If you find that some links are not working, you can simply replace the username with gmh5225. 
Or you can send an issue for me.

Show respect to all the projects below, perfect works of art 🫡

As AI agents increasingly write, analyze, and rewrite low-level code, generic toolchains become a bottleneck. Security researchers need semantics they can trust — deterministic compilation on the way in, and faithful decompilation on the way out. In the age of AI, everyone needs their own compiler and their own decoder.

• NeverC — The AI-friendly C23 compiler for security research. Pure C23, integrated linker, DynCode pipeline, cross-platform PE/ELF/Mach-O generation, compile-time string encryption, and a plugin API spanning 130+ compiler phases — designed so LLM-generated code compiles correctly more often than C++ alternatives.
• NeverD — The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (libneverd) built for CLI tools, integrators, and AI agents.

Compile with NeverC, analyze and decompile with NeverD — an AI-friendly LLVM toolchain you control, built for security research.

• https://github.com/HyunCafe/contribute-practice
• https://docs.github.com/en/get-started/quickstart/contributing-to-projects

This repository provides skills that can be used with AI agents and coding assistants such as Cursor, OpenClaw, Claude Code, Codex CLI, and other compatible tools. Install skills to get specialized knowledge about game security topics.

View on learn-skills.dev

Installation:

npx skills add https://github.com/gmh5225/awesome-game-security --skill <skill-name>

Available Skills:

Compiled wiki: agents can also browse wiki/ (see wiki/AGENTS.md) — a maintained knowledge layer over skills, README categories, and descriptions.

Example:

# Install anti-cheat systems skill
npx skills add https://github.com/gmh5225/awesome-game-security --skill anti-cheat-systems

# Install multiple skills
npx skills add https://github.com/gmh5225/awesome-game-security --skill windows-kernel-security
npx skills add https://github.com/gmh5225/awesome-game-security --skill reverse-engineering-tools

• Game Engine
• Mathematics
• Renderer
• 3D Graphics
• AI
• Image Codec
• Wavefront Obj
• Task Scheduler
• Game Network
• PhysX SDK
• Game Develop
• Game Assets
• Game Hot Patch
• Game Testing
• Game Tools
• Game Manager
• Game CI
• DirectX
• OpenGL
• Vulkan
• Cheat
• Anti Cheat
• Some Tricks
• Windows Security Features
• WSL
• WSA
• Windows Emulator
• Linux Emulator
• Android Emulator
• IOS Emulator
• Game Boy
• GameCube/Wii
• Nintendo 3DS
• Nintendo Switch
• Xbox
• PlayStation

Guide

• https://github.com/QianMo/Game-Programmer-Study-Notes
• https://github.com/raysan5/custom_game_engines [A comprehensive list of custom game engines]
• https://github.com/stevinz/awesome-game-engine-dev [Awesome Game Engine Development]
• https://github.com/Gforcex/OpenGraphic [Graphic Engine & Game Engine lists]
• https://github.com/bobeff/open-source-engines [A list of open source game engines]
• https://github.com/ThisisGame/cpp-game-engine-book
• https://github.com/netwarm007/GameEngineFromScratch
• https://forums.unrealengine.com [Unreal]
• https://docs.unrealengine.com [Unreal]
• https://www.unrealengine.com/resources [Unreal]
• https://github.com/donaldwuid/unreal_source_explained [Unreal]
• https://github.com/mikeroyal/Unreal-Engine-Guide [Unreal]
• https://github.com/Allar/ue5-style-guide [Unreal]
• https://github.com/revan1611/UE-Interview-Cheat-Sheet [Unreal]
• https://github.com/tomlooman/ue4-tutorials [Unreal]
• https://github.com/JaredP94/Unreal-Development-Guides-and-Tips [Unreal]
• https://github.com/ikrima/gamedevguide [Unreal Engine / game development programming guide]
• https://github.com/lettier/3d-game-shaders-for-beginners [Shader]
• https://github.com/PardCode/OpenGL-3D-Game-Tutorial-Series [OpenGL]
• https://github.com/PardCode/CPP-3D-Game-Tutorial-Series [DirectX]
• https://github.com/ssloy/tinyrenderer [Render]
• https://github.com/crazyshader/GameDev [Unity]
• https://github.com/RyanNielson/awesome-unity [Unity]
• https://github.com/shadirvan/Unity-Cheat-Sheet [Unity]
• https://github.com/QianMo/Unity-Design-Pattern [Unity Design]
• https://github.com/whx-prog/The-Seed-Link-Future [Unity VR]
• https://github.com/twohyjr/Metal-Game-Engine-Tutorial [Apple's Metal Api]
• https://github.com/GameDevGrzesiek/OptimizationBible [Game optimization notes focused on Unity and Unreal Engine]

Source

• https://github.com/EpicGames/UnrealEngine
• https://github.com/Unity-Technologies/UnityCsReference [C# reference]
• https://github.com/cocos2d/cocos2d-x
• https://github.com/cocos/cocos-engine
• https://github.com/cocos/cocos4
• https://github.com/gmh5225/GameEngine-CRYENGINE
• https://github.com/panda3d/panda3d
• https://github.com/ValveSoftware/source-sdk-2013
• https://github.com/gmh5225/source-sdk-orangebox
• https://github.com/UTINKA/source-engine.2003
• https://github.com/gmh5225/SourceEngine2007
• https://github.com/nillerusr/source-engine
• https://github.com/gmh5225/GoldSourceRebuild [GoldSource engine rebuild]
• https://github.com/K0bin/SourceRenderer [Rust toy engine/renderer with Valve Source format loaders (bsp/mdl/vpk/vtf) and Vulkan/Metal/WebGPU backends]
• https://github.com/adriengivry/Overload
• https://github.com/gmh5225/GameEngine-MapleEngine
• https://github.com/inanevin/LinaEngine
• https://github.com/apistol78/traktor [Open-source C++ Vulkan game engine with editor tooling and shipped commercial titles on Steam, PSN, iOS, and macOS]
• https://github.com/storm-devs/storm-engine
• https://github.com/minetest/minetest
• https://github.com/godotengine/godot
• https://github.com/NVIDIA-RTX/godot [NVIDIA fork of Godot Engine]
• https://github.com/gmh5225/reGS
• https://github.com/nem0/LumixEngine
• https://github.com/urho3d/Urho3D
• https://github.com/KorokEngine/Korok [Golang]
• https://github.com/matjam/bunyip [Pure Go game engine with Vulkan rendering, ECS, physics, and headless screenshot tests]
• https://github.com/BoomingTech/Pilot
• https://github.com/Sirkles/JoshoEngine-Native
• https://github.com/ExplosionEngine/Explosion
• https://github.com/danhuynh0803/Campfire
• https://github.com/lowenware/dotrix [Rust]
• https://github.com/bevyengine/bevy [Rust]
• https://github.com/FyroxEngine/Fyrox [Rust]
• https://github.com/AmbientRun/Ambient [Rust]
• https://github.com/PrograMistV1/ursus [Rust Vulkan engine with render graph, ECS, asset pipeline, and deferred pipelines]
• https://github.com/matthewjberger/nightshade [Rust data-oriented game engine with custom ECS and wgpu PBR renderer (native/web/VR)]
• https://github.com/not-fl3/macroquad [Rust 2D]
• https://github.com/AbyssEngine/AbyssEngine [ARPG]
• https://github.com/skylicht-lab/skylicht-engine
• https://github.com/ValveSoftware/halflife [Half-Life 1]
• https://github.com/SamVanheer/halflife-unified-sdk [Half-Life SDK]
• https://github.com/alliedmodders/hl2sdk [Half-Life SDK]
• https://github.com/ezhangle/hlmaster [Half-Life Master Server]
• https://github.com/MonoGame/MonoGame [.NET]
• https://github.com/libgdx/libgdx [Cross-platform Java game development framework]
• https://github.com/vchelaru/FlatRedBall [.NET 2D]
• https://github.com/nCine/nCine [2D]
• https://github.com/gameplay3d/gameplay [2D/3D]
• https://github.com/NoelFB/blah [C++ 2D]
• https://github.com/Squalr/Squally [C++ 2D]
• https://github.com/Hekbas/Luth [C++ 2D]
• https://github.com/u3d-community/U3D [C++ 2D/3D]
• https://github.com/turbulenz/turbulenz_engine [HTML5]
• https://github.com/melonjs/melonJS [HTML5]
• https://github.com/egret-labs/egret-core [HTML5]
• https://github.com/pixijs/pixijs [HTML5]
• https://github.com/BabylonJS/Babylon.js [HTML5/WebGL/WebGPU game and rendering engine]
• https://github.com/playcanvas/engine [HTML5 3D]
• https://github.com/TorqueGameEngines/Torque2D [2D]
• https://github.com/TorqueGameEngines/Torque3D [3D]
• https://github.com/gmh5225/GameEngine-CX3D [3D]
• https://github.com/solenum/exengine [C99 3D]
• https://github.com/TheCherno/Hazel
• https://github.com/duddel/yourgamelib
• https://github.com/Serious-Engine/Base
• https://github.com/benanil/Castle-Engine [DX11]
• https://github.com/OpenArena/engine [quake3]
• https://github.com/rbfx/rbfx [C# support and WYSIWYG editor]
• https://github.com/BobbyAnguelov/Esoterica
• https://github.com/ZDoom/gzdoom [Doom]
• https://github.com/UZDoom/UZDoom [Doom source port, GZDoom continuation]
• https://github.com/L-Spiro/L.-Spiro-Engine-2022
• https://github.com/MohitSethi99/ArcEngine
• https://github.com/gscept/nebula
• https://github.com/irisengine/iris [cross-platform C++]
• https://github.com/WistfulHopes/NightSkyEngine [A fighting game engine written in Unreal Engine 5]
• https://github.com/ObEngine/ObEngine [2D+Lua]
• https://github.com/harukumo/HorizonEngine [3D rendering engine]
• https://github.com/benjinx/Toon [C++]
• https://github.com/chrismaltby/gb-studio [GameBoy]
• https://github.com/orx/orx [C++]
• https://github.com/gmh5225/EtherealEngine [C++]
• https://github.com/clibequilibrium/EquilibriumEngine [C++]
• https://github.com/turanszkij/WickedEngine [C++ 3D]
• https://github.com/AustinBrunkhorst/Ursine3D [C++ 3D]
• https://github.com/RavEngine/RavEngine [C++ 3D]
• https://github.com/asc-community/MxEngine [C++ 3D]
• https://github.com/jmorton06/Lumos [C++ 2D/3D]
• https://github.com/fredakilla/GPlayEngine [C++ 2D/3D]
• https://github.com/crownengine/crown [C++ 2D/3D]
• https://github.com/FlaxEngine/FlaxEngine [C++/C# 3D]
• https://github.com/stride3d/stride [C# 3D]
• https://github.com/ProwlEngine/Prowl [Open-source C# 3D game engine with Unity-like editor (MIT)]
• https://github.com/Net5F/AmalgamEngine
• https://github.com/rxi/kit [pixels]
• https://github.com/isadorasophia/murder [pixel]
• https://github.com/nitaigao/engine-showcase [Old engine]
• https://github.com/PanosK92/SpartanEngine [Research-focused game engine designed for real-time solutions]
• https://github.com/OpenXRay/xray-16 [Improved version of the X-Ray Engine]
• https://github.com/love2d/love [2D game framework for Lua]
• https://github.com/4ian/GDevelop [Open-source cross-platform 2D/3D/multiplayer game engine]
• https://github.com/multitheftauto/mtasa-blue [Multi Theft Auto — networked multiplayer engine/mod framework for GTA: San Andreas]
• https://github.com/PixelGuys/Cubyz [3D voxel sandbox game written by Zig language]
• https://github.com/RSDKModding/RSDKv5-Decompilation [Retro Engine v5 / v5Ultimate decompilation]
• https://github.com/InfiniteC0re/OpenBarnyard [WIP decompilation of Barnyard and the proprietary TOSHI 2.0 engine, with Ghidra RE workflow]
• https://github.com/OpenKH/OpenKh [Kingdom Hearts reverse-engineering libraries, tools, engine research, and modding documentation]
• https://github.com/koosoli/PoseidonVK [Vulkan modernization fork of the Poseidon/CWR-CE engine (Arma: Cold War Assault)]
• https://github.com/udinmoInc/WindEffects [C++23 Vulkan game engine with ECS, editor, and asset pipeline]
• https://github.com/MasterLaplace/LplPlugin [Experimental C++23 engine with Vulkan, ECS, Linux kernel IPC module, and Morton spatial partitioning]
• https://github.com/goobz22/cat-annihilation [C++20/Vulkan/CUDA engine with render graph, clustered deferred PBR, ECS, and wave-survival test game]
• https://github.com/orkitec/orkige [C++20 game engine with dual OGRE renderers, Lua scripting, and AI-native editor over MCP]
• https://github.com/Bloom-Engine/engine [Native TypeScript game engine compiling to Metal, DirectX 12, Vulkan, OpenGL, and WebGPU]
• https://github.com/Krilliac/SparkEngine [Open-source C++23 3D engine with DirectX 12/Vulkan RHI, ECS, Jolt Physics, and ImGui editor]
• https://github.com/HyperionGameTech/HyperionEngine [C++/C# game engine with DirectX 12 and Vulkan, editor, multiplayer, and Glimmer GI with clustered deferred rendering]
• https://github.com/doriaxengine/doriax [Cross-platform C++ ECS game engine with editor, Lua/C++ scripting, and DirectX/OpenGL/Metal/Vulkan backends]
• https://github.com/wh1t3lord/kotek [Modular C++20 game/application framework with OpenGL ES, Vulkan, DirectX, and BGFX backends]
• https://github.com/oxylusengine/Oxylus [Data-driven C++ game engine with modular Vulkan renderer, flecs ECS, Lua scripting, and ImGui editor]
• https://github.com/ostef/Vk-Engine [WIP Vulkan game engine with hot-reloadable modules, clustered forward rendering, PBR, and editor viewports]
• https://github.com/RuqoomTech/Pyramid-Engine [C++ Windows OpenGL game engine with deferred/forward rendering, tests, and CI (pre-alpha)]

Game Engine Plugins:Unreal

• Plugin for UE4 to user Rider for Unreal Engine as code editor
• Design-agnostic node system for scripting game’s flow in Unreal Engine
• Sample Unreal Engine 5.0.1 C++ Project That Incorporates Dear ImGui
• A set of tools and utilities for use with Unreal Engine projects using ImGui
• A simple Unreal Engine subsystem to provide a more accurate server world time to clients
• UE4 UI Texture Validator Plugin
• Unreal Engine .NET 6 integration
• Houdini Engine Plugin for Unreal Engine
• A small tutorial repository on capturing images with semantic annotation from UnrealEngine to disk
• UE4 plugin for live2d model
• An Unreal Engine code plugin that adds a custom asset type and editor to the engine
• Unreal Engine 4 Plugin for Lua APIs implementation
• Debug Menu for UnrealEngine4
• https://github.com/Ghostleadie/CheatManagerMenu [UE 5.8 plugin that auto-builds an in-game cheat menu by reflecting UCheatManager and registered cheat extensions]
• 'Dear Imgui' remote access library and application
• Customizable performance metric charts and STAT commands control panel
• Unreal Engine plugin providing a set of Hermes endpoints
• Unreal Engine 4 Plugin for Lua APIs implementation
• Copies the argument string to the clipboard and outputs the characters copied to the clipboard
• Generic graph data structure plugin for ue4
• https://github.com/TheGeebus/SimpleQuest [Unreal Engine 5.6+ event-driven progression/quest framework with visual graph authoring]
• A quick implementation of modular game features for the 'BTS' test
• https://github.com/Natfii/UnrealClaude [Claude Code CLI integration for Unreal Engine 5.7; AI coding assistance with built-in UE5.7 documentation context in the editor]

Game Engine Plugins:Unity

• A markdown viewer for unity
• An integrated solution for authoring / importing / simulating / rendering strand-based hair in Unity
• A maintained collection of useful & free unity scripts / library's / plugins and extensions
• ChatGPT integration with Unity Editor
• Code editor integration for supporting Cursor as code editor for unity
• https://github.com/Besty0728/Unity-Skills [AI automation skills specifically designed for Unity]
• https://github.com/yucchiy/UniCli [CLI to control Unity Editor from terminal — compile, test, build, inspect GameObjects; 80+ commands, AI-agent ready (Claude Code plugin, Agent Skills)]

Game Engine Plugins:Godot

• https://github.com/GDPatch/GDPatch [Cross-platform cross-version Godot 4.x mod loader with script patching, Lua hooks, and runtime mod loading without modifying game files]
• https://github.com/libriscv/godot-sandbox [Sandboxing that enables safe modding for Godot games]
• https://github.com/gtibo/Godot-Plush-Character [3D Plush Character for Godot 4.x]
• https://github.com/allenwp/godot-resource-remaps [Godot editor export plugin for remapping resources by feature tags]

Game Engine Plugins:Lumix

• https://github.com/nem0/lumixengine_maps [Map downloader]

Game Engine Detector

• https://github.com/walzer/game-engine-detector [Mobile Game]

• https://github.com/nfrechette/rtm
• https://github.com/microsoft/DirectXMath
• https://github.com/Kazade/kazmath
• https://github.com/milakov/int_fastdiv
• https://github.com/freemint/fdlibm
• https://github.com/Jaysmito101/cgl
• https://github.com/orange-cpp/omath [C++23 constexpr math/physics framework for game, mod, and cheat development]

