython](entities/x64dbgpython.md) — x64dbg plugin: Python 3 scripting (C++ wrappers mirroring plugin SDK; memory/assembly/module/GUI examples; debugger automation; Running python3 script)
- [x64dbgScript](entities/x64dbg-script.md) — x64dbg script samples + Python IDA label/comment export helpers (multi-step execution, globals, instruction-sequence search; Ahmadmansoor; Cheat x64dbg Plugins / scripting)
- [x64dbg Plugin Manager](entities/x64dbg-plugin-manager.md) — x64dbg plugin install/management (C++/C; plugin development / modding; Cheat x64dbg Plugins)
- [x64dbg Trace Reader](entities/x64dbg-trace-reader.md) — standalone `.trace64` parser (Capstone disasm; register/memory state; regex filter; offline trace analysis)
- [X64DBG MapLdr](entities/x64dbg-mapldr.md) — x64dbg plugin: load linker/IDA MAP files into symbol database (MSVC/Borland; function/global/segment names; C++; Cheat x64dbg Plugins)
- [X64DBG ViewDllNotification](entities/x64dbg-view-dll-notification.md) — x64dbg plugin: view DLL load notifications (`LdrRegisterDllNotification`; C++/C++; Cheat x64dbg Plugins)
- [x64dbg XFG Marker](entities/x64dbg-xfg-marker.md) — x64dbg plugin: mark XFG call signatures as data (8-byte; before target function; Cheat x64dbg Plugins)
- [x64dbg-rippy](entities/x64dbg-rippy.md) — AI reverse engineering assistant for x64dbg (WebView2 chat; LLM tool-use; memory/disasm/breakpoints/step; Anthropic/OpenAI APIs)
- [x64dbgbinja](entities/x64dbgbinja.md) — Binary Ninja plugin (Python; x64dbg org; BN ↔ x64dbg lane)
- [x86RetSpoof](entities/x86-ret-spoof.md) — x86 (32-bit) return-address spoofing header-only library (`JMP DWORD PTR [EBX]` gadget; stdcall/cdecl/fastcall/thiscall; danielkrupinski; Cheat Spoof Stack)
- [xash-rt](entities/xash-rt.md) — Xash3D FWGS realtime path tracing (C/C++; OpenGL; Renderer)
- [xray-16](entities/xray-16.md) — open-source S.T.A.L.K.E.R. X-Ray engine (OpenXRay; 64-bit, performance fixes, mod-creator features; Windows/Linux/macOS; C++; Game Engine / RE)

- [x670e-tomahawk-anticheat-update](entities/x670e-tomahawk-anticheat-update.md) — MSI X670E Tomahawk BIOS v1KB DXE anti-cheat (option-ROM strip / NX)
- [xemu](entities/xemu.md) — original Xbox LLE emulator (QEMU fork; NV2A/OpenGL; ISO/XISO)
- [xenia](entities/xenia.md) — Xbox 360 emulator (PowerPC recompiler; D3D12/Vulkan; XEX)
- [xenia-mac](entities/xenia-mac.md) — macOS port of Xbox 360 emulator Xenia
- [xenondumper](entities/xenondumper.md) — Xbox 360 fuse/bootloader/NAND dumper for LLE emulator prep (C/C++; RGH/JTAG/devkit)
- [x360gamehack2025](entities/x360gamehack2025.md) — Xbox 360/OG Xbox all-in-one XEX/XBE/XISO/PKG/GOD patching (RGH/JTAG/Bad Update; C# WinForms)
- [xbox360-emu](entities/xbox360-emu.md) — Xbox 360 emulator (C/C++; kernel, modding, memory analysis)
- [XFiles](entities/xfiles.md) — rooted Android file explorer (prebuilt APKs; Cheat Android File Explorer)
- [xFindOut](entities/xfindout.md) — x64dbg plugin: find what writes to / accesses an address (C/C++; Cheat x64dbg Plugins)
- [Xidi](entities/xidi.md) — DirectInput↔XInput proxy DLL (virtual map / deadzone / FFB; DirectX Compatibility)
- [xMalHunter](entities/xmalhunter.md) — pe-sieve live process scan (inject/hooks/hollow; Detect malicious materials)
- [xdv](entities/xdv.md) — extension-plugin disassembler/debugger (C/C++; RE / modding / SDK generation; Cheat Debugging)
- [xpc-tracer](entities/xpc-tracer.md) — Frida XPC message tracer (iOS/macOS; xpcspy variant; cheat / Frida)