• https://github.com/bkaradzic/bgfx [Rendering library]
• https://github.com/DiligentGraphics/DiligentEngine [Rendering library]
• https://github.com/LukasBanana/LLGL [Thin C++ abstraction over OpenGL, D3D11/12, Vulkan, and Metal with C/C#/Go wrappers]
• https://github.com/kanition/pbrtbook [Physically Based Rendering: From Theory To Implementation]
• https://github.com/keith2018/SoftGLRender
• https://github.com/DQLin/VolumetricReSTIRRelease
• https://github.com/HackerPoet/NonEuclidean
• A graphics engine designed to run on a single thread on CPU
• https://github.com/paroj/gltut [OpenGL Render]
• https://github.com/ashawkey/raytracing [RayTracer]
• https://github.com/sultim-t/xash-rt [Xash3D FWGS with a real-time path tracing]
• https://github.com/crosire/reshade [A generic post-processing injector for games and video software]
• https://github.com/harukumo/HorizonEngine [3D rendering engine]
• https://github.com/Patryk27/strolle [Real-time rendering engine]
• https://github.com/ssloy/tinyraytracer [A brief computer graphics / rendering course]
• https://github.com/freetype/freetype [Render fonts]
• https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
• https://github.com/EmbarkStudios/kajiya [Experimental real-time global illumination renderer]
• https://github.com/tgfrerer/island [Experimental hot-reloading Vulkan renderer/engine (C/C++) for Linux and Windows]

• https://github.com/gmh5225/nv-graphics-mesa
• https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
• https://github.com/mrdoob/three.js [JavaScript 3D Library]
• https://github.com/playcanvas/supersplat [3D Gaussian Splat Editor]

• https://github.com/ls361664056/GameAI-paper-list [zh]
• https://github.com/lightningpixel/modly [Local image-to-3D mesh desktop app; open-source AI on GPU; Windows/Linux; extensible generators]
• https://github.com/neilsonnn/image-blaster [Claude skillset: single image to 3D meshes (.glb/.obj), Gaussian splat environment (.spz), and SFX; World Labs + FAL; Unity/Unreal/Godot/Blender]
• https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D pipeline: GPT Image 2.0 concept → TRELLIS.2 GLB; QA gate, review HTML, web/Unity/Unreal export; mock & remote GPU runners]
• https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]

• https://github.com/nothings/stb
• https://github.com/libjpeg-turbo/libjpeg-turbo
• https://github.com/erkkah/tigr
• https://github.com/tsoding/olive.c
• https://github.com/kylejckson/PaintFE [Rust raster image editor — layers, wgpu GPU filters, Rhai scripting, CLI batch, GIF/APNG, single portable binary]

• https://github.com/tinyobjloader/tinyobjloader
• https://github.com/Twinklebear/tobj [Rust]

• https://github.com/SergeyMakeev/TaskScheduler

Guide

• https://github.com/MFatihMAR/Game-Networking-Resources
• https://partner.steamgames.com/doc/api/ISteamNetworkingMessages#functions_sendrecv [Steam]
• https://github.com/mcxiaoke/mqtt [mqtt]

Source

• https://github.com/cloudwu/skynet
• https://github.com/ketoo/NoahGameFrame [Server Engine]
• https://github.com/chronoxor/CppServer
• https://github.com/Qihoo360/evpp
• https://github.com/ValveSoftware/GameNetworkingSockets [Steam]
• https://github.com/mas-bandwidth/yojimbo [C++ network library for client/server games]
• https://github.com/pond3r/ggpo [Rollback networking SDK using input prediction and speculative execution; includes the Vector War sample]
• https://github.com/gschup/ggrs [Safe Rust reimagining of GGPO with a request-based API; includes P2P, spectator, and sync-test examples]
• https://github.com/HeatXD/GekkoNet [C/C++ P2P rollback networking SDK inspired by GGPO and GGRS, with input prediction and speculative execution]
• https://github.com/skywind3000/kcp [KCP]
• https://github.com/Unit-X/kcp-cpp [KCP]
• https://github.com/TLeonardUK/ds3os [Dark Souls 3]
• https://github.com/TLeonardUK/ds2os [Dark Souls 2]
• https://github.com/geekrainian/killingfloor-bot-client [Killing Floor UE2.5 headless client with protocol docs, Steam auth RE, and Ghidra scripts]
• https://github.com/MythicalFentWizard/battlebit-revival [Self-hosted BattleBit Remastered master server (.NET), launcher, and documented GameAssembly.dll auth-patch script for private clusters with optional anti-cheat hooks]
• https://github.com/ljagiello/lastwar-client [Go reimplementation of Last War mobile client networking: GSL RSA/AES bootstrap, SFS2X framing, and SFSObject codec with live protocol documentation]
• https://github.com/Bratah123/Spirit-PTCGO [Pokemon TCG Online private server emulator]
• https://github.com/DragonMinded/bemaniutils [RE toolkit for BEMANI arcade titles: network service emulation, packet sniff/redirect/reconstruct, and binary asset unpack/repack utilities]
• https://github.com/rathena/rathena [MMORPG]
• https://github.com/TrinityCore/TrinityCore [Server for WOW]
• https://github.com/uNetworking/uWebSockets [WebSockets]
• https://github.com/socketio/socket.io [Nodejs]
• https://github.com/mqttjs/MQTT.js [mqtt nodejs]
• https://github.com/eclipse/paho.mqtt.cpp [mqtt cpp]
• https://github.com/topfreegames/pitaya [Server framework]
• https://github.com/cBournhonesque/lightyear [Rust server-authoritative Bevy multiplayer library with prediction, rollback, and WebTransport/wasm support]
• https://github.com/azerothcore/azerothcore-wotlk [Server for WOW]
• https://github.com/arlyon/azerust [Rust Server for WOW]
• https://github.com/arlyon/awesome-wow-rust [Rust Server for WOW]
• https://github.com/2601677867/One-Click-Run_Source_Server [Server for Source Engine]

JWT / Auth Token

• https://github.com/ticarpi/jwt_tool [JWT toolkit — validate, forge, scan, tamper; CVE tests (alg=none, RS/HS256, key injection, etc.), fuzzing, dict attack]

Location / Geocoding

• https://github.com/traccar/traccar-geocoder [Self-hosted reverse geocoding from OpenStreetMap; Traccar stack; Rust server + C++ PBF indexer, Docker]

• https://github.com/NVIDIAGameWorks/PhysX
• https://github.com/NVIDIAGameWorks/PhysX-3.4
• https://github.com/bulletphysics/bullet3

Guide

• https://github.com/Calinou/awesome-gamedev
• https://github.com/notpresident35/learn-awesome-gamedev
• https://github.com/yrgo/awesome-educational-games
• https://github.com/bobeff/open-source-games [A list of open source games]
• https://github.com/michelpereira/awesome-open-source-games [Collection of Games]
• https://github.com/raizam/gamedev_libraries [A collection of open source c/c++ libraries for gamedev]
• https://github.com/gheja/game-design-documents [Game design documents]
• https://github.com/Kavex/GameDev-Resources [Game Development resources]
• https://respawnstack.com [Curated directory of AI tools for game developers]
• https://github.com/crazyshader/GameDev [Unity]
• https://github.com/RyanNielson/awesome-unity [Unity]
• https://github.com/QianMo/Unity-Design-Pattern [Unity Design]
• https://github.com/michal-z/zig-gamedev [Building game development ecosystem for ziglang]
• https://github.com/OTFCG/Awesome-Game-Analysis [Video game tech analysis resources]
• https://github.com/killop/anything_about_game [Game Development resources]
• https://github.com/TastSong/GameProgrammerStudyNotes [Game Development notes]
• https://github.com/alexgaoth/awesome-reverse-engineered [Index of 16,800+ open-source projects built by reverse engineering, including 6,000+ game decompilations, static recompilations, engine reimplementations and private servers]
• https://github.com/gmh5225/gtav-sourcecode-build-guide [GTA V Source Code Build Tutorial]

Source

• https://github.com/PiMoNFeeD/csgo-src [Leaked CSGO]
• https://github.com/perilouswithadollarsign/cstrike15_src [Leaked CSGO With CI]
• https://github.com/gmh5225/Far-Cry-1-Source-Full [Leaked Far Cry 1]
• https://github.com/gmh5225/FarCry [Leaked Far Cry 1]
• https://github.com/SwagSoftware/Kisak-Strike [Open Source CSGO]
• https://github.com/SwagSoftware/KisakCOD [COD4 Open Source Reimplementation]
• https://github.com/SwagSoftware/KisakBlack [COD:Black Ops Open Source Reimplementation]
• https://github.com/gmh5225/csso-src [CSGO Mod]
• https://github.com/thomaseichhorn/cs16-client [Rewrote CS1.6]
• https://github.com/s1lentq/ReGameDLL_CS [Reversed CS1.6]
• https://github.com/Velaron/cs16-client [Reversed CS1.6]
• https://github.com/Source2ZE/CS2Fixes [CS2 mod]
• https://github.com/gmh5225/Game-GTA-re3 [Reversed GTA III, Vice City]
• https://github.com/gmh5225/reGTA [Reverse Engineered GTA III and GTA VC]
• https://github.com/gta-reversed/gta-reversed-modern [Reimplementation of GTA:SA 1.0 US]
• https://github.com/monstercameron/LibertyFlux [GTA IV RAGE engine Rust reimplementation via Ghidra-assisted reverse engineering for 64-bit Windows, Windows on ARM, and macOS; no game assets]
• https://github.com/ThirteenAG/GTAIV.EFLC.FusionFix [GTA IV: Complete Edition fixes and modern-feature patch (graphics, FPS, QoL, scripting, widescreen)]
• https://github.com/gmh5225/Grand-Theft-Auto-Modding-Source [Code snippets for Vice City]
• https://github.com/Harrison1/unrealcpp [UE4 C++ examples]
• https://github.com/QianMo/UE4-FPS-Game [UE4 FPS Game]
• https://github.com/KitchenGun/UE4_FPS [UE4 FPS Demo]
• https://github.com/tomlooman/SimpleFPSTemplate [UE4 FPS Demo]
• https://github.com/tomlooman/EpicSurvivalGame [UE4 FPS Game]
• https://github.com/QianMo/UE4-Tank-Game [UE4 Game]
• https://github.com/gmh5225/UE5-FPS-CryptRaider [UE5 FPS Game]
• https://github.com/LeroyTechnologies/ProjectM [UE5 FPS Game]
• https://github.com/invi1998/MultiplayerBlasterGame [UE5 FPS Game]
• https://github.com/DruidMech/MultiplayerCourseBlasterGame [UE5 FPS Game]
• https://github.com/gmh5225/UE5MultiplayerProject [UE5 horror game with anti-cheat]
• https://github.com/perfect-hand/ue5-cardgame [UE5 Card Game]
• https://github.com/stackOverflower92/FightingGame-UE5 [UE5 Fighting Game]
• https://github.com/gmh5225/UnrealEngine5-UltimateStreetFighters [UE5 StreetFighters Game]
• https://github.com/EvelynSchwab/ComponentFuseMechanic [UE5 constraining system]
• https://github.com/CobraCodeDev/TP_2DSideScrollerBP [UE5 2D template]
• https://github.com/gmh5225/ue5-roll-a-ball-game [UE5 Roll a Ball Game]
• https://github.com/tomlooman/ActionRoguelike [UE Roguelike Game]
• https://github.com/Unity-Technologies/FPSSample [Unity Game]
• https://github.com/OguzKaira/FPS-Movement [Unity FPS]
• https://github.com/OguzKaira/SQLite-Unity3D [Unity SQLite]
• https://github.com/swordjoinmagic/MoBaDemo [Unity MoBa]
• https://github.com/gmh5225/U3D_MiniDNF [Unity mini DNF]
• https://github.com/gmh5225/unity-vrchat-template [Unity VRChat Template]
• https://github.com/Saukiya/Arknights [Unity Arknights]
• https://github.com/ZehMatt/SnakeRoyal [Mini Game With Server]
• https://github.com/MKXJun/Super-Fighter [DX11 Mini Game]
• https://github.com/MKXJun/Rubik-Cube [DX9/11 Mini Game]
• https://github.com/Suprcode/mir2 [MIR2]
• https://github.com/Suprcode/mir3-zircon [MIR3]
• https://github.com/WolfireGames/overgrowth [Overgrowth]
• https://github.com/solidi/hl-mods [Modification For Half-Life]
• https://github.com/codingben/maple-fighters [A small online game similar to MapleStory]
• https://github.com/gmh5225/WinAPI_MapleStory [WinAPI MapleStory]
• https://github.com/ZeromaXHe/MapleStoryCopy [Godot MapleStory]
• https://github.com/godotengine/godot-demo-projects [Demonstration and Template Projects for Godot]
• https://github.com/loqix/Fortnite [Fortnite]
• https://github.com/bradharding/doomretro [DOOM]
• https://github.com/Daivuk/PureDOOM [DOOM]
• https://github.com/NSG650/NtDOOM [Doom running in the NT kernel]
• https://github.com/Luxon98/Super-Mario-Bros-game [Remake of Super Mario]
• https://github.com/plibither8/2048.cpp [2048]
• An open source re-implementation of RollerCoaster Tycoon 2
• This is the old Paradise SPRX BO2 soruce code
• https://github.com/dreamstalker/rehlds [Reverse-engineered HLDS]
• https://github.com/AndroidModLoader/AndroidModLoader [Android Mod Loader]
• https://github.com/marblexu/PythonPlantsVsZombies [PlantsVsZombies]
• https://github.com/mhyousefi/ZombiesVsPlants [PlantsVsZombies]
• https://github.com/Fewnity/Counter-Strike-DS-Unity-Project [Unity CS]
• https://github.com/Fewnity/Counter-Strike-Nintendo-DS [Nintendo CS]
• https://github.com/ppy/osu [osu]
• https://github.com/ppy/osu-framework [osu]
• https://github.com/dufernst/LegionCore-7.3.5 [wow]
• https://github.com/RageProject/5.4.7-Wow-source [wow]
• https://github.com/SkyFire/MopCore547 [wow]
• https://github.com/Arctium/WoW-Launcher [wow launcher]
• https://github.com/skMetinek/Non-Newtonian-New-York [Spider-Man Remastered Mod]
• https://github.com/playgameservices/cpp-android-basic-samples [Sample games using the Google Play Games C++ SDK]
• https://github.com/pafuhana1213/KawaiiPhysics [Simple fake Physics for UnrealEngine4 & 5]
• https://github.com/pafuhana1213/VTuberWithUE4 [UE4 VTuber]
• https://github.com/Bratah123/GojoTheSpire [Slay The Spire Remastered Mod]
• https://github.com/snesrev/zelda3 [A reimplementation of Zelda 3]
• https://github.com/kantam5/DeadByDaylight [Dead By Daylight Copy]
• https://github.com/Phobos-developers/Phobos [Red Alert 2: Yuri's Revenge engine extension]
• https://github.com/praydog/AutomataMP [NieR]
• https://github.com/xinyu-evolutruster/3D-Racing-Game [A racing game based on OpenGL]
• https://github.com/ProjectBorealis/PBCharacterMovement [HL2-style, classic FPS movement for UE4 implemented in C++]
• https://github.com/Merisho/tx-holdem [Texas Holdem Poker made by JS]
• https://github.com/raysan5/raylib [A simple and easy-to-use library to enjoy videogames programming]
• https://github.com/Bigfoot71/r3d [3D Extension Library for raylib]
• https://github.com/scottcgi/Mojoc [A cross-platform, open-source, pure C game engine for mobile game]
• https://github.com/MarilynDafa/Bulllord-Engine [lightspeed lightweight elegant game engine in pure c]
• https://github.com/orangeduck/Corange [Pure C Game Engine]
• https://github.com/NotYetGames/WarriOrb [a Dark-Souls like action platformer using UE4]
• https://github.com/pjasicek/OpenClaw [Reimplementation of Captain Claw (1997) platformer]
• https://github.com/galaxyhaxz/devilution [Reversed Devilution]
• https://github.com/assaultcube/AC [FPS Game]
• https://github.com/fishfolk/jumpy [Pixels style]
• https://github.com/jynew/jynew [JinYongLegend]
• https://github.com/johndpope/pianogame [Piano Game]
• https://github.com/gmh5225/QQTang [QQTang]
• https://github.com/kvnxiao/storytime [Remake of MapleStory]
• https://github.com/deathkiller/jazz2-native [Remake of Jazz Jackrabbit 2]
• https://github.com/electronicarts/CnC_Red_Alert [Command and Conquer: Red Alert]
• https://github.com/huangkaoya/redalert2 [Red Alert 2 on Web]

MCP server

• https://github.com/TensorBlock/awesome-mcp-servers [Awesome MCP]
• https://github.com/ahujasid/blender-mcp [Blender Model Context Protocol Integration]
• https://github.com/chongdashu/unreal-mcp [MCP for Unreal Engine]
• https://github.com/kvick-games/UnrealMCP [MCP for Unreal Engine]
• https://github.com/VedantRGosavi/UE5-MCP [MCP for Unreal Engine 5]
• https://github.com/glmour/ue-live-bridge [UE4SS Lua bridge with Python MCP driver for live UObject/UFunction control and verified agent write claims]
• https://github.com/justinpbarnett/unity-mcp [MCP for unity]
• https://github.com/wondeks/unity-mcp [MCP for unity]
• https://github.com/gmh5225/mcpup [MCP for unity]
• https://github.com/IvanMurzak/GameDev-MCP-Server [Engine-agnostic MCP server shared by Unity-MCP, Godot-MCP, and Unreal-MCP]
• https://github.com/IvanMurzak/Unreal-MCP [Unreal Editor MCP plugin (C++ editor plugin + .NET bridge) for AI agents via GameDev-MCP-Server or ai-game.dev]
• https://github.com/IvanMurzak/Godot-MCP [Godot 4 editor MCP addon (C#) for AI-driven scene, script, and asset tooling via GameDev-MCP-Server or ai-game.dev]
• https://github.com/n24q02m/better-godot-mcp [Composite MCP server for Godot Engine AI-assisted game development]
• https://github.com/zeegzoog/godot-mcp [Rust MCP server with a Godot 4 editor WebSocket bridge for live scene inspection and undoable edits, plus headless Godot CLI fallback]
• https://github.com/gmh5225/vibe-blocks-mcp [MCP for Roblox Studio]
• https://github.com/willy92wins/dayz-mcp [DayZ MCP server with 53 tools for mod build/run, server-authoritative world control, telemetry, and automated in-game testing]
• https://github.com/snackbar92hypernova/quen-mcp [MCP server for agent-driven Witcher 3 mod dev and testing: reproducible sessions, in-game control, frame-time A/Bs, memory reads/patches, staged mods, and a SQLite result ledger]
• https://github.com/rehan-remade/universal-modder [Agent skills, fal MCP, and um CLI for game recon, RE, mod building, and in-game verification]
• https://github.com/laaielichter/reverseport [MCP server and CLI for agent-driven game RE: Godot packs, Unity IL2CPP, native/.NET via Ghidra/IDA/Hopper, build diffing, and cross-engine porting with parity checks]
• https://github.com/1llu50ry/mcp-reverse [Aggregated MCP server for game RE and debugging: 180+ tools, multi-backend decompilation, Frida bridge, anti-cheat skill corpus, and agent mesh for Claude/Cursor/Codex]
• https://github.com/LaurieWired/GhidraMCP [MCP for Ghidra]
• https://github.com/jtang613/GhidrAssistMCP [MCP for Ghidra]
• https://github.com/mrphrazer/ghidra-headless-mcp [ghidra-headless-mcp — headless Ghidra over MCP]
• https://github.com/morluto/rea [Local CLI and MCP server for agent-assisted reverse engineering of native binaries, JavaScript/Electron apps, and .NET assemblies; returns evidence provenance and limitations; native deep analysis needs separately installed Hopper, Ghidra, or IDA]
• https://github.com/mrexodia/ida-pro-mcp [MCP for IDA pro]
• https://github.com/bkerler/ida_rpc [IDA Pro JSON-RPC daemon for LLM/agent-assisted RE: decompile, xrefs, types, patches; headless & GUI; ghidra-rpc-compatible CLI]
• https://github.com/cellebrite-labs/ida-bridge [Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
• https://github.com/saileaxh/iida-mcp [Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
• https://github.com/MeroZemory/ida-multi-mcp [Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
• https://github.com/cnitlrt/headless-ida-mcp-server [MCP for IDA pro(headless)]
• https://github.com/MxIris-Reverse-Engineering/ida-mcp-server [MCP for IDA pro]
• https://github.com/taida957789/ida-mcp-server-plugin [MCP for IDA pro]
• https://github.com/fdrechsler/mcp-server-idapro [MCP for IDA pro]
• https://github.com/rand-tech/pcm [MCP for IDA pro]
• https://github.com/Iamgublin/ida-codex-mcp [IDA Codex MCP]
• https://github.com/HLND2T/CS2_VibeSignatures [Generate CS2 signatures via Agent SKILLS with ida-pro-mcp]
• https://github.com/axelmierczuk/tenrec [A headless, extendable, multi-session, IDA Pro MCP framework]
• https://github.com/blacktop/ida-mcp-rs [Headless IDA Pro MCP server]
• https://github.com/fosdickio/binary_ninja_mcp [MCP for Binary_Ninja]
• https://github.com/Invoke-RE/binja-lattice-mcp [MCP for Binary_Ninja]
• https://github.com/mrphrazer/binary-ninja-headless-mcp [Headless Binary Ninja MCP server with 181 RE tools for AI agents — disassembly, IL, patching, types, xrefs, undo/redo, and scripting without a GUI]
• https://github.com/dnakov/radare2-mcp [Radare2 MCP Server]
• https://github.com/GLips/Figma-Context-MCP [Cursor Talk To Figma MCP server]
• https://github.com/gmh5225/hex2dec-mcp [MCP server that provides conversion between hexadecimal and decimal numbers]
• https://github.com/signal-slot/mcp-gdb [MCP for GDB]
• https://github.com/jtang613/gdb-mcp [Lightweight MCP server for GDB automation (FastMCP, SSE, gdb-command proxy)]
• https://github.com/svnscha/mcp-windbg [MCP for WinDBG]
• https://github.com/Devolutions/windbg-tool [Windows CLI + MCP for WinDbg/TTD: replay .run traces, dump triage, live probes; JSON for AI agents; Rust]
• https://github.com/AgentSmithers/x64DbgMCPServer [MCP for x64Dbg]
• https://github.com/bromoket/x64dbg_mcp [MCP for x64Dbg with extensive tooling]
• https://github.com/IChooseYou/Reclass [MCP for Reclass]
• https://github.com/ant4g0nist/lisa.py [MCP for LLDB]
• https://github.com/droidrun/droidrun [MCP for Android]
• https://github.com/un4ckn0wl3z/MemMCP [Cheat Engine-like but MCP]
• https://github.com/Neverdecel/pcileech-memprocfs-mcp [Linux-native MCP server for PCILeech/MemProcFS DMA memory R/W, RE scanning, and UE/Unity SDK dumping]
• https://github.com/rabbanyhmm/DnSpyMCP [MCP server for .NET assembly RE, IL2CPP/Unity dump analysis, cross-refs, and network patching (31 tools)]
• https://github.com/Eruditi/CE-MCP-Plugin [MCP for Cheat Engine]
• https://github.com/miscusi-peek/cheatengine-mcp-bridge [MCP for Cheat Engine]
• https://github.com/beamstar/cheatengine-mcp-bridge [MCP for Cheat Engine]
• https://github.com/illegal-instruction-co/processhacker-mcp [MCP for runtime analysis and process hacking; ProcessHacker for AI agents, extensible with DLL plugins]
• https://github.com/AnonymoDGH/cheat-mcp [C++17 MCP server for Windows game memory R/W, scanning, DLL injection, IAT hooking, speedhack, and anti-cheat detection]
• https://github.com/CorruptedAng3l/llm-game-automation-mcp [MCP server and vinput DLL for per-process background Windows game automation: DXGI/Vulkan/GL capture, in-process input hooks, and optional anti-cheat process refusal]
• https://github.com/0111-0222/uc-mcp [Read-only, date-aware MCP server for searching UnknownCheats forum threads via your own session cookies]
• https://github.com/zinja-coder/apktool-mcp-server [A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)]
• https://github.com/xjoker/delamain [Headless JADX MCP server for AI-driven Android APK/DEX/AAB reverse engineering]
• https://github.com/azw413/Glass [Built-in MCP for mobile RE — CLI verbs (disasm, search, cfg-of, dex-callers, bin-search, insn-search, etc.) as MCP tools on APK/IPA/AArch64; glass mcp]
• https://github.com/zhizhuodemao/android_proxy_mcp [Android Proxy MCP — HTTP/HTTPS packet capture for AI assistants, mitmdump + SQLite + natural language query]
• https://github.com/regenrek/deepwiki-mcp [MCP for deepwiki]
• https://github.com/gmh5225/zig-mcp-server [A high-performance implementation of the MCP protocol in Zig]
• https://github.com/noopstudios/interactive-feedback-mcp [Interactive User Feedback MCP]
• https://github.com/gmh5225/interactive-feedback-macos-mcp [A native macOS MCP server for collecting interactive user feedback with AppleScript dialogs and image support]
• https://github.com/datalayer/jupyter-mcp-server [MCP for Jupyter]
• https://github.com/PortSwigger/mcp-server [MCP for Burp Suite]
• https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]

MCP server security

• https://github.com/johnhalloran321/mcpSafetyScanner [MCPSafetyScanner - Automated MCP safety auditing and remediation using Agents]
• https://github.com/appsecco/vulnerable-mcp-servers-lab [A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers]

AI Agents

• https://github.com/0xeb/windbg-copilot [WinDbg Copilot - Agentic Debugging extension]
• https://github.com/originsec/pocsmith [Autonomous Windows POC developer from patchwatch diff reports; Claude agent + MCP (Hyper-V, kd, Ghidra) to write, build, and verify PoCs on pre-patch VMs]
• https://github.com/leigest519/OpenGame [Open agentic coding for web games end-to-end from prompts; Game Skill (template + debug); GameCoder-27B; OpenGame-Bench; qwen-code-based CLI]
• https://github.com/0x0funky/agent-sprite-forge [Codex skills for game-ready 2D sprites, layered maps, and engine-ready prototypes (Godot/Unity)]
• https://github.com/dreiachse-cyber/image-cockpit-for-codex-workflows [Local cockpit for Codex imagegen workflows — pixel art, region-based editing, animation frames and sprite sheets via codex-handoff inbox/outbox; no direct OpenAI API calls]
• https://github.com/htdt/godogen [Autonomous game development for Godot, Bevy, and Babylon.js with Claude Code and Codex; plans, generates assets, screenshot-guided self-repair]
• https://github.com/MRCalderon3D/everything-game-dev-code [Multi-engine AI agent scaffold for Unity/Unreal/Godot/HTML with Claude, Codex, Cursor, OpenCode, and Kiro harnesses]
• https://github.com/gamedev-skills/awesome-gamedev-agent-skills [66 version-pinned game-dev Agent Skills plus router for Godot/Unity/Unreal and other engines across Cursor/Claude/Codex]

• https://github.com/Miziziziz/Retro3DGraphicsCollection
• https://github.com/KyleBing/retro-game-console-icons [Retro game console icons in multiple PNG sizes; TrimUI/Miyoo themes]
• https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
• https://github.com/aldegad/sprite-gen [Codex/Claude skill for generating clean 2D game sprites and animation atlases via component-row state pipelines, alpha cleanup, frame extraction, and runtime atlas output]
• https://github.com/HitmanHimself/GOWTool [God of War 2018]
• https://github.com/KhronosGroup/glTF [Runtime 3D Asset Delivery]
• https://github.com/syoyo/tinygltf [Header only C++11 tiny glTF 2.0 library]
• https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D asset pipeline: spec → GLB; QA gate, review HTML, web/Unity/Unreal export packages; manifest provenance]
• https://github.com/atenfyr/UAssetGUI [Viewing and modifying UE4 game assets]
• https://github.com/UETools/UETools [Accessing, reading and deserializing UE4 assets]
• https://github.com/atenfyr/UAssetAPI [A low-level .NET library for reading and writing Unreal Engine game assets]
• https://github.com/r6e/paksmith [Rust cross-platform Unreal Engine pak/UAsset explorer and extractor (pak v3–v11, textures/meshes/audio export)]
• https://github.com/laurentvv/universal-asset-ripper [Multi-engine asset extractor (Godot, Unreal, Unity, Windows PE) with MCP-backed inspection and binary RE helpers]

• https://github.com/Tencent/xLua
• https://github.com/Tencent/InjectFix
• https://github.com/focus-creative-games/hybridclr

• https://github.com/UnityTech/GamesTestAutomationExample [The collecting ideas on how to do Test Automation in Games]
• https://github.com/nowsprinting/UnityAutomatedQAExamples [Unity Automated QA Guidebook]
• https://github.com/AirtestProject/Airtest [UI Automation Framework]
• https://github.com/dendibakh/perf-ninja [Performance Analysis]
• https://github.com/CookiePLMonster/UptimeFaker [Detecting High PC Uptime]
• https://github.com/GameTechDev/PresentMon [Graphics Performance]
• https://github.com/gatling/gatling [Server Testing]
• https://github.com/aristocratos/btop [Performance Monitor]
• https://github.com/Celtoys/Remotery [A realtime CPU/GPU profiler]
• https://github.com/Volkanite/Push [Monitor GPU/CPU/RAM performance]
• https://github.com/google/orbit [C/C++ Performance Profiler]
• https://github.com/wolfpld/tracy [C++ frame profiler]
• https://github.com/bombomby/optick [C++ Profiler For Games]
• https://github.com/RomanceTheHeart/Automation_Examples [Automating certain tasks in the Unreal editor]
• https://github.com/DaedalicEntertainment/ue4-test-automation [Facilitates setting up integration test suits with Unreal Engine 4 Gauntlet]
• https://github.com/shaylanger/Kenshi-Automation-Harness [In-game test automation harness for Kenshi mod development — scriptable spawn, teleport, combat, crafting, and UI checks via an RE_Kenshi plugin and CLI client]
• https://github.com/CalebFenton/PZ_DevHarness [Headless in-game test harness for Project Zomboid Build 42 mods with Java reflection launchers, fast SP/MP runs, desync checks, and CI-friendly exit codes]
• https://github.com/grloper/playgoblin [Open-source overnight playtesting bot for Unity/Unreal with deterministic checks, evidence reports, and an MCP server for AI agents]
• https://github.com/DenuvoSoftwareSolutions/Onlooker [Tool to collect and visualize memory usage of a process tree]
• https://github.com/milostosic/rprof [CPU scope based profiling library]
• https://github.com/DarknessFX/DFoundryFX [UE Performance]
• https://github.com/AitiX/Fastlogs [Unity/GameMaker debug engine that ships logs, device state, and screenshots from remote builds as short links]

• Play your favorite games in a borderless window; no more time consuming alt-tabs
• https://github.com/bad-antics/rce-shield [RCE hardening toolkit for PC gamers]
• https://github.com/Genymobile/scrcpy [Display and control your Android device]
• https://github.com/ryanjon2040/Unreal-Binary-Builder [Build UE Source]
• https://github.com/ryanjon2040/UnrealNetworkProfiler [Network Profiler for UE]
• Command line tool for getting the download URL for the latest or specific version of Unity
• https://github.com/recastnavigation/recastnavigation [Navigation-mesh Toolset for Games]
• https://github.com/TensorWorks/UE-Clang-Format [UE Clang-Format configuration]
• https://github.com/inflation/goldberg_emulator [Steam emulator]
• https://github.com/PixiEditor/PixiEditor [PixiEditor is a Universal Editor for all your 2D needs]

• https://github.com/JosefNemec/Playnite

• https://github.com/game-ci
• https://github.com/nikaera/Unity-GameCI-Sample [Unity]
• https://github.com/EpicGames/lore [Epic Games open source VCS for games: content-addressed chunk storage, sparse workspaces, tamper-evident history, large binary assets; Rust; UEFN]

Guide

• https://github.com/planetchili/hw3d [C++ 3D DirectX Tutorial]
• https://github.com/jpvanoosten/LearningDirectX12 [DX12]
• https://github.com/PAMinerva/LearnDirectX [DX12]
• https://github.com/MKXJun/DirectX11-With-Windows-SDK [DX11 zh]
• https://github.com/yottaawesome/intro-to-dx11-revisited [Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 11]
• https://github.com/d3dcoder/d3d12book [DX12]
• https://github.com/yottaawesome/intro-to-dx12-2nd-edition-revisited [Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 12 (2nd ed.)]
• https://github.com/pkurth/D3D12Renderer [DX12]

Hook

• https://github.com/rdbo/DX11-BaseHook [DX11 Imgui]
• https://github.com/DrNseven/D3D12-Hook-ImGui [DX12 Imgui]
• https://github.com/frostbone25/ShaderInjector [D3D12 shader injector for FF7 Rebirth PC — intercepts rendering API calls to inject/replace pixel shaders at runtime; minhook + ImGui; adaptable to other D3D12 titles]
• https://github.com/Qervas/segcap [D3D12 hooking tool extracting per-pixel object-ID segmentation masks from shipping UE4/UE5 games without engine source or modification]
• https://github.com/baobao1044/GameLagReducer [Launcher + native DLL that hooks D3D11/OpenGL/Vulkan to capture and flatten/replace shaders at runtime for FPS]
• https://github.com/niemand-sec/DirectX11Hook [DX11 Imgui]
• https://github.com/guided-hacking/GH_D3D11_Hook [DX11]
• https://github.com/justinstenning/Direct3DHook [Direct3D 9/10/11 API hooks for screen capture and in-game overlays]
• https://github.com/effcol/wiz3D [Open-source stereoscopic 3D proxy-DLL wrapper for DirectX 7–11 and OpenGL (iZ3D lineage) with per-game hook profiles and stereo injection]
• https://github.com/techiew/DirectXHook [DirectX 11/12 Present hook with a simple in-game overlay framework]
• https://github.com/nefarius/HydraHook [DirectX 9–12 API-hooking and overlay rendering framework for games]
• https://github.com/aufkrawall/capture-engine [Windows game capture with injected D3D9–D12, Vulkan, OpenGL, and DXVK hooks, custom overlays, and frame pacing]
• https://github.com/gogo9211/Discord-Overlay-Hook [DX11]
• https://github.com/ocornut/imgui/commit/923bd2fd217c1dc1e75fa92b0284d3817904988b [DX11/12 ResizeBuffers]
• https://github.com/marlkiller/d3dhook_imgui [d3d opengl hook imgui x86/x64]
• Universal graphical hook for a D3D9-D3D12, OpenGL and Vulkan based games
• https://github.com/kirchesz/kiero2 [kiero v2 — runtime locator for D3D9–D12, OpenGL, and Vulkan graphics API method addresses; BYO hooking library; CMake FetchContent; cross-platform OpenGL/Vulkan on Win/Linux/macOS]
• https://github.com/jmpews/Dobby [a lightweight, multi-platform, multi-architecture hook framework]
• https://github.com/Sh0ckFR/Universal-Dear-ImGui-Hook [An universal Dear ImGui Hook]
• https://github.com/bruhmoment21/UniversalHookX [DX/OpenGL/Vulkan]