- [Xposed Module Kit](entities/xposed-module-kit.md) — Xposed/LSPosed module scaffold (hook templates, Python class scanner, root-detection bypass example)
- [xigmapper](entities/xigmapper.md) — EFI manual map (non-USB payload; Vanguard early-load research)
- [xkvm-ios-injector](entities/xkvm-ios-injector.md) — pure-Go CLI/TUI iOS sideload tweak injector (IPA/TIPA dylib/.deb injection, package format conversion, App Store IPA decrypt, Mach-O repack + ad-hoc sign)
- [xLua](entities/xlua.md) — Tencent Lua↔C# bridge for Unity/.NET/Mono (two-way interop, runtime hotfix, generated bindings; Game Hot Patch / scripting)
- [xiaomi-c400-pwn](entities/xiaomi-c400-pwn.md) — Xiaomi Smart Camera C400 exploit/jailbreak research (Python RNG-prediction exploit; Tamarin handshake models; persistent jailbreak; IoT firmware exploitation; TaszkSecLabs)
- [xiaomi-kernel-opensource](entities/xiaomi-kernel-opensource.md) — Xiaomi/Redmi kernel source branch index (MiCode; device/Android version→branch tags; driver dev / auditing / platform debugging; cheat / xiaomi kernel)
- [xiaomi-usb-security-bypass](entities/xiaomi-usb-security-bypass.md) — Magisk module bypassing MIUI/HyperOS USB debugging security settings, USB install, and fastboot account/SIM gates for scrcpy input injection on rooted Xiaomi (CHERWING; resetprop persist.security.adbinput/adbinstall + persist.fastboot.enable; Cheat / Magisk)
- [xiaomi-hyperos-bootloader-bypass](entities/xiaomi-hyperos-bootloader-bypass.md) — Xiaomi HyperOS bootloader account-binding bypass PoC (MlgmXyysd; PHP + ADB automation; Docker/shell; mobile bootloader restriction research; cheat / bootloader bypass)
- [xigncode-dump](entities/xigncode-dump.md) — XIGNCODE client-module dump (gmh5225; modding / offline RE; cheat / explore anticheat:xigncode)
- [xigncode3-blackdesert](entities/xigncode3-blackdesert.md) — XIGNCODE3/Black Desert full-pipeline static reconstruction (`xmag`/`xnina` unpack, Ghidra, Lua 5.3, VMProtect `xhunter1`; IPC/detection specs)
- [xigncode3-bypass-alternative](entities/xigncode3-bypass-alternative.md) — XIGNCODE3 bypass alternative (C++; hooking / memory analysis; cheat / explore anticheat:xigncode)
- [xigncode3-bypass](entities/xigncode3-bypass.md) — XIGNCODE3 bypass research (C++; hooking / emulation; cheat / explore anticheat:xigncode)
- [xign_poc_april_2026](entities/xign-poc-april-2026.md) — XIGNCODE3/xhunter64.sys IRP_MJ_WRITE vuln PoC (phys R/W / leak / kill)
- [xnu_1day_practice](entities/xnu-1day-practice.md) — XNU (macOS/iOS) 1-day kernel exploit practice (Mach/IOSurface/KRW; C/ObjC)
- [xnu-qemu-arm64](entities/xnu-qemu-arm64.md) — QEMU ARM64 fork booting functional iOS/XNU (launchd, bash, SSH; kernel exploit lab; `[xnu]`)
- [xnuspy](entities/xnuspy.md) — iOS XNU kernel function hooking for checkra1n A8–A11 devices (no 4K; cheat / iOS memory explorer)
- [xor-float](entities/xor-float.md) — C++ XOR float/value encrypt (Anti Cheat → Encrypt Variable)
- [XorData](entities/xordata.md) — C++17 XOR obfuscation framework (constants, variables, strings; compile-time + runtime-style transforms; AC Compile Time / Obfuscation Engine; Sherman0236)
- [xorlit](entities/xorlit.md) — string crypter (single-arg default key `xorlit::seed`; AC Compile Time / String Crypter)
- [xorPacker](entities/xorpacker.md) — C# PE XOR cipher packer (all PE; Anti Cheat → Binary Packer)