Tools

• https://github.com/visotw/3d9 [Fixing broken stereoscopic effects in DX11 games]
• https://github.com/adriank56793/rdc-cli [Scriptable CLI to query RenderDoc .rdc captures (draws, shaders, diffs) for terminal, CI, and agent workflows on D3D/Vulkan/OpenGL frames]
• https://github.com/Kalmarv/locum [D3D11/DXGI proxy capture: record every draw, shader, and resource for a frame into SQLite for browse, SQL query, live edits, and offline replay—RenderDoc-style analysis from DLLs beside the game exe]

Emulation

• https://github.com/code-tom-code/Software_D3D9 [DX9]
• https://github.com/jenissimo/bottleship [Browser HLE that boots x86 Win32 PEs and reimplements Win32/COM plus DirectDraw/Direct3D 3–9 on WebGPU/WebAudio/OPFS for classic Windows games]

Compatibility

• https://github.com/CnCNet/cnc-ddraw [Old Game]
• https://github.com/openeggbert/free-direct [DirectX 3 (DirectDraw/DirectSound) subset reimplemented on SDL3 for running legacy 2D games]
• https://github.com/elishacloud/dxwrapper [DirectX DLL wrapper for older games on Win10/11; Dd7to9/d3d8to9, DDrawCompat, ASI loader]
• https://github.com/ShyVortex/dlss-unlocked [DirectX 12 DLL wrapper unlocking DLSS-G, multi-frame generation, and DLSS-NR on RTX 20xx/30xx/40xx in supported games (Windows and Proton)]
• https://github.com/BUNNY-19C/DLSSG-30s-manager [WPF manager for per-game dlssg_for_sm86 deployment on RTX 30 (SM86), with backups, restore, and automatic kernel anti-cheat detection that blocks unsafe installs]
• https://github.com/REDPOWAR/D2GI [DirectDraw7/D3D7 to D3D9 wrapper for Hard Truck 2 (King of the Road) — modern resolutions, MSAA, anisotropic filtering, graphics fixes, widescreen hooks]
• https://github.com/aleko2144/KoTR_Modern_Patch [King of the Road / Hard Truck 2 ASI patch — collision, camera, physics, AI traffic, trailer and UI fixes; complements D2GI; ModUtils + Ultimate ASI Loader]
• https://github.com/xoxor4d/gta4-rtx [GTA IV RTX Remix compatibility mod — adapts Complete Edition for NVIDIA RTX Remix path-traced remaster pipeline; complements FusionFix]
• https://github.com/microsoft/D3D9On12 [The Direct3D9-On-12 mapping layer]
• https://github.com/Daniel-Lobo/WineHooks [Compatibility and enhancement framework for classic PC games]
• https://github.com/samuelgr/Xidi [DirectInput interface for XInput controllers]

Overlay

• https://github.com/SeanPesce/Direct3D9-Overlay
• https://github.com/dantebuilds/swapchain-bottleneck [Architecture analysis of DXGI swapchain/MPO overlay injection, Present-hook collisions, TDR cascades, and anti-cheat whitelist friction]

Guide

• https://github.com/JoeyDeVries/LearnOpenGL

Source

• https://github.com/brackeen/glfm [Write OpenGL ES code in C/C++]

Hook

• https://github.com/bruhmoment21/UniversalHookX
• https://github.com/ASDAlexander77/opengl32_enhancer [32-bit opengl32.dll proxy that forwards OpenGL calls and hooks wglSwapBuffers for ReShade-style GPU post-processing without binary patching]

Guide

• https://github.com/googlesamples/android-vulkan-tutorials

API

• https://github.com/liblava/liblava [Modern and easy-to-use library for Vulkan]
• https://github.com/corporateshark/lightweightvk
• https://github.com/BeRo1985/pasvulkan [Object Pascal Vulkan header generator, OOP API wrapper, and Vulkan-based engine framework]

Hook

• https://github.com/Rebzzel/kiero [X86/64 Windows]
• https://github.com/kirchesz/kiero2 [kiero v2 — locate Vulkan/D3D/OpenGL API method addresses at runtime; BYO hooking; Win/Linux/macOS]
• https://github.com/klotzbrocken/MacShade [macOS ReShade 6.8 port with dyld interposing, MoltenVK/OpenGL/Metal injection bridges, and a SwiftUI per-game launcher]
• https://github.com/ales-drnz/vocem-overlay [Linux in-game overlay via Vulkan implicit layer and OpenGL interposer]
• https://github.com/blanec/cyberpunk-better-shaders [Vulkan implicit layer (VkLayer_callisto_spvswap) that hot-swaps Cyberpunk 2077 path-tracer ray-gen SPIR-V at load time via Proton on Linux]
• https://github.com/bruhmoment21/UniversalHookX [X86/64 Windows]
• https://github.com/gmh5225/Vulkan-Hook [X86/64 Windows]
• https://github.com/DrNseven/VulkanWallhack [Vulkan hook DLL (MinHook) for model stride bruteforce and in-game wallhack toggles; inject early into Vulkan titles]
• https://github.com/Sh0ckFR/Universal-Dear-ImGui-Hook
• https://github.com/Halen84/ImGuiRDR2Hook

Guide

• https://github.com/dsasmblr/game-hacking
• https://github.com/dsasmblr/hacking-online-games
• https://github.com/jbro129/android-modding [A collection of repositories related to Android game modding]
• https://github.com/liuyiyi0219-arch/unity-apk-reverse [40-chapter hands-on Unity mobile APK reverse-engineering course covering IL2CPP, Lua, DEX, Frida, and asset extraction with runnable demos and auto-graded labs]
• https://github.com/kovidomi/game-reversing
• https://github.com/Vieuxnorris/farcry-6-hack [Offline Far Cry 6 RE learning project: in-process C++ DLL with aimbot, skeleton ESP, D2D overlay, fc6probe scanner, and Python tooling over game systems (Havok, aim-assist targets)]
• https://github.com/xxchaosxx210/SplinterCellTrainer [C#/WPF Windows trainer for Tom Clancy's Splinter Cell (Steam build 252083) with ESP overlay, god-mode flags, and movement/detection tweaks via a 32-bit game helper]
• https://github.com/TheZong/Game-Hacking
• https://github.com/mytechnotalent/Reverse-Engineering
• https://github.com/wtsxDev/reverse-engineering
• https://github.com/Coldzer0/RE4F [Obsidian-based reverse-engineering curriculum covering x86/x64 assembly, Windows memory and PE internals, static/dynamic analysis, and anti-analysis (packing, anti-debug)]
• https://github.com/mytechnotalent/Hacking-Windows
• https://github.com/mytechnotalent/hacking-rust [Free step-by-step Rust reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
• https://github.com/mytechnotalent/go-hacking [Free step-by-step Golang reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
• https://github.com/mytechnotalent/embedded-hacking [Free embedded reverse-engineering course (RP2350/Pico 2) with GDB, Ghidra, OpenOCD, and hands-on firmware hacking labs]
• https://github.com/kotae4/intro-to-gamehacking
• https://github.com/ridpath/gamehacking-cheatsheet [Game-hacking cheatsheet covering memory RE, injection, and anti-cheat topics]
• https://github.com/mrphrazer/binary-cartography [Binary Cartography webinar series with slides, samples, and Docker RE labs on agentic reverse engineering, malware analysis, code identification, and deobfuscation workflows]
• https://github.com/LordeTyrael/PokeAllianceAntiCheatAnalysis [Static audit of PokeAlliance client telemetry: server-triggered process/DLL/window enumeration, login hardware fingerprinting, and supporting Frida/tracer scripts]
• https://blog.can.ac/author/can1357
• https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
• https://secret.club
• https://back.engineering
• https://github.com/batteryshark/batteryshark.github.io [BatteryShark reverse-engineering and game-hacking writeups archive (compatibility patching, classic PC game RE, low-level Windows)]
• https://vollragm.github.io
• https://www.triplefault.io
• https://advancedvectorextensions.github.io
• https://bright.engineer
• https://reversing.info
• https://www.unknowncheats.me
• https://forum.ragezone.com
• https://guidedhacking.com
• https://github.com/guided-hacking
• https://gamehacking.academy
• https://github.com/GameHackingAcademy
• https://github.com/deavers/re-dojo [Interactive offline game-hacking and reverse-engineering academy: tiered curriculum, C++20 dojo labs, crackmes, auto-grader, and a companion web RPG]
• https://github.com/Entkenntnis/htw [Self-hostable Hack The Web browser game: Node.js hacking puzzles and tasks for hands-on web security practice]
• https://github.com/GameHackingBook/GameHackingCode [Example code for the No Starch Press Game Hacking book]
• https://areweanticheatyet.com [A list of games using anti-cheats]
• https://github.com/aclist/aclist.github.io [Anti-cheat compatibility list]
• https://github.com/N0tJ03/Investigacion-Kerne [Spanish notes on kernel-mode anti-cheat architecture (BattlEye, EAC, Vanguard) and related Windows driver security context]
• https://github.com/imadr/Unity-game-hacking [Unity]
• https://vollragm.github.io/posts/unity-reversing [Unity]
• https://wiki.cheatengine.org/index.php?title=Mono [CE Mono]
• https://github.com/krampus-nuggets/ce-tutorial [CE]
• https://il2cppdumper.com [IL2CPP]
• https://www.unknowncheats.me/forum/unity/465283-il2cppruntimedumper.html [IL2CPP]
• https://github.com/shalzuth/NativeNetSharp [Injecting C# code]
• https://github.com/januwA/game-reversed-study [CE Guide zh]
• https://github.com/csgohacks/master-guide [CSGO Guide]
• different-ways-hooking [Hook Guide]
• http://pwnadventure.com [Hackable Game]
• https://github.com/GameCrashProject/UE4-Hacking-Guideline [Unreal]
• https://github.com/TimMisiak/WinDbgCookbook [WinDbg]
• https://github.com/anhkgg/awesome-windbg-extensions [WinDbg]
• Undetected Cheat Engine
• Guide about remote Windows kernel debugging
• https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Games.md [Game Hacking]
• https://github.com/cragson/osmium [C++ Framework for external cheats]
• https://github.com/april-ivy/Apwil [Rust Windows gamehacking library, internal & external; process/memory/module/scan/hook/render/syscall/input/window]
• https://github.com/Omega172/OmegaWare-Framework [Multi-engine internal cheat framework (Unity/Unreal/generic) with D3D11/D3D12 hooking, ImGui UI, feature plugins, and config system]
• https://github.com/rdbo/libmem [Cross-platform game hacking library (memory, hooking, injection) for C/C++/Rust/Python]
• https://github.com/WangXuan95/Xilinx-FPGA-PCIe-XDMA-Tutorial [DMA Tutorial]
• https://github.com/NetKingJ/awesome-android-security [Android (Samsung) Security Research References]
• https://github.com/savagedamage/android-security-wizard [Integrated Android security research corpus (SKILL.md + 20 companions) covering native RE, Frida/Shizuku instrumentation, commercial protector bypass, kernel exploit methodology, and malware triage]
• https://github.com/shakevsky/keybuster [Samsung TrustZone Keymaster TA research client — send unfiltered requests via libkeymaster_helper; USENIX Security'22 supplemental; CVE-2021-25444/25490 PoC]
• https://github.com/gregkh/kernel-development [Linux kernel development]
• https://github.com/MatheuZSecurity/Rootkit [Collection of codes focused on Linux rootkits]
• https://github.com/ARandomPerson7/Appsealing-Reversal [A Reversal and bypass for Appsealing]
• https://klecko.github.io/posts/selinux-bypasses [Bypass selinux]
• https://github.com/Solaree/pairipcore [Public researchings of the Google's Android apps protection]
• https://github.com/enjoy-digital/litepcie [Small footprint and configurable PCIe core]
• https://lolc2.github.io [collection of C2 frameworks that leverage legitimate services to evade detection]

Debugging

• https://github.com/stars/gmh5225/lists/debugger [List]
• https://github.com/cheat-engine/cheat-engine
• https://github.com/L-Spiro/MhsX [64-bit from-scratch MHS successor: memory searcher/debugger with expression scans, regex/string search, floating-point studio, hex editor, and scripting]
• https://github.com/NulledNah/cheat-engine-undetectable [Modified Cheat Engine with user-mode evasion, direct syscalls, and BYOVD kernel bridge for AC research]
• https://github.com/VollRagm/ghostdebug [Windows x64 VEH-based stealth debugger (native DLL + .NET CLI) for targets with anti-debug checks]
• https://github.com/Squalr/Squalr-Sharp [C# game memory editor with scanning, pointers, and assembly injection]
• https://github.com/daveymcq/SimpleMemoryEditor [Portable Windows game memory scanner/editor in C with process attach, value scan, and freeze UI]
• https://github.com/HeathHowren/Pointer-Lab [Windows x64 user-mode memory scanner and debugger with pointer chains, disassembly, patching, and ImGui UI]
• https://github.com/digital-dev/Apprentice [Open-source Windows game trainer and memory editor (Electron + C++ N-API) with value freezes, code patches, Mono/IL2CPP support, and .CT import/export]
• https://github.com/JeanExtreme002/PyMemoryEditor [Pure-Python (ctypes) memory scanner/editor for Windows, Linux and macOS with value scans, pointer chains, a Qt UI and an MCP server]
• https://github.com/WoahToasty/ToastyLink [From-scratch C++17 XBDM trainer/debug toolkit for Xbox 360 (RGH/JTAG): pointer chains, value scanning, freeze engine, PPC patches, and shareable JSON cheat tables]
• https://github.com/TASEmulators/BizHawk [Multi-system C# emulator with memory inspection, rerecording, and per-core debugging tools for retro game analysis]
• https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
• https://github.com/JasonGoemaat/CheatEngineMonoHelper [CE Mono Helper]
• https://github.com/gmh5225/frida-ceserver [CE Server For IOS]
• https://github.com/gmh5225/ceserver-ios [Porting ceserver to iOS.Dynamic analysis]
• https://github.com/0xiuks/ceserver-ios [An iOS port of Cheat Engine's ceserver]
• https://github.com/gmh5225/cheat-engine-ceserver-pcileech [CE Server For Pcileech]
• https://github.com/user23333/veh [CE Plugin For Manualmap VEH Dll]
• https://github.com/x64dbg/x64dbg [A debugger for Windows x86/64]
• https://github.com/marakew/syser [A debugger for Windows x86/64]
• https://github.com/keowu/koidbg [A debugger for Windows ARM64]
• https://github.com/kernullist/KnWin32ApiMonitor [Modern Win32 API monitor with Tauri UI, IAT hooks, durable replay sessions, and generated metadata for security, RE, and anti-cheat research]
• https://github.com/DoranekoSystems/DynaDbg [A debugger for Android/IOS]
• https://github.com/Yayoi-cs/fastDbg [x86_64 native/qemu kernel debugger]
• https://github.com/noword/GDB-Windows-Binaries [GDB]
• https://github.com/robert-yates/gdbserver9x [Primitive GDB RSP server for debugging 32-bit exes on retro Windows (Win98SE/XP); builds with VC6; pairs with Binary Ninja GDB adapter]
• https://github.com/ajkhoury/ReClassEx
• https://github.com/ReClassNET/ReClass.NET
• https://github.com/niemand-sec/ReClass.NET-DriverReader [ReClass DriverReader]
• https://github.com/BeneficialCode/KReClassEx [Kernel ReClassEx]
• https://github.com/gmh5225/ReClass-DMA [ReClass DMA]
• https://github.com/IChooseYou/Reclass [Reclass MCP refactored]
• https://github.com/Metick/CheatEngine-DMA [CheatEngine DMA]
• https://github.com/kaijia2022/Cheat-Engine-DMA-Plugin [CheatEngine DMA]
• https://github.com/x64dbg/DotX64Dbg
• https://github.com/imugee/xdv
• https://github.com/eteran/edb-debugger [For Linux]
• https://github.com/korcankaraokcu/PINCE [For Linux]
• https://github.com/Petru101/ferret [Linux GTK4/Rust single-player memory editor: OCR-click on-screen values, interactive narrow scans, freeze/set, and auto re-resolve after restarts (Cheat Engine–style)]
• https://github.com/djolertrk/kLLDB [LLDB based debugger for Linux Kernel]
• https://github.com/mrexodia/TitanHide
• https://github.com/Air14/HyperHide [VT debuger]
• https://github.com/HyperDbg/HyperDbg [VT debuger]
• https://github.com/gmh5225/vt-debuger [VT debuger]
• https://github.com/kkpwn/ErisDbg [VT debuger]
• https://github.com/xhscfq/UnrealVTDbg [VT-x/EPT-assisted Windows kernel debugging framework with Delphi UI and C++ core for authorized anti-cheat and reverse-engineering research]
• https://github.com/not1cyyy/powervm [Stealth AMD-SVM Type-1 hypervisor with NPT hooks and a customized Cheat Engine debug engine for inspecting VMProtect- and ACE-protected processes]
• https://github.com/teemu-l/execution-trace-viewer
• https://github.com/brendan-duncan/gpu_inspector [Native GPU frame capture and graphics debugger for Vulkan, Direct3D 12, and Metal with shader editing, pixel history, and validation]
• https://github.com/changeofpace/Force-Page-Protection [Bypass Remap Memory]
• https://github.com/icsharpcode/ILSpy [For Unity]
• https://github.com/dnSpy/dnSpy [For Unity]
• https://github.com/HoLLy-HaCKeR/dnSpy.Extension.HoLLy [For Unity]
• https://github.com/mandiant/dncil [For Unity]
• https://github.com/hugsy/CFB [Monitor IRP]
• https://github.com/Kharos102/IOCTLDump [Monitor IRP]
• https://ioninja.com/downloads.html [Protocol Analyzer]
• https://github.com/wilszdev/SteamAntiAntiDebug [Steam]
• https://github.com/H5GG/H5GG [IOS cheat engine]
• https://github.com/hasaneyldrm/webcheat [Chrome extension Cheat Engine for browser/WebAssembly games — scan, edit, freeze memory and control game speed]
• https://github.com/levifrsn63/krunker-loader [Keyless Tampermonkey userscript stack for Krunker.io with aimbot, ESP, and Quirify license-emulation loader]
• https://github.com/murka007/glotus-client [Tampermonkey userscript cheat client for Moomoo.io with combat automation, bots, and in-browser hooking]
• https://github.com/MinibloxCheaters2/VapeRewrite [TypeScript Tampermonkey userscript cheat for Miniblox, Narrow.one, Kirka.io and related browser games with hook-based injection and modular packages]
• https://github.com/ri-char/pwatch [HWBP on linux/android]
• https://github.com/enenH/pwatch-c [HWBP on linux/android]
• https://github.com/Ylarod/hardware-breakpoint [HWBP on linux/android]
• https://github.com/roger1337/JDBG [Java Runtime Reverse Engineering and Debugging Tool]
• https://github.com/Sh11no/eDBG [eBPF-based lightweight debugger for Android]
• https://github.com/ShinoLeah/eHook [eBPF hook]
• https://github.com/SeeFlowerX/stackplz [eBPF-based debugger for Android]
• https://github.com/Satar07/edbgserver [eBPF-powered debugger server for Linux and Android]
• https://github.com/cocomelonc/pawtrace [Linux x86-64 ptrace syscall tracer; decodes args, socket addresses, W^X memory, /proc/maps snapshots, JSONL output; C + assembly]
• https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]
• https://github.com/un4ckn0wl3z/MemMCP [Cheat Engine-like but MCP]
• https://github.com/WRXinYue/STS2-KitLib [Slay the Spire 2 in-game mod dev toolkit with dev rail, cheat presets, Harmony analysis, hooks, and MCP bridge]
• https://github.com/PlinKuuu/DanisNightmare [BepInEx Harmony mod for Muck with in-game debug/cheat command suite for player, enemy, item, and powerup manipulation]
• https://github.com/LLeavesG/eBPFDexDumper [DexDumper based eBPF on Android Platform]
• https://github.com/un4ckn0wl3z/dioprocess-private [Advanced Windows Internals, Evasion, Rootkit, Hypervisor, SMM & Bootkit Research Framework]

Packet Sniffer&Filter

• https://github.com/WPO-Foundation/win-shaper
• https://github.com/wiresock/ndisapi
• https://github.com/gmh5225/Akebi-PacketSniffer
• https://github.com/basil00/Divert [Packet Divert]
• https://github.com/fksvs/inject
• https://github.com/hercul3s/Packet-Sniffer [Packet Logger/Decryptor]
• https://github.com/airvzxf/sniparinject [Python Scapy game packet sniffer/parser with YAML action maps]
• https://github.com/is-fo/drelay [Darza's Dominion Java TCP relay and in-process hook for intercepting, decoding, logging, and modifying client-server packets from reverse-engineered structures]

Packet Capture&Parse

• https://github.com/seladb/PcapPlusPlus [Pcap]
• https://github.com/nmap/npcap
• https://github.com/hashblen/auto-discipher [Rust library to parse and decrypt live network packets for a gacha anime game, auto-detecting session tokens, achievement payloads, and XOR keys after updates]

SpeedHack

• https://github.com/absoIute/Speedhack
• https://github.com/Letomaniy/Speed-Hack
• https://github.com/IamSanjid/ce_speed_hack

RE Tools

• https://dogbolt.org
• https://github.com/msd0pe-1/cve-maker [Tool to find CVEs and Exploits]
• https://github.com/0liverFlow/CVE2PoC [Aggregate public PoCs/exploits for a CVE ID — GitHub, ExploitDB, Nuclei, Metasploit; CVSS/EPSS/CISA KEV; Docker labs, bug bounty write-ups, CVE↔CPE mapping; JSON/HTML reports]
• https://github.com/Zierax/Grafana-Final-Scanner [Grafana scanner with public CVE checks, version fingerprinting, and config analysis for easier Grafana security testing]
• https://github.com/mentebinaria/retoolkit [Reverse Engineer's Toolkit]
• https://github.com/lilyco-42/rev-tools-setup [One-click Windows RE toolchain installer (Scoop) with Cheat Engine MCP setup and AI agent pitfalls guide]
• https://github.com/SenjuWoo/reverse-this [One-click Windows RE/modkit workbench with version-pinned Ghidra, Unity/Unreal tooling, stable sandbox/bin shims, and CI]
• https://github.com/NetVar1337/echo-reverse [Windows Tauri/React live RE workbench on Echo: memory and disassembly, game-engine inspection, Frida, kernel/network tooling, and MCP for agents]
• https://github.com/protonspy/harness-for-rea [Desktop and TUI orchestrator for authorized binary RE: Docker-sandboxed Claude Code specialist with REA and Cheat Engine MCP integrations]
• https://github.com/rollingrock/bethesda-modding-starter [Bootstrap for Bethesda script-extender plugin dev plus Ghidra/x64dbg MCP reverse-engineering toolchain]
• https://github.com/jlagedo/dreams-to-reality-re [Reverse-engineering research toolkit for Dreams to Reality (1997): Python asset decoders, Ghidra scripts, format documentation, and a Babylon.js viewer—tools only, no copyrighted game data]
• https://github.com/formix/sre-re [Solar Realms Elite 0.994b (DOS BBS) RE: Ghidra toolchain, decoded .II save formats, and recovered game rules toward a Linux remake]
• https://github.com/chaossource/menace-reverse-engineering [Reverse engineering and SDL2 C++ port of 1988 Amiga game Menace: annotated disassemblies, asset extraction tooling, and a working rebuild]
• https://github.com/reikop/axis-web [Reverse-engineered AXIS (2005) client rebuilt as WebAssembly/WebGL with byte-exact asset decoders and multiplayer protocol research]
• https://github.com/iniGlowee/headless-asset-re [Documented methodology for headless game-asset reverse engineering without the original SDK—reference-first decode, render validation, and IP-safe workflows (no bundled game data).]
• https://github.com/xshxdex98/OpenMCM2 [Native Motocross Madness 2 rebuild: Ghidra export/relink harness, retail section verification, and integrated OpenGL renderer]
• https://github.com/pablocpas/OpenCMR2 [Native SDL3/Vulkan/Metal port of Colin McRae Rally 2.0 from the CMR2Decomp decompilation; cross-platform replacement of legacy DirectX APIs]
• https://github.com/ling71671/open-reverselab [Agent-native RE lab with knowledge base, 100+ MCP tools, and APK/PE/game-cheating analysis workflows]
• https://github.com/ReSo7200/molt-dex [Claude skill pipeline for Android APK reverse engineering and modding: apktool/smali workflow, DexKit and Xposed hooks, Frida, and obfuscation-aware analysis]
• https://github.com/zhuyansen/awesome-ai-reverse-engineering [Curated AI-agent RE stack: Ghidra/IDA MCP servers, mobile tooling (jadx, Frida), agent skills, and security-graded open-source RE projects]
• https://github.com/2akouwu/reverify [AI-assisted reverse engineering with deterministic byte-level verification via MCP server and CLI]
• https://github.com/mytechnotalent/rea [Offline-first RE assistant with one-shot binary scan, native PE/ELF/Mach-O and JavaScript/Electron static inventory, local RAG, multi-agent harness, and MCP server]
• https://github.com/jiuyou-7411/dsh-rea-plugin [DeepSeek Harness REA workbench plugin with Chinese UI for 220 RE tools (Frida, Ghidra, jadx), bundled offline docs, and engine install helpers]
• https://github.com/Zhishulo/dsh-rea-powerpack [DeepSeek Harness plugin to install and verify REA analysis engines, pin rea-agents MCP builds with shadow rollback, and surface REA doctor capability gaps]
• https://github.com/zheedevVn/Rea-Unlock [MCP server unifying static and dynamic reverse engineering (Frida, Ghidra, decompilers) for binary and application analysis]
• https://github.com/joasasantos/rea-prompts [Curated REA (Reverse Engineer Anything) prompt templates for agent-assisted RE — games, anti-cheat, DMA, kernels, APKs, and protection research with evidence-first instructions]
• https://github.com/jammyfu/rea-atlas [Curated map of reverse-engineering projects (game decomp/recomp, asset tools, firmware) tagged for morluto/rea usage, with multilingual README indexes]
• https://github.com/LargoScript/n0xis [Cross-platform Rust RE pipeline with static PE/ELF analysis, SSA decompilation, live memory scanning, hardware watchpoints, and MCP/JSON automation for game reversing]
• https://github.com/imattas/HexLab [Open-source C++20 RE workbench (wxWidgets GUI + CLI) for PE/ELF/Mach-O analysis, decompilation, debugging, and plugin extensions]
• https://github.com/okiedocus/orress [Pure-Rust RE IDE: disassembler, Rust-syntax decompiler, debugger, emulator, malware triage, and built-in RE academy]
• https://github.com/heaven-hm/cheat-agent [Cross-platform C++/Rust autonomous RE agent with native memory scanning, closed-loop trainer verification, and optional MCP hosting for Codex/Claude Code]
• https://github.com/wrong-commit/skid_factory [Node.js orchestrator that automates game reverse engineering and cheat development via MCP bridges to Cheat Engine, x64dbg, and Ghidra, with pointer-trace and memory-patch workflows]
• https://github.com/mrexodia/ida-nexus-docker [Disposable Docker harness for IDA Pro 9.4+ with Pi and IDA Nexus — runs ordered analysis prompts in isolation and exports audit trails]
• https://github.com/ioncodes/ida-teams-docker [Docker Compose setup to self-host IDA Hexvault and Lumina team servers with TLS volumes and MySQL backend for collaborative reverse-engineering workflows]
• https://github.com/mrexodia/ida-nexus-events [Live Textual viewer for IDA Nexus /idb_events streams with database discovery, execution provenance, and colored event families for functions, types, patches, and comments]
• https://github.com/mrexodia/retoolsync [WebSocket server and plugins (IDA, x64dbg, WinDbg, Binary Ninja, VS Code) to sync cursor navigation and goto requests across reverse-engineering sessions]
• https://github.com/stevemk14ebr/RETools
• https://github.com/smallworld-re/smallworld [Environment for streamlined binary harnessing for dynamic analysis]
• https://github.com/BataBo/ACEPatcher [.NET Patcher]
• https://github.com/waryas/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
• https://github.com/Qfrost911/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
• https://github.com/VollRagm/PTView [Browse Page Tables on Windows]
• https://github.com/iBotPeaches/Apktool [Apk]
• https://github.com/user1342/Obfu-DE-Scate [Apk]
• https://github.com/AndnixSH/APKToolGUI [GUI for apktool, signapk, zipalign and baksmali utilities]
• https://github.com/Genymobile/scrcpy [Display and control your Android device]
• https://github.com/barry-ran/QtScrcpy [Display and control your Android device]
• https://github.com/guided-hacking/GH-Offset-Dumper [Scans for signatures and netvars and dumps their relative offsets]
• https://github.com/Elinam03/Signature-Forge [Web-based x86 wildcard byte signature generator for x64dbg, Cheat Engine, and raw hex formats]
• https://github.com/guided-hacking/GH-Entity-List-Finder [Scans game processes for most likely entity list addresses]
• https://github.com/rednaga/APKiD [PEiD for Android]
• https://github.com/Col-E/Recaf [Java]
• https://github.com/tomvita/SE-tools [Nintendo Switch]
• https://github.com/StudentBlake/XCI-Explorer [XCI Explorer]
• https://github.com/rom-weaver/rom-weaver [Local-first browser PWA and Rust CLI to inspect ROMs/disc images, apply and create patches, bake cheat codes, and edit saves offline]
• https://github.com/stephane-perez/ik-plus-reforged [Assembly patches and Python tooling for International Karate+ on Atari ST: platform compatibility fixes, 3-player mode, STE blitter/DMA enhancements, and JOYTEST joystick diagnostics]
• https://github.com/mattgodbolt/pipeline-disasm [Annotated 6502 disassembly and byte-identical rebuild of BBC Micro PIPELINE with hidden-sector and deleted-mark copy protection, flux verification, and jsbeeb tooling]
• https://github.com/mattgodbolt/frogman [Annotated BeebASM disassembly of unreleased BBC Micro platformer with jsbeeb runtime-dump RE, multi-stage VIA-timer XOR loader analysis, and byte-exact rebuild tooling]
• https://github.com/0x5abe/vifterpreter [Rust library for parsing PlayStation 2 VIF1 DMA packets and VIF commands]
• https://github.com/danielgomesvieira2000/ps2-port-engine [Verified PS2 decompilation toolchain and native PC port runtime (EE/IOP/GS/VU, Vulkan host) with no bundled game assets]
• https://github.com/danielalves96/gow-pc-port [Static recompilation of God of War (PS2 SCUS-97399) to native C++/OpenGL for Windows/Linux; Rust MIPS recompiler, BYO disc assets, documented RE and porting pipeline]
• https://github.com/nat649/fs15-reconstruction [Early-stage Farming Simulator 15 / GIANTS Engine 6 decompilation, native reconstruction, and validated component recovery (local game files required)]
• https://github.com/RodoLy/HarvestMoonSnesDecomp [Harvest Moon (SNES) rewritten in byte-verified C from HM-Decomp, with native Windows/macOS/Linux/Android builds, save states, and in-game cheats; BYO ROM]
• https://github.com/byroweb/AC1_RE [RE reference and tooling for Armored Core (PS1, SLUS-01323): docs, Ghidra pipeline, disc/PA/mission parsers, and behavioral C models (BYO disc)]
• https://github.com/piffd0s/defcon-dreamcast-planetweb-research [DEF CON Dreamcast PlanetWeb exploit chain — Eden loading, memory-write flaw, and MIME stack overflow to run native SH-4 DOOM without a debugger]
• https://github.com/Anonym0ose/JitDumper [A CIL method body dumper]
• https://github.com/cfig/Android_boot_image_editor [A tool for reverse engineering Android ROM images]
• https://github.com/hasherezade/pe-bear [PE Viewer]
• https://github.com/zodiacon/TotalPE2 [PE Viewer]
• https://github.com/APKLab/APKLab [Android Reverse-Engineering Workbench for VS Code]
• https://github.com/zboralski/unflutter [Static analyzer for Flutter/Dart AOT snapshots]
• https://github.com/ejfkdev/dae [Rust CLI that extracts Dart AOT snapshot debug symbols and structs from Mach-O, ELF, and PE binaries for IDA, radare2, and Frida workflows without a Dart SDK]
• https://github.com/Guardsquare/flutter-re-demo [Flutter app RE experiments — IDA scripts for Dart function renaming from reFlutter/DWARF, VM memory mapping, object/xref recovery, and decompilation aids]
• https://github.com/evild3ad/MemProcFS-Analyzer [Windows Forensic Analysis]
• https://github.com/eybisi/kavanoz [Statically unpacking common android banker malware]
• https://github.com/cyberark/PipeViewer [Shows detailed information about named pipes in Windows]
• https://github.com/synacktiv/thats_no_pipe [Frida-based Windows named pipe interceptor: hooks ReadFile/WriteFile, relays IPC to an HTTP proxy over WebSocket]
• https://github.com/cursey/regenny [Reconstruct structures and generate header files]
• https://github.com/zodiacon/EtwExplorer [View ETW Provider manifest]
• https://github.com/jonny-jhnson/EtwWatcher [Browse and diff ETW provider snapshots across Windows builds; backed by ETWInspector]
• https://github.com/kernelstub/Cognitor [Defensive Patch Tuesday semantic diff for Windows snapshots: PE/driver IOCTL diff, rule engine, lab dossiers, SARIF/MD/JSON; sibling-bug triage]
• https://github.com/gmh5225/ceserver-ios [Porting ceserver to iOS.Dynamic analysis]
• https://github.com/VoidSec/ioctlpus [Be used to make DeviceIoControl requests with arbitrary inputs]
• https://github.com/horsicq/Nauz-File-Detector [Linker/Compiler/Tool detector]
• https://github.com/t0asts/DIE-engine-web [Detect It Easy in the browser — WASM-based file format, packer, and compiler detection]
• https://github.com/gcarmix/HexWalk [Hex Viewer/Editor/Analyzer]
• https://github.com/RomanRybachek/ioctl_helper [GUI tool for sending IOCTL to windows drivers]
• https://github.com/0xDbgMan/DrvEye [Static analysis and exploitation triage for Windows kernel drivers: discover IOCTLs, symbolic links, and certificate checks]
• https://github.com/416rehman/DeepZero [Automated vulnerability research framework for Windows kernel drivers: parses/decompiles at scale and analyzes exploitable IOCTLs with AI agents]
• https://github.com/Static-Analyzer-Factory/static-analyzer-factory [Rust-powered static analysis framework for C/C++ via LLVM IR graphs (pointer/value-flow/taint/IFDS) with Python SDK, CLI, and SARIF export]
• https://github.com/sevaa/dwex [DWARF Explorer]
• https://github.com/katahiromz/RisohEditor [Win32 resource editor]
• https://github.com/Fadi002/de4py [Toolkit for python reverse engineering]
• https://github.com/skelsec/minidump [Python library to parse and read Microsoft minidump file format]
• https://github.com/zodiacon/QuickAsm [x86/x86 assembler and emulator]
• https://github.com/aqilc/chasm [Chasm Runtime Assembler]
• https://github.com/skylot/jadx [Dex to Java decompiler]
• https://github.com/fatalSec/DaliVM [Dalvik bytecode emulator for Android static analysis; string decryption; Multi-DEX; no Android runtime required]
• https://github.com/narumii/Deobfuscator [A deobfuscator for java]
• https://github.com/google/android-classyshark [Android and Java bytecode viewer]
• https://github.com/marin-m/vmlinux-to-elf [vmlinux to elf]
• https://github.com/emlinhax/DbgViewEx [A tool to log ETW Events and system debug logs]
• https://github.com/amosshi/binaryinternals [View Internals of Binary File]
• https://github.com/WerWolv/ImHex [A Hex Editor for Reverse Engineers]
• https://github.com/microsoft/pdblister [Faster version of symchk /om for generating PDB manifests]
• https://github.com/yaxinsn/vermagic [Change vermagic and CRCs of a Linux Kernel Module]