- [xorstr](entities/xorstr.md) — C++17 compile-time string encryption (SSE/AVX vectorized inline decrypt; compile-time keys; keeps literals out of `.rdata`; AC String Crypter; JustasMasiulis)
- [xqemu](entities/xqemu.md) — original Xbox via QEMU (software full-machine; Cheat QEMU/KVM lane)
- [xv](entities/xv.md) — C++ single-header pointer/value encryption (`xval<T>`; Anti Cheat → Encrypt Variable)
- [XVolkolak](entities/xvolkolak.md) — emulation-based PE unpacker (XEmulUnpacker / XEmulator single-step to OEP; Qt GUI + CLI; UPX/ASPack/MPRESS + 18 packers; Fix VMP / Unpacker)
- [XrefsExt](entities/xrefsext.md) — IDA Pro extended-xrefs plugin (cheat / IDA Plugins)
- [Xilinx FPGA PCIe XDMA Tutorial](entities/xilinx-fpga-pcie-xdma-tutorial.md) — Vivado XDMA hands-on tutorial (BRAM R/W, AXI, Linux host C, MPEG2 acceleration; DMA / FPGA education; WangXuan95)
- [yae-achievement](entities/yae-achievement.md) — Genshin Impact yae achievement mod (C#/C++; Unity/IL2CPP; gmh5225)
- [yolo-v8m](entities/yolo-v8m.md) — PUBG YOLOv8m pretrained weights distribution (Hellonihaohh; license + split compressed model artifact; no train/infer scripts; cheat / PUBG yolo dataset)
- [yolo-v8s](entities/yolo-v8s.md) — PUBG YOLOv8s pretrained weights distribution (Hellonihaohh; license + compressed model artifact; no train/infer scripts; cheat / PUBG yolo dataset)
- [yolov5_PUBG](entities/yolov5-pubg.md) — PUBG YOLOv5 object detection (Python; cheat / triggerbot & aimbot; modding)
- [YOLOv8 Overlay CS2](entities/yolov8-overlay-cs2.md) — Leksa667 CS2 Python real-time overlay (YOLOv8 ONNX + ONNX Runtime; mss capture; Pygame + Win32 transparent overlay; optional CUDA, confidence filter, hotkeys, smooth aim-assist; computer-vision cheat prototyping + AC research; cheat / game:cs2 [YOLOv8 in CS2])
- [yara4ida](entities/yara4ida.md) — Unofficial YARA IDA Pro plugin (Alt-Y; `plugins.cfg`; cheat / IDA Plugins)
- [yarka](entities/yarka.md) — IDA Pro YARA signature generator (Python; disasm/decompiler/strings/bytes; built-in editor + templates; function-level hunting; AzzOnFire; cheat / YARA signature creation)
- [YaraVM](entities/yaravm.md) — IDA processor/loader for compiled YARA (`.yar.bin` bytecode/regex disasm; `libyara.til`; cheat / IDA Plugins)
- [yarascan-ida](entities/yarascan-ida.md) — IDA Yara file scan plugin (Python; cheat / IDA Plugins)
- [yaui](entities/yaui.md) — Rust Android inject / emulation research (cheat / injection:android)
- [YAHFA](entities/yahfa.md) — Android ART method hooking framework (Java + native backup-and-hook APIs; static/virtual/JNI/framework hooks; library + demo/plugin modules; runtime instrumentation / security research; PAGalaxyLab)
- [YCBR AntiCheat](entities/ycbr-anticheat.md) — Paper 1.8.9 Minecraft AC plugin (Java 8 Maven; ProtocolLib; 19 combat/movement/protocol checks; Grim-style prediction; auth, DDoS guard, admin GUI; YcbrYL1; Anti Cheat / game:minecraft)
- [YimMenu](entities/yimmenu.md) — GTA menu-ecosystem Lua API/command docs (documentation-only after source removal; LibreTranslate chat-translation setup; script developers; YimMenu)
- [Yumekage](entities/yumekage.md) — hidden/shadowed memory region PoC (C++; guarded-region + context-switch semantics; PTE Hook; anti-cheat bypass RE; Xyrem)
- [yummyPaste](entities/yummy-paste.md) — x64dbg plugin: paste formatted byte blocks into memory views (C++; C-style arrays, escaped shellcode, comma/space-separated decimals; disassembler/dump patching; 0ffffffffh; Cheat x64dbg Plugins)