• https://github.com/rhboot/pesign [Linux tools for signed PE-COFF binaries]
• https://github.com/SV-Foster/UnSign [Remove all digital signatures from PE/COFF executable]
• https://github.com/colinsenner/PECleaner [Strips all RICH header information from x86/x64 binaries]
• https://github.com/kouzhudong/AntiHook [Enum and Remove Hook in Windows]
• https://github.com/jixiaoyong/ApkSigner [Android Apk Sign Tool]
• https://github.com/4d61726b/VirtualKD-Redux [A revival and modernization of VirtualKD]
• https://github.com/ax/apk.sh [A Bash script that makes reverse engineering Android apps easier]
• https://github.com/vm03/payload_dumper [Android OTA payload dumper]
• https://github.com/ssut/payload-dumper-go [Android OTA payload dumper]
• https://github.com/MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass [Xiaomi HyperOS BootLoader Bypass]
• https://github.com/null-luo/btrace [Android App Dynamic Behavior Tracking Tool using eBPF]
• https://github.com/michaelmsonne/SignToolGUI [signtool GUI]
• https://disasm.pro/ [A realtime assembler/disassembler]
• https://github.com/binsnake/fARM64 [Pure-Rust no_std AArch64 disassembler and encoder — iced-x86-shaped API, zero-heap decode path, SVE/SME/SIMD/FP coverage, semantic round-trip encode; wasm and bare-metal friendly]
• https://github.com/iofomo/abyss [Android system call hook]
• https://github.com/uuksu/RPGMakerDecrypter [Tool for extracting RPG Maker XP, VX and VX Ace encrypted archives]
• https://github.com/VelocityRa/awesome-game-file-format-reversing [Curated docs/tools for reverse engineering video game file formats and assets]
• https://github.com/vs-sr-dev/pc-wackywheels-doc [RE documentation for Wacky Wheels (1994): WACKY.DAT archive, track/sprite formats, and fixed-point LUTs behind its pseudo-3D renderer]
• https://github.com/vs-sr-dev/saturnkit [Game-agnostic Sega Saturn RE toolkit: disc/IP.BIN parsing, SH-2 decode, static recompilation to C++, and a hardware runtime (VDP1/2, SCU, SMPC, CD block, SCSP) for native PC ports]
• https://github.com/robbe1912/motorstorm-mv-recomp [Source-only PS3 MotorStorm Monument Valley static recompilation and translation tooling (ps3recomp-based) for authorized local RE and native Windows experiments]
• https://github.com/TalhaMudo/NFSU2Recomp [Static recompilation pipeline and runtime lifting Need for Speed: Underground 2 (Win32/x86, D3D9) to native ARM64 macOS with documented RE tooling]
• https://github.com/elkir0/sc2-android-recomp [StarCraft II static recompilation toolkit (x86-32 to ARM64): per-function difftest oracle, D3D9 shader translation, MPQ tools, pcrecomp closure extensions, and Android porting helpers—method and tooling only, no game assets]
• https://github.com/gamboozino/ngbrecomp [Static recompilation of Ninja Gaiden Black (Xbox OG) to native Linux/Windows with a custom Vulkan renderer; BYO game assets]
• https://github.com/Manya3084/SF33RDSXBRecompo [Native x86-64 port of Street Fighter III: 3rd Strike from the original Xbox (3s-decomp-ogxb), with SDL3, Vulkan/OpenGL, and OpenAL—BYO disc, no assets in repo]
• https://github.com/Coz-0/smo-recomp [Static recompilation of Super Mario Odyssey (Switch 1.4.1) to native Windows x64 with custom runtime and Vulkan renderer; BYO dump, no assets in repo]
• https://github.com/raulzrrs/letsgo-recomp [Native Windows port of Pokémon: Let's Go, Eevee!/Pikachu! (Switch 1.0.0) via static recompilation on LAS Recomp; BYO game dump, no assets in repo]
• https://github.com/valentderah/totk-pc-recomp [Static recompilation of The Legend of Zelda: Tears of the Kingdom to native Windows x86-64 with a Vulkan renderer (BYO game assets)]
• https://github.com/Lucas-blip-png/dkb-pc-recomp [Static recompilation of Donkey Kong Bananza (Switch 2) to native Windows with a Vulkan renderer; BYO assets, documented NVN/SPIR-V RE pipeline (early, tutorial-level progress)]
• https://github.com/jmars125/xcx-recomp [Static recompilation of Xenoblade Chronicles X: Definitive Edition (Switch) to native Windows x86-64 with Vulkan renderer; fork of TotK Recomp, BYO game assets]
• https://github.com/AksharDP/xc2-recomp [Static recompilation of Xenoblade Chronicles 2 (Switch) to native Windows x86-64 with a Vulkan renderer; fork of XCX Recomp, BYO NSP/keys, no game assets in repo]
• https://github.com/centollOS/SwitchWakerHD [Wind Waker HD (Wii U) static recompilation to Nintendo Switch with deko3d renderer; BYO game dump, no assets in repo]
• https://github.com/Jstar269/nakagawa-recomp [Static recompiler and runtime lifting PSP (MIPS) games to native Windows with Vulkan/SDL3; BYO disc assets, paired with hst-decomp RE workflow]
• https://github.com/MaryNCRT/Ultimate-Mortal-Kombat-3-iOS-Decompiled [Clean-room Ghidra decompilation of Ultimate Mortal Kombat 3 (iOS v1.2.59) with differential verification and a native cross-platform PC port (OpenGL/Vulkan/D3D12)]
• https://github.com/sosso33/omikron-tns-omk-engine [From-scratch C++20 reimplementation of Omikron: The Nomad Soul (1999) with documented format reverse engineering and evidence-backed asset readers]
• https://github.com/sergen213/kabus22-linux [Reverse-engineered native Linux Kabus 22 engine with GTK installer/launcher, OpenGL/Vulkan rendering, and RE notes; requires user-supplied original game assets]
• https://github.com/LyeDevGit/WonTree-RBLX-Dumper [Universal Roblox game analysis dumper: Luau decompile stack, remote call graph, live remote logger, framework and anti-cheat pattern detection, markdown/CSV reports]
• https://github.com/jlucaso1/unturned-godot [Godot 4 port that reverse-engineers Unturned Unity serialized formats from a Steam install and renders maps with terrain, objects, lighting, and multiplayer]
• https://github.com/omochikaeri15/battle-cats-complete [Rust desktop toolkit for The Battle Cats: import .pack/.apk data, view cats/enemies/stages, render animations, and export assets]
• https://github.com/gmh5225/compiler-binary-richprint [Print compiler information stored in Rich Header of PE executable]
• https://github.com/mandiant/GoReSym [Go symbol recovery tool]
• https://github.com/PartialVolume/shredos.x86_64 [Disk Eraser]
• https://github.com/ssnob/hidden_syscall_monitoring [monitors hidden syscalls called from call of duty anticheat]
• https://github.com/xaitax/NTSleuth [Comprehensive Windows syscall extraction and analysis framework]
• https://github.com/hfiref0x/syscalltables [Combined Windows NT syscall tables (ntoskrnl, win32k, IUM) for x86-64 and ARM64 across NT5.2 through current Windows 11 builds, with online HTML views and composition tooling]
• https://github.com/cansarigol/pdbr [pdb + Rich library]
• https://github.com/microsoft/pdb-rs [Tools and documents for working with Microsoft PDB files, in Rust]
• https://github.com/roger1337/JDBG [Java Runtime Reverse Engineering and Debugging Tool]
• https://github.com/atrexus/vulkan [A PE dumper for processes protected by user mode anti-tamper solutions (hyperion, theia, etc.)]
• https://github.com/xxFURYWOLFxx/veh-dumper [Surgical x64 VEH/VCH dumper: walk vectored handler lists, extract each handler as a standalone PE64 for IDA with resolved imports]
• https://github.com/diabloidyobane/PEReconstruct [Recover and statically analyze manually-mapped DLLs with runtime-wiped PE headers; pure-stdlib Python, no driver/debugger; Claude Code skill]
• https://github.com/linuxboot/fiano [Go-based tools for modifying UEFI firmware]
• https://github.com/leeqwind/PESignAnalyzer [A Simple PE File Signature information Extracting Tool]
• https://github.com/microsoft/SDCM [Surface Dev Center Manager tool to automate WHQL/Attestation submissions]
• https://github.com/MxIris-Reverse-Engineering/RuntimeViewer [Objective-C Runtime Viewer for macOS and iOS]
• https://github.com/skylot/raung [Assembler/disassembler for java bytecode]
• https://github.com/hx1997/dayu [Open/HarmonyOS abc file parser and decompiler]
• https://github.com/jd-opensource/arkdecompiler [HarmonyOS NEXT decompilation tool]
• https://github.com/loerting/dalvikus [Android reverse-engineering tool / smali editor]
• https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
• https://github.com/Byrom90/XenonDumper [Dumps files & data required to use the Xenon Xbox 360 Low Level Emulator]
• https://github.com/WenzWenzWenz/DelphiReSym [A Delphi symbol name recovery tool for reverse engineers]
• https://github.com/Hexorg/Ouroboros [A Symbolic-Execution Decompiler written in Rust]
• https://github.com/JonathanSalwan/Triton [Dynamic binary analysis library: symbolic execution, taint analysis, and SMT-backed RE automation]
• https://github.com/pandaadir05/re-architect [RE-Architect is an advanced automated reverse engineering platform that utilizes binary analysis techniques and machine learning to understand binary files and extract meaningful information]
• https://github.com/gmh5225/js-debugger-bypass-script [JS Debugger Bypass UserScript]
• https://github.com/diversenok/DiaSymbolView [PDB file inspection tool]
• https://github.com/CheckPointSW/Nodejs-Tracer [Simple Node.jstracer that logs calls to analyze heavily obfuscated Node.js malware]
• https://github.com/black0ffr/omega-sast [Zero-dependency JavaScript SAST engine with obfuscator fingerprinting, string deobfuscation, and taint tracking for minified bundle analysis]
• https://github.com/jsacco/ntoskrnlwalker [Resolve offsets, gadgets and symbols from NTKernel]
• https://github.com/glmcdona/strings2 [strings2 - Extract strings from binary files and process memory]
• https://github.com/nico/demumble [Itanium + MSVC symbol demangler; D/Rust/Swift; cross-platform replacement for c++filt / undname.exe]
• https://github.com/amruth-sn/kong [Kong - agentic reverse engineer, LLM-orchestrated binary RE via in-process Ghidra, call-graph analysis, agentic deobfuscation]
• https://github.com/alexbevi/ghidra-manager [CLI to install Ghidra, manage plugins (incl. GhidraMCP), launch projects, and compare binaries]
• https://github.com/LaurieWired/Malimite [iOS and macOS Decompiler]
• https://github.com/azw413/Glass [Rust mobile-first disassembler for APK/DEX/smali and AArch64 .so/.dylib; CFG, xref, CLI/MCP automation]
• https://github.com/0xbigshaq/apatchy [Fuzzing Framework for Apache HTTPD Server]
• https://github.com/HullaBrian/ttd-capa-cpp [TTD capa]
• https://binarybacktrace.com/tools/rubber_room [Rubber Room, a browser tool for PE analysis, x86-64 disassembly, decompilation and Win32 emulation; alpha, nothing is uploaded]

Mixed boolean-arithmetic

• https://github.com/bliutech/mbased [Practical Simplifications of Mixed Boolean-Arithmetic Obfuscation]
• https://github.com/SynthesisLab/MBA [High-performance Mixed Boolean-Arithmetic (MBA) expression synthesis tool]
• https://github.com/astean1001/ProMBA [MBA deobfuscator via Program Synthesis and Term Rewriting]
• https://github.com/mrphrazer/msynth [MBA deobfuscation framework using pre-computed oracles, algebraic simplification, and stochastic program synthesis; integrates with Miasm symbolic execution]
• https://github.com/fvrmatteo/DrillAndJoin [C++17 Drill & Join exact Boolean synthesis; SMT-guided 64-bit opaque-predicate and MBA-style simplification via Bitwuzla]
• https://github.com/DenuvoSoftwareSolutions/GAMBA [Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA]
• https://github.com/mizt0/mixed-boolean-transform [Mixed boolean arithmetic x+y transform]
• https://github.com/nhpcc502/MBA-Obfuscator [Non-linear Mixed Boolean-Arithmetic Expressions]
• https://github.com/z1ko/mutaben [A simple mixed-boolean-arithmetic (MBA) generator witten in python]
• https://github.com/LostOxygen/gnn_deobfuscation [Mixed boolean arithmetic deobfuscation using graph neural networks]
• https://github.com/MBA-research/mba-wasm [Mixed Boolean-Arithmetic in Rust for WebAssembly]
• https://github.com/trailofbits/CoBRA [Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation]
• https://github.com/thalium/rumba [Cracking MBAs - An MBA simplification library]
• https://github.com/LLVMParty/smt-server [A small SMT solving server and wire-format toolkit for bit-vector and Boolean formulas]
• https://github.com/stp/stp [Simple Theorem Prover, an efficient SMT solver for bitvectors]
• https://github.com/nbulsi/cirsat [A circuit-based Boolean satisfiability (SAT) solver based on DAG logic networks instead of CNF]

Fix VMP

• https://github.com/gmh5225/VMProtect
• https://github.com/wallds/NoVmpy
• https://github.com/can1357/NoVmp [Static VMProtect x64 3.x devirtualizer powered by VTIL]
• https://github.com/sexyiam/VMPLift [Emulation-first VMProtect 3.8–3.10+ x64 handler walker and lifter for VIP tracing, devirtualization, and closed-form recovery in IDA/Ghidra workflows]
• https://github.com/Aetherx86/VMP_DEVIRT [Integrated research suite for 64-bit VMProtect 3.x, Themida 3.x, and Tigress: hybrid unpacking, Triton/concolic analysis, handler recovery, and LLVM IR lifting for devirtualization]
• https://github.com/JonathanSalwan/VMProtect-devirtualization [Experimental VMProtect 3.x pure-function deobfuscation via symbolic execution and LLVM]
• https://github.com/fare9/dragons-vs-vms [VMProtect x64 devirtualization lab: dragon-tales symbolic handler analysis, all 256 handler slots classified, LLVM IR recovery, and protected sample binaries with Binary Ninja databases]
• https://github.com/gmh5225/VMP-Vmp3_64bit_disasm-prerelease-
• https://github.com/gmh5225/Vmp3_utils
• https://github.com/mike1k/VMPImportFixer [Resolves VMProtect 3.x import protection via emulation (x86/x64)]
• https://github.com/archercreat/titan
• https://github.com/NaC-L/Mergen
• https://github.com/fjqisba/VmpHelper
• https://github.com/xtremegamer1/vmdevirt-vtil
• https://github.com/oureveryday/VMPUnpacker/tree/master [Unpacker]
• https://github.com/void-stack/VMUnprotect.Dumper [Dynamically untamper/unpack VMProtect-protected .NET assemblies]
• https://github.com/void-stack/VMUnprotect [Dynamically log/manipulate VMProtect-virtualized .NET methods via Harmony]
• https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
• https://github.com/notsnakesilent/VMPStatic [A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images]
• https://github.com/milk-analyzer/vmpunpack [Generic x64 VMProtect/packer unpacker that drives samples through patched sogen emulation to OEP, dumps memory, and rebuilds PEs for IDA/Ghidra]
• https://github.com/Lucyferek-nunu/vmp-unpacker [C++ dynamic VMProtect unpacker with anti-debug bypass, OEP discovery, and IAT repair]
• https://github.com/datcathuh/vmprotect-unpacker [WIP dynamic VMProtect 3.8.x unpacker with OEP discovery, memory dump, and IAT rebuild for protected PE binaries]
• https://github.com/whoamicrash/VMProtectDumper [Windows C tool to unpack VMProtect-protected PEs from memory with OEP/IAT recovery, dynamic exec-region harvesting, and pe-sieve orchestration]
• https://github.com/tomhamidi97-arch/vmp-devirtualization-lab [Educational guide and lab notes on Android native-library VMProtect internals, dispatcher/handler recovery, and devirtualization workflows]
• https://github.com/tomhamidi97-arch/frida-vmp-bypass [Frida boundary-hook writeup for reversing stacked VMProtect and OLLVM on Android via libc/JNI/Java exit monitoring]

Fix Themida

• https://github.com/sodareverse/TDE
• https://github.com/ergrelet/themida-unmutate
• https://github.com/ergrelet/unlicense [Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x]
• https://github.com/x86rc/unthemidator [Static Themida/Code Virtualizer/WinLicense (v3–v4) unpacker with IAT restoration, VM identification, and full PE rebuild without executing the protected binary]
• https://github.com/DimaReverse/nuitka-themida-unpacker [Two-stage unpacking pipeline that chains Themida/WinLicense dynamic unpacking (unlicense) with Nuitka onefile KAX/KAY static extraction]
• https://github.com/Hendi48/Magicmida [Themida auto-unpacker for 32/64-bit apps with dump and section restore helpers]
• https://github.com/guoxing2024/magicmida-rs [Rust reimplementation of Magicmida Themida unpacker with IAT rebuild and OEP discovery]
• https://github.com/bobalkkagi/bobalkkagi [Themida 3.x unpacking/unwrapping via API-hook emulation (Tiger red64)]
• https://github.com/stuxnet147/Themida-Research [Themida 3.x research]
• https://github.com/arcticbyp/seb-re-toolkit [Python RE toolkit for Themida-protected Safe Exam Browser seb_x64.dll: PE/static analysis, packer detection, BSTR export calls, Frida tracing, and GUI]
• https://github.com/Marisa-Chan/GhidrOrean [Ghidra Python reimplementation of Deathway's Orean's Unvirtualizer — Oreans VM (Themida/Code Virtualizer) CISC/TIGER/RISC/FISH]

Fix OLLVM

• https://github.com/w00tzenheimer/d810-ng [D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
• https://github.com/woye969/Oo0l1IVvMm [Opt-in IDA Pro 9.x Hex-Rays plugin for OLLVM CFF deobfuscation (MIN/MAX modes) with D-810/unflat orchestration and chain-walking CFG recovery]
• https://bbs.pediy.com/thread-272414.htm
• https://github.com/obpo-project/obpo-plugin
• https://github.com/IIIImmmyyy/AntiOllvm [AntiOllvm Fla with Fake Runtime]
• https://github.com/Mrack/DeObfBR [libtprt.so]
• https://github.com/zhuzhu-Top/deobf [libtprt.so]
• https://github.com/cdong1012/ollvm-unflattener [unflattener]
• https://github.com/JbvrgtonYT/ollvm-unflattener [unflattener]
• https://github.com/guheng-re/unflat [unflattener]

Dynamic Binary Instrumentation

• https://github.com/hzqst/unicorn_pe
• https://github.com/AdvDebug/Brovan [User-mode x86_64 binary emulator for PE, ELF, memory dumps, and unrecognized file formats; C#, Unicorn, interactive debugger shell]
• https://github.com/momo5502/sogen [Windows User Space Emulator]
• https://github.com/mojtabafalleh/emulator [Windows User Space Emulator]
• https://github.com/binsnake/KUBERA [A x86 environment emulator for Windows user and kernel binaries]
• https://github.com/HexRaysSA/rax [Self-checking CPU emulator: x86-64/AArch64/Hexagon/RISC-V; instruction-level diff vs KVM/QEMU oracles; boots Linux, SDE trace, GDB stub for IDA, SMIR JIT; Rust, MIT]
• https://github.com/ZehMatt/zyemu [x86-64 user mode emulation using Zydis]
• https://github.com/Nitr0-G/PeVisor [PE]
• https://github.com/googleprojectzero/TinyInst
• https://revers.engineering/applied-re-crude-te-for-control-flow-tracing/ [Applied RE: Crude Trap-and-Emulate for control-flow tracing on Windows x64 user mode]
• https://github.com/revsic/cpp-veh-dbi
• https://github.com/ZehMatt/CovCane
• https://github.com/bitdefender/river
• https://github.com/beehive-lab/mambo [ARM]
• https://github.com/GJDuck/e9patch [E9Patch is a powerful static binary rewriting tool for x86_64 Linux ELF binaries]
• https://github.com/DynamoRIO/drmemory
• https://github.com/aroxby/dynre-x86
• https://github.com/WaterlooBridge/adbi [For Android]
• https://github.com/crmulliner/adbi [For Android]
• https://github.com/ndrewh/pyda [Write dynamic binary analysis tools in Python]
• https://github.com/redthing1/w1tn3ss [dynamic binary instrumentation, analysis, and patching framework]
• https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]
• https://github.com/facebookresearch/CUTracer [A dynamic binary instrumentation tool for tracing and analyzing CUDA kernel instructions]
• https://github.com/momo5502/levo [AOT binary translation: control flow recovery with Ghidra, lifting with Remill, recompilation with LLVM]

Launcher Abuser

• https://github.com/Ricardonacif/launcher-abuser

PatchGuard-related

• https://github.com/armasm/EasyAntiPatchGuard
• https://github.com/9176324/Shark
• https://github.com/gmh5225/Patchguard-2023 [Shark]
• https://github.com/hfiref0x/UPGDSED [File]
• https://github.com/Mattiwatti/EfiGuard [EFI]
• https://github.com/zzhouhe/PG1903 [Demo NX]
• https://gist.github.com/gmh5225/0a0c8e3a2d718e2d6f9b6a07d5e0f80a [PG CTX]
• https://github.com/gmh5225/QuickPGTrigger [Stress Testing]
• https://github.com/tandasat/Sushi [Monitoring PG]
• https://github.com/gmh5225/Disabling-Hyper-V [Disable Hyper-V]
• https://github.com/AdamOron/PatchGuardBypass
• https://github.com/zer0condition/Demystifying-PatchGuard
• https://github.com/4l3x777/dse_pg_bypass [DSE & PG bypass via BYOVD attack]
• https://github.com/gmh5225/VulnerablePatchGuardExploit [A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime]
• https://github.com/emlinhax/tableflipper [partially disable patchguard up to win11 21H2]
• https://github.com/AmitMoshel1/PatchGuardEncryptorDriver [Self-implemented PatchGuard]
• https://r0keb.github.io/posts/PatchGuard-Internals [PatchGuard Internals]
• https://github.com/NeoMaster831/kurasagi [Windows 11 24H2 Runtime PatchGuard Bypass]

Driver Signature enforcement

• https://github.com/gmh5225/dse_hook
• https://github.com/gmh5225/Dse-Patcher-2
• https://github.com/gmh5225/DisableDSE
• https://github.com/wesmar/KernelResearchKit [Windows 11 kernel research framework — boot-time DSE bypass on 25H2 by surgically patching SeCiCallbacks via native subsystem to load unsigned drivers; anti-loop protection and dual-path architecture]
• https://github.com/wesmar/BootBypass [Advanced native-mode utility for bypassing DSE and HVCI — smart SeCiCallbacks patching and independent Memory Integrity management via subsystem:native for early-phase security research and driver development]
• https://github.com/wesmar/kvc [Unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on HVCI/VBS-enabled Windows]

Windows Kernel Explorer

• https://github.com/NullArray/WinKernel-Resources [Guide]
• https://github.com/supermanc88/Document/tree/master/Windows%20Driver%20Development [Guide]
• https://windiff.vercel.app [Diff]
• https://github.com/ergrelet/windiff [Web/CLI tool to browse and diff Windows PE symbols, types, and syscalls across OS versions]
• https://github.com/cristeigabriela/bb [Benowin Blanc — parse Windows SDK/PHNT via libclang; struct layouts, enums, constants like dt without WinDbg; CLI + TUI, JSON export]
• https://github.com/cristeigabriela/bb-viewer [Web explorer for bb output: browse Windows SDK/PHNT functions, types, typedefs, constants, and type graphs; user/kernel, amd64/x86/arm/arm64]
• https://github.com/gmh5225/ntoskrnl_file_collection [Various versions of ntoskrnl files]
• https://github.com/gmh5225/win32k_file_collection [Various versions of win32k files]
• https://github.com/gmh5225/win32k_file_collection2 [Various versions of win32k files]
• https://github.com/jiubanlo/WinNT5_src_20201004 [Leaked Windows XP Source]
• https://github.com/yyl-20020115/OpenArk [Tool]
• https://github.com/BeneficialCode/WinArk [Tool]
• https://github.com/KSwordDEV/KSword [ARK]
• https://github.com/zodiacon/ObjectExplorer [GUI explorer for Windows kernel objects, handles, object types, and Object Manager namespace]
• https://github.com/zodiacon/DbgPrint [GUI viewer for user-mode OutputDebugString and kernel DbgPrint/Ex output via ETW, without registry changes or a custom driver]
• https://github.com/kernullist/kn-diff-pool [Windows kernel Big Pool snapshot/diff tool with kernel driver and Go TUI]
• https://github.com/zodiacon/PoolMonXv3 [GUI monitor for Windows kernel pool allocation tags with filtering, pause/resume, and WinDbg pooltag.txt integration]
• https://github.com/kernullist/kn-live-dbg [Windows kernel live debugging — driver exposes memory primitives, user-mode TUI handles symbols, types, and UX (LiveKD-style)]
• https://github.com/orinimron123/CVE-2026-40369-EXPLOIT [CVE-2026-40369 — arbitrary kernel increment via NtQuerySystemInformation class 253; browser sandbox escape PoC, Win11 24H2–25H2]
• https://github.com/hfiref0x/KDU [Kernel Driver Utility Tool]
• https://github.com/jthuraisamy/TelemetrySourcerer [Enumerate and disable callbacks/ETW]
• https://github.com/preludeorg/ThreatIntelligenceConsumer [Consuming from the Threat-Intelligence ETW provider without a driver or PPL privilege]
• https://github.com/progmboy/openprocmon [open source process monitor]
• https://github.com/winsiderss/systeminformer [The original name is "Process Hacker"]
• https://github.com/0xcpu/ExecutiveCallbackObjects [Callback]
• https://github.com/0xcpu/WinAltSyscallHandler [AltSystemCallHandlers]
• https://github.com/DownWithUp/CallMon [AltSystemCallHandlers]
• https://github.com/everdox/InfinityHook [ETW Hook]
• https://github.com/AyinSama/Anti-AntiDebuggerDriver [ETW Hook]
• https://github.com/gmh5225/AcDrv [ETW Hook]
• https://github.com/FiYHer/InfinityHookPro [ETW Hook Ex]
• https://github.com/gmh5225/ETWHOOK-InfinityHookClass [ETW Hook Ex]
• https://github.com/DearXiaoGui/InfinityHookPro-main [ETW Hook WIN11]
• https://github.com/ThomasonZhao/InfinityHookProMax [ETW Hook WIN11]
• https://github.com/Oxygen1a1/InfinityHook_latest [ETW Hook WIN11]
• https://github.com/gmh5225/PDF-PMC-X86 [A Study on PMI in x86-Architecture]
• https://github.com/KelvinMsft/ThreadSpy [PMI Callback]
• https://github.com/KelvinMsft/PerfMon [PMI Callback]
• https://github.com/gmh5225/PMI-hpc [PMI]
• https://github.com/marcusbotacin/BranchMonitoringProject [PMI]
• https://github.com/gmh5225/NMI-EnumNmiCallback [Enumerate NMI]
• https://github.com/gmh5225/Disable-nmi-callbacks [Disable NMI]
• https://github.com/gmh5225/NMICallbackBlocker2 [Disable NMI]
• https://github.com/gmh5225/NMI-nmi_callback [Triggering NMI]
• https://github.com/gmh5225/Kernel_Anti-Cheat [NMI]
• https://github.com/jlgreathouse/AMD_IBS_Toolkit [AMD Sampling]
• https://github.com/intelpt/WindowsIntelPT [Intel PT]
• https://github.com/CristiNacu/ingsoc [Intel PT]
• https://github.com/DProvinciani/pt-detector [Intel PT]
• https://github.com/googleprojectzero/winafl [Intel PT Fuzzer]
• https://github.com/intelpt/winipt [ipt.sys]
• https://github.com/australeo/libipt-rs [ipt.sys]
• https://github.com/intelpt/processor-trace [Intel PT Decoder]
• https://github.com/gmh5225/Driver-intel-PEBs-LoopHPCs [Intel PEBs]
• https://github.com/libiht/libiht [Intel Hardware Trace Library]
• https://github.com/jsacco/NTKernelWalkerLib [User-mode ntoskrnl symbol/struct offset resolver via dbghelp + executable section gadget scanning (e.g., short ROP primitives)]
• https://github.com/gmh5225/Ark [Tool]
• https://github.com/gmh5225/ntoskrnl_file_collection [Ntoskrnl Version]
• https://github.com/gmh5225/win32k_file_collection [Win32k Version]
• https://github.com/gmh5225/win32k_file_collection2 [Win32k Version]
• https://github.com/gmh5225/MSSymbolsCollection [Kernel Symbols]
• https://github.com/am0nsec/wkpe [Enumerate VAD]
• https://github.com/armvirus/DriverDllFInder [Find Driver Useless Memory]
• https://github.com/MahmoudZohdy/APICallProxy [Windows API Call Obfuscation]
• https://github.com/Spuckwaffel/Simple-MmcopyMemory-Hook [Hook MmcopyMemory]
• https://github.com/VollRagm/PTView [Browse Page Tables on Windows]
• https://github.com/misc0110/PTEditor [PT Editor]
• https://github.com/IcEy-999/Ntoskrnl_Viewer [Ntoskrnl Viewer]
• https://github.com/ekknod/Nmi [Blocking NMI interrupts]
• https://github.com/EquiFox/KsDumper [Dumping processes using the power of kernel space]
• https://github.com/mastercodeon314/KsDumper-11 [Classic and legendary KsDumper]
• https://github.com/not-matthias/Nemesis [Dumping processes using the power of kernel space]
• https://github.com/allogic/KDBG [Tool]
• https://github.com/backengineering/Voyager [A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
• https://github.com/gmh5225/Voyager [A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
• https://github.com/noahware/hyper-reV [memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V]
• https://github.com/LabGuy94/Diskjacker [Runtime Hyper-V Hijacking with DDMA]
• https://github.com/ReverseWarrior/IUM-Debugger [Hyper-V host tool via LiveCloudKd hvmm.sys: patch guest securekernel debug check in live RAM so WinDbg in the guest can attach to VTL1 IUM trustlets]
• https://github.com/zer0condition/BusterCall [HVCI bypass via PFN swapping to call arbitrary kernel functions from user-mode]
• https://github.com/NurdAlert/modded-voyager
• https://github.com/gmh5225/Fortnite-VoyagerTF [Voyager for Fortnite]
• https://github.com/repnz/apc-research [APC Internals Research Code]
• https://github.com/intel/pcm [Processor Counter Monitor]
• https://github.com/ChengChengCC/Ark-tools [Some kernel research]
• https://github.com/alal4465/KernelMon [Monitoring Windows Kernel Drivers]
• https://github.com/gmh5225/Practical-Reverse-Engineering-Solutions [DPC+APC]
• https://github.com/br-sn/CheekyBlinder [Enumerating and removing kernel callbacks using signed vulnerable drivers]
• https://github.com/GetRektBoy724/DCMB [Removing kernel callbacks]
• https://github.com/V-i-x-x/kernel-callback-removal [Removing kernel callbacks]
• https://github.com/Air14/KDBGDecryptor [A simple example how to decrypt kernel debugger data block]
• https://github.com/FaEryICE/MemScanner [Memory scanner]
• https://github.com/Oliver-1-1/RwxScanner [RWX Memory scanner]
• https://github.com/S12cybersecurity/RWXFinder [Find Windows RWX memory regions in a target process by size via VirtualQueryEx]
• https://github.com/irql/nokd [Kernel debugger protocol]
• https://github.com/DejavuSecure/DetectNtoskrnlIntegrity [Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe]
• https://github.com/brew02/BudgetEPT [Create stealthy, inline, EPT-like hooks using SMAP and SMEP]
• https://github.com/synacktiv/windows_kernel_shadow_stack [Shadow Stack]
• https://github.com/noahware/apic [C++ library for sending processor interrupts via x2apic & xapic]
• https://github.com/zer0condition/NTMemory [Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.]
• https://github.com/zer0condition/gexec [Register-machine bytecode interpreter for Windows kernel drivers with gasm assembler, gvmlift PE lifter, and embeddable host API for kernel memory/MSR/physical access]