- [Yuri](entities/yuri.md) — Minecraft 1.8.9 MCP Java hack client (Gradle; bundled Java 8 + full assets; Watchdog/Polar/Grim bypass modules; unleg1t; cheat / game:minecraft)
- [yuzu-android](entities/yuzu-android.md) — yuzu Switch emulator Android port (ARM64 JIT; Vulkan/OpenGL; Nintendo Switch lane)
- [yuzu-archive](entities/yuzu-archive.md) — yuzu DMCA/takedown placeholder archive (Logboy2000; documentation + DMCA notice record; no emulator source; Nintendo Switch enforcement reference)
- [yourgamelib](entities/yourgamelib.md) — cross-platform C++11 OpenGL/OpenGL ES game framework (CMake; GLFW/GLM/ImGui/Lua/Box2D/Bullet/miniaudio; desktop/Android/web; Game Engine)
- [zelda3](entities/zelda3.md) — Zelda 3 reimplementation (playable start-to-end; Game Develop / source)
- [zam64-zemina](entities/zam64-zemina.md) — BYOVD via Zemana zam64.sys (IOCTL process kill + memory access)
- [ZAMR](entities/zamr.md) — curated MMRL module repository for Magisk/KernelSU/APatch (Play Integrity Fix, Zygisk, root-hide, TEESimulator; hourly JSON catalog; zelect0r; cheat / Magisk)
- [ZeroHVCI](entities/zero-hvci.md) — HVCI bypass PoC for unsigned kernel code (gmh5225; policy edge cases / vulnerable signed drivers; VBS research)
- [ZeroImport](entities/zeroimport.md) — C++ kernel driver runtime import resolver; hashed ntoskrnl export walk, no cleartext API strings, optional cache; import-table stealth (1hAck-0; Anti Cheat / Lazy Importer)
- [ZeroThreadKernel](entities/zero-thread-kernel.md) — threadless kernel exec via existing contexts / timers (vs AC thread enum)
- [ZhangBing-Injector](entities/zhangbing-injector.md) — M3351AN BYOVD DLL injector (C++ usermode + bundled WHQL-signed vulnerable `.sys` drivers; driver memory ops + protected-process injection; credits kdmapper; kernel-assisted injection research)
- [zig-gamedev](entities/zig-gamedev.md) — cross-platform Zig gamedev libs (DX12/Vulkan/OpenGL/audio; GPU-driven rendering samples; Game Engine)
- [zig-mcp-server](entities/zig-mcp-server.md) — high-performance memory-efficient MCP protocol implementation in Zig (Game Develop / MCP server)
- [zodiak](entities/zodiak.md) — CS 1.6 Fastcup full kernel driver cheat (3a1; C/assembly; kernel GDI ESP + MouHID callback aimbot; automatic offset detection, thread context spoofing, compact single-thread model; low-trace kernel cheat engineering + AC evasion research; cheat / game:cs1.6 [Fastcup Full Kernel Driver Cheat])
- [zn-toolbox](entities/zn-toolbox.md) — host-no-root Android container VM (Twoyi fork; Rust + Kotlin Compose; built-in root + LSPosed; multi-profile sandbox + Scrcpy remote control; Chinaapps; Cheat Xposed)
- [ZombiesVsPlants](entities/zombies-vs-plants.md) — SDL2 Plants vs. Zombies clone (lane tower defense; plant placement / projectiles / waves / sun; Game Develop / source)
- [zyemu](entities/zyemu.md) — WIP x86-64 user-mode emulator (JIT handlers + code cache; Zydis decode/encode; CPU/memory core; C++; low-level emulation / binary analysis; ZehMatt)
- [zygisk-dump-dex](entities/zygisk-dump-dex.md) — Zygisk `libdexfile.so` DEX dump (Android 14/15; Cheat Magisk)
- [zygisk-memdump](entities/zygisk-memdump.md) — Zygisk module dumps `.so` from process memory (C/C++; modding / hooking / memory analysis; Cheat Magisk)
- [Zygisk-MagiskHide](entities/zygisk-magiskhide.md) — Zygisk Magisk module recreating MagiskHide-style root concealment (mount hide + system-property patching; multi-ABI; PShocker)
- [Zygisk-Il2CppDumper](entities/zygisk-il2cppdumper.md) — Zygisk runtime IL2CPP dump module (Perfare; C/C++; post-load metadata; bypasses static encryption/obfuscation/packing; [Il2Cpp Dump for Android Platform])
- [Zygisk-Il2CppFucker](entities/zygisk-il2cppfucker.md) — Zygisk IL2CPP in-process RE engine (Darlenepurpleblack444; fork of Il2CppDumper; dump.cs + HybridCLR; memory R/W, instance scan, method invoke; Lua 5.4 + overlay; live Android Unity analysis)
- [ZygiskFrida](entities/zygisk-frida.md) — Zygisk module injects Frida gadget into app processes (Cheat Magisk)
- [Zygisk-ImGui-Menu](entities/zygisk-imgui-menu.md) — ImGui menu using Zygisk (cURL + ImGui; hook.cpp; cheat / render-draw)
- [Zygisk-ImGui-Mod-Menu](entities/zygisk-imgui-mod-menu.md) — Zygisk ImGui mod menu (in-dev; cheat / render-draw)
- [zygisk-imgui-modmenu](entities/zygisk-imgui-modmenu.md) — ImGui with Zygisk (hobby sample; cheat / render-draw research)
- [Zygisk-MyInjector](entities/zygisk-myinjector.md) — Zygisk injector module (C/C++/Java; kernel-level modding / asset pipeline; Cheat Magisk)
- [ZygiskOnKernelSU](entities/zygisk-on-kernelsu.md) — standalone Zygisk runtime for KernelSU; API-compatible; can replace Magisk built-in Zygisk; KernelSU/Magisk/APatch notes (Dr-TSNG; Run Zygisk on KernelSU)
- [Zygisk_mod](entities/zygisk-mod.md) — standalone Zygisk runtime interface (Kotlin + native); KernelSU/APatch/Magisk; alternative module-loading path when built-in or closed Zygisk stacks unavailable (Admirepowered; Standalone implementation of Zygisk)





## Sources

- Projected category map: `sources/README-categories.md` (generated on scan; 41 top-level sections; NeverC & NeverD — Your Compiler & Decoder for the AI Era placeholder; Game Engine ~157 / Renderer ~17 / Cheat ~2807 [[dragonburn]]/[[apexbot]]/[[apexdream]]/[[astronaut00-apex-external]]/[[binarylens]]/[[ida-pro-agent]]/[[sako-restudio]]/[[reverify]]/[[dereferencing]]/[[aetheris]]/[[resim-ghidra-plugins]]/[[dsh-plugins]]/[[disrobe]]/[[dragons-vs-vms]]/[[scalpel]]/[[anti-anti-debugger-driver]]/[[zamr]]/[[device-reset-spoofer]]/[[defcon-dreamcast-planetweb-research]]/[[appsealing-reversal]]/[[g-presto-anti-cheat-reverse-engineered]]/[[android-security-wizard]]+[[re4f]]+[[hacking-rust]]/[[go-hacking]]/[[embedded-hacking]]/[[intro-to-gamehacking]]/[[android-modding]]+[[dino-printer]]/[[zenware-cc]]/[[root-detection-low-level]]/[[usb-detection-bypass]]/[[xiaomi-usb-security-bypass]]/[[omikron-tns-omk-engine]]/[[r6-siege-battleye-launch-bug]]/[[msynth]] / Anti Cheat (~730) [[hawkeye]] [[pe-protector]] [[blc-gamesec-lab]] [[aeterna-rongroi]] irembo337 Fusion-AntiCheat [[ntcall64]] [[hook-detector]] [[petal-anti-freecam]] [[tshock]] [[linux-anticheat]] [[shinobix]] [[minecraft-anticheat-list]] [[are-we-anti-cheat-yet]] [[noimportz]]+[[zeroimport]]+Free-RASP-Community/[[obfstr]] / [[anti-cheat-emulator]]/[[cs2guard]]/[[ff-ace-anticheat-analysis]]/[[pokealliance-anti-cheat-analysis]]/[[void-engine]] / DirectX ~40 shader inject+[[segcap]]+[[dlss-unlocked]] / Vulkan ~12 kiero2+vocem+[[cyberpunk-better-shaders]] / Game Develop ~188 [[awesome-game-analysis]] / Game Network ~29 lightyear/ds2os/ds3os / Game CI ~3 Epic lore / Image Codec ~5 [[paintfe]] / Windows Security Features ~10 [[windows-runtime-attestation-report]] / IOS Emulator ~5 [[vphone-ws]]/[[darwin-vm]] / Xbox ~8 / PlayStation ~7 / Nintendo 3DS ~3 [[3beans]] LLE / GameCube/Wii ~1 gecko)
- Skill projections: `sources/skills/`
- Description projections: `sources/descriptions/` (incremental only)