Linux Kernel Explorer

• https://github.com/MatheuZSecurity/Rootkit [Collection of codes focused on Linux rootkits]
• https://github.com/MatheuZSecurity/ksentinel [Kernel integrity monitor for detecting syscall hooking]
• https://github.com/djolertrk/kLLDB [LLDB based debugger for Linux Kernel]
• https://github.com/sad0p/venom [Linux Kernel Rookit Hooking Mechanism]

Magisk

• https://github.com/PShocker/Zygisk-MagiskHide
• https://github.com/longpoxin/hideroot
• https://github.com/canyie/Riru-MomoHider
• https://github.com/newbit1/rootAVD [root AVD]
• https://github.com/CHERWING/xiaomi_usb_security_bypass [Magisk module bypassing MIUI USB debugging (Security settings), USB install, and fastboot account/SIM gates for scrcpy input injection on rooted Xiaomi]
• https://github.com/ravindu644/USB-Arsenal [Rooted Android app (Magisk/KernelSU) combining USB configfs gadget modes—mass storage/CD-ROM, RNDIS/NCM tethering, and HID keyboard/mouse—for host boot and input tooling]
• https://github.com/Fox2Code/FoxMagiskModuleManager [A module manager for Magisk]
• https://github.com/MMRLApp/WebUI-X-Portable [Portable Android app providing the MMRL WebUI X interface for browsing, installing, and managing Magisk/APatch/KernelSU modules]
• https://github.com/zelect0r/zamr [Curated MMRL module repository for Magisk/KernelSU/APatch (Play Integrity Fix, Zygisk, root-hide, TEESimulator)]
• https://github.com/Yass5002/magisk-hub [Active-source directory and static site for Magisk/KernelSU/APatch modules with schema validation and automated release sync]
• https://github.com/Elcapitanoe/pif-config-generator [Automated pipeline to track upstream Android build.prop tags and publish validated Play Integrity Fix (PIF) JSON profiles]
• https://github.com/wajahatnaeem056/jerrymanager [KernelSU/APatch/Magisk module with Web UI for Play Integrity attestation, keybox injection, root hiding, and banking-app detection cleanup]
• https://github.com/PallabKumarS/android-mods [KernelSU/Magisk modules and LSPosed hooks for HyperOS/AOSP: Play Integrity–Tricky Store AIO bundles, Strong Keybox Tricky Store, and attestation/root-hide patterns]
• https://github.com/mcxiaochenn/TeeForge-CD [Magisk/KernelSU/APatch module to maintain Tricky Store/TEESimulator targets, bootloader property weakening, and optional Keybox/RKP sync for Play Integrity attestation]
• https://github.com/linflame/SusfsLkmLoader [Magisk/KernelSU/APatch module that auto-loads the susfs kernel module at boot for Android root hiding used in mobile game security research]
• https://github.com/bufanchen121101/AxManagerD [Root-free Magisk-style Android module framework with property injection, runtime modules, and built-in LSPatch Xposed hooking]
• https://github.com/Dr-TSNG/ZygiskOnKernelSU [Run Zygisk on KernelSU]
• https://github.com/svoboda18/magiskboot [Boot Image Modification Tool]
• https://github.com/xiaoxindada/magiskboot_ndk_on_linux [Boot Image Modification Tool]
• https://github.com/ookiineko/magiskboot_build [Boot Image Modification Tool]
• https://github.com/gmh5225/magiskboot-linux [Use GitHub Actions to build magiskboot]
• https://github.com/contactjayclatty/flashwright [Windows 11 wizard to flash factory images, patch boot with Magisk, and OTA-update while keeping root (dry-run checks, backups, recovery)]
• https://github.com/the-dise/EasyPixel [Magisk module that disguises a device under Google Pixel]
• https://github.com/mrx7014/SpoofingCollection [Magisk and LSPosed module collection for spoofing Android device fingerprints (manufacturer, model, build props)]
• https://github.com/AlirezaParsi/COPG [Zygisk module for rooted Android with per-app device, CPU, and GPU spoofing, build-property and Android ID spoofing, and an on-device WebUI; supports KernelSU, Magisk, and APatch]
• https://github.com/gmh5225/MagiskHide [Portable MagiskHide]
• https://github.com/lico-n/ZygiskFrida [Injects frida gadget using zygisk]
• https://github.com/xjoker/frida-magisk [Magisk/KernelSU module bundling official Frida server and Gadget plus a Zygisk injector, with scripted builds and on-device WebUI]
• https://github.com/Admirepowered/Zygisk_mod [Standalone implementation of Zygisk]
• https://github.com/anasfanani/Magisk-Tailscaled [Magisk module for running Tailscale]
• https://github.com/ayoubvvch/sshserver-magisk [Magisk/KernelSU/APatch module with statically linked Dropbear SSH and SFTP for headless root shell access from boot]
• https://github.com/j-hc/FlagSecurePatcher [Disable flag secure and screenshot listeners]
• https://github.com/ShivamXD6/Simple-Flag-Secure [Standalone Magisk/KernelSU/APatch module that patches services.jar to disable FLAG_SECURE and block screenshot detection on Android 14+]
• https://github.com/saadnahid7/smalipatcher_reborn [Magisk/KernelSU/APatch module that patches services.jar on-device for mock-location spoofing and secure-window screenshot bypass on Android 10–17]
• https://github.com/hackcatml/zygisk-memdump [A zygisk module that dumps so file from process memory]
• https://github.com/PerformanC/ReZygisk [Transparent implementation of Zygisk]
• https://github.com/VeryBaaad/ZygiskNextNext [Magisk/KernelSU/APatch module implementing the Zygisk Next API to load ZygiskNext-style modules (inline/PLT hooking, HyperOS Runtime injection)]
• https://github.com/jiqiu2022/Zygisk-MyInjector [Zygisk Injector]
• https://github.com/Exo1i/MagiskHluda [Run a more undetectable frida server on boot using magisk]
• https://github.com/thelok1s/florida-zygisk [Magisk/Zygisk module that auto-starts Florida anti-detection frida-server on boot]
• https://github.com/zensu357/ksurusda [Zygisk module injecting Rusda anti-detection Frida gadget on KernelSU, Magisk, or APatch with WebUI, listen/offline script modes, and library remapping]
• https://github.com/MhmRdd/NoHello [A Zygisk module to hide root]
• https://github.com/ys1231/MoveCertificate [A Magisk/KernelSU/APatch module for moving user certificates to system certificates. Supports Android 7-15]
• https://github.com/jiayuxuan123/RescueX [Magisk/KernelSU/APatch auto-rescue module with boot watchdog, module snapshots, and WebUI recovery]
• https://github.com/xgl34222220-ops/BaiZe [Magisk/KernelSU/APatch module for graded cache, log, APK residue, and deep junk cleanup on rooted Android]
• https://github.com/ri-char/zygisk-dump-dex [A zygisk module that hooks libdexfile.so to dump dex]
• https://github.com/smithluke874/Android-VirtualCam-Manager [Magisk/Zygisk virtual camera module with ArtHook-based Camera1 surface and NV21 frame injection (no LSPosed)]

Xposed

• https://github.com/NPC2000/AppPealing-new [An Xposed module that disables Inka AppSealing, a popular anti-cheat and anti-root solution]
• https://github.com/xposed-modules-repo/com.fuck.iab [LSPosed/Xposed module that hooks Google Play, Bazaar, and Myket in-app billing to bypass purchases, with per-package Frida script support]
• https://github.com/mabbcoll13/xposed-module-kit [Xposed/LSPosed module scaffold with hook templates and root-detection bypass example]
• https://github.com/Jordan231111/lsposed-universal-template [LSPosed/LSPatch module template with Unity/Unreal/Godot engine detection, native pattern scan and memory helpers, and runtime overlay toggles]
• https://github.com/wchunlin1006/LocusMimic [LSPosed/Xposed Android GPS spoof module with map picker, saved locations, and app/system/mock-provider modes]
• https://github.com/cxOrz/AnyWhere [Android mock-location app with map picker, joystick movement, and LSPosed module to hide mock-provider detection]
• https://github.com/xposed-modules-repo/com.wowsoftware.hidemyandroid [LSPosed/Xposed anti-detect module for profile-based device identifier and environment spoofing (Android ID, GAID, IMEI, SIM, root/LSPosed/VPN hiding)]
• https://github.com/GJR787878/DeviceResetSpoofer [LSPosed module that auto-generates a new Android device identity after clearing app data (Android ID, GAID, IMEI, MAC, GSF ID hooks)]
• https://github.com/RytterMohn/UsbDetectionBypass [LSPosed/Xposed module that hides in-app USB connection and USB debugging detection signals (Settings/SystemProperties, USB broadcasts, UsbManager, getprop/dumpsys, sysfs)]
• https://github.com/salvogiangri/KnoxPatch [LSPosed module to restore Samsung Knox-gated apps and features on rooted Galaxy devices]

Frida

• https://github.com/hackcatml/frida-watchpoint-tutorial [Frida's setHardwareWatchpoint tutorial]
• https://github.com/ChiChou/grapefruit [Runtime mobile instrumentation toolkit for iOS/Android, web UI]
• https://github.com/firerpa/lamda [Android full-stack device control with built-in Frida, MITM, UI automation, and reverse-engineering APIs]
• https://github.com/Kakaxh1/RootRaven [Self-hosted Android/iOS pentest dashboard with Frida hooking, SSL pinning bypass, APK decompilation, and Burp proxy setup]
• https://github.com/oldboysonnt/mobile-harness [One-click Android pentest harness: rooted emulator setup, SSL/root/Play Integrity bypass helpers, Burp routing, jadx indexing, and Frida-ready MCP surfaces for agents]
• https://github.com/jafarm189/MOABile [Multi-device terminal UI for Android/iOS mobile app testing with Frida, Objection, adb, scrcpy, and iproxy orchestration]
• https://github.com/GliTcHZzZ67/mast-orchestrator [Flask web dashboard to deploy frida-server on rooted Android devices and run whitelisted injection scripts (SSL pinning bypass, root detection bypass, crypto monitoring)]
• https://github.com/index-login/MobileRE-Skill [AI-agent mobile reverse-engineering skill set with layered Frida hooks and a six-stage anti-detection pipeline]
• https://github.com/ChiChou/vscode-frida [Unofficial Frida extension for VSCode]
• https://github.com/MrOplus/frida-ide [Web-based Frida IDE with integrated JADX decompilation, device/process management, and Claude AI assistant for mobile reverse engineering]
• https://github.com/ChiChou/bagbak [iOS Frida app decrypt / dump to IPA; extensions; jailbreak; bagbak@5 needs frida@17; deprecated]
• https://github.com/ndhn27/il2cpp-re [Frida-based iOS tool to dump deobfuscated IL2CPP global-metadata headers from running Unity apps for Il2CppDumper analysis]
• https://github.com/CrackerCat/strongR-frida-android
• https://github.com/gmh5225/frida-ue4dump [UE4]
• https://github.com/jcalabres/hook-updater [Update Frida hooks automatically]
• https://github.com/noobexon1/FridaForge [IDA Pro and Binary Ninja plugins that generate composable, context-aware Frida hook scripts and copy them to the clipboard]
• https://github.com/gmh5225/frida-boot [A binary instrumentation workshop, with Frida, for beginners]
• https://github.com/oleavr/frida-module-example [TypeScript Frida library example using frida-compile — ImHex struct patterns, Memory.scanSync scanning, and ARM Thumb hook trampolines]
• https://github.com/smartdone/Frida-Scripts [Some scripts]
• https://github.com/0xdea/frida-scripts [Some scripts]
• https://github.com/SeeFlowerX/frida-smali-trace [Smali trace]
• https://github.com/Ylarod/Florida [anti-detection version of frida-server]
• https://github.com/noobpk/frida-android-hook [Trace classes/functions/and modify the return values]
• https://github.com/unrandoms/frida-mobile-kit [Organized Frida script toolkit for Android dynamic analysis: cert pinning bypass (OkHttp, Flutter, React Native), traffic/crypto logging, root-detection bypass, and runtime memory inspection with a small CLI]
• https://github.com/mrmtwoj/android-frida-bypass-suite [Frida script and Python forward proxy for Android pentesting: Java/native root bypass, SSL pinning bypass (OkHttp, TrustKit, Conscrypt, WebView), AES key hooks, Burp/adb reverse setup]
• https://github.com/apkunpacker/AntiFrida_Bypass [Bypass Some AntiFrida Checks]
• https://github.com/Abbbbbi/Frida-Seccomp [Frida-Seccomp]
• https://github.com/rednaga/frida-stack [Getting better stacks and backtraces in Frida]
• https://github.com/piotrbania/frida_usb_dump [Frida script that allows to sniff & dump USB traffic on macOS]
• https://github.com/hackcatml/frida-findJNINativeMethods [Find JNI native methods while the app is running]
• https://github.com/miticollo/xpc-tracer [A tracer based on frida for XPC messages in iOS and macOS]
• https://github.com/0xCD4/SSL-bypass [Root Detection & SSL Bypass Script]
• https://github.com/Ishanoshada/Ultimate-Frida-Bypass [Frida script bypassing Talsec/freeRASP, SSL pinning, root/emulator/Frida detection on Android]
• https://github.com/infosecrajesh/Auto-generate-Frida-bypass-scripts-for-SSL-pinning-root-detection-on-Android-iOS [Static-analysis Frida script generator for Android/iOS SSL pinning and root/jailbreak bypass]
• https://github.com/3v1lC0d3/Root_Detection_Low_level [Frida script that hooks java.io.File and Runtime.exec to log suspicious paths/commands and Java stack traces for Android root-detection behavior analysis]
• https://github.com/moaaz01/nightowl [Unified Android APK analysis CLI with framework detection (Unity/Flutter/RN), RASP defense profiling, and auto-generated Frida bypass scripts]
• https://github.com/VarshaWanjari0/Auto-Android-App-Modding-Tool [Termux-based Android APK modding toolkit for Frida Gadget and native .so injection, patching, rebuild, align, and sign workflows]
• https://github.com/aimardcr/FridaDetectionBypass [Debugger Detection Bypass]
• https://github.com/gmh5225/FridaScript [Low level scripting app for iOS]
• https://github.com/AsenOsen/frida-stealth [Stealth patch for Frida, stealth knowledge collection]
• https://github.com/Exo1i/MagiskHluda [Run a more undetectable frida server on boot using magisk]
• https://github.com/MiChongs/Frida-RS [KernelSU module wrapping official frida-server with a Rust supervisor and Material 3 WebUI]
• https://github.com/suifei/fridare [Powerful Frida repackaging tool for iOS and Android. Easily modify Frida servers to enhance stealth and bypass detection]
• https://github.com/kkkbbb/rustFrida [Frida-like Android ARM64 hook — QuickJS, Java/native/stealth hook, QBDI; pairs with wxshadow (mkpms)]
• https://github.com/dreamland-blog/KSU-Rust-Frida [Android ARM64 dynamic instrumentation module workflow for KernelSU/Magisk: single-binary engine, attach/spawn/watch-so, HTTP RPC control plane, and multi-mode stealth (normal/wxshadow/recomp)]
• https://github.com/wzxwhxcz/LSPFRIDA [LSPosed module embedding Frida GumJS/QuickJS and LSPlant hooks to write, inject, and debug frida-java-bridge scripts entirely on-device without frida-server or a PC]
• https://github.com/TheQmaks/phantom-frida [Build anti-detection Frida server from source]
• https://github.com/Veridiff/Veridiff [Frida Stalker dual-trace engine that pinpoints the branch where two native runs diverge, for anti-cheat checks and OLLVM analysis]
• https://github.com/1013503897/Morphida [Polymorphic anti-detection Android arm64 frida-server builds that morph static fingerprints per release]
• https://github.com/astra1dev/MalumMenu-Android [Among Us Android cheat menu using Frida and frida-il2cpp-bridge]
• https://github.com/abcd123rft/terraria-android-modding [Documented Android Terraria IL2CPP modding skill plus Frida/JsHook injectable mod menu: il2cpp-by-name hooks, system-UI overlay menus, and offline icon extraction tooling]
• https://github.com/AshrafMorningstar/hayday-bot [Frida-based Hay Day automation with guest ARM64 libg.so hooking on LDPlayer/Houdini and Promon SHIELD/Quago anti-cheat bypass]
• https://github.com/quarkslab/android-hardware-attestation-demo [End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]

Hook ART(android)

• https://github.com/PAGalaxyLab/YAHFA
• https://github.com/canyie/pine

Hook syscall(android)

• https://github.com/iofomo/abyss [Android system call hook]

Android Terminal Emulator

• https://github.com/termux/termux-app
• https://github.com/DP-Hridayan/aShellYou [Material You Android ADB/root/shell utility (Shizuku, OTG, wireless debugging)]
• https://github.com/iflyabd/nowifi-adb [LSPosed module enabling Android wireless debugging over mobile data or Tailscale without WiFi or hotspot]
• https://github.com/gmh5225/neotty
• https://github.com/jackpal/Android-Terminal-Emulator
• https://github.com/NeoTerrm/NeoTerm

Android File Explorer

• https://github.com/nzcv/note [Guide-zh]
• https://github.com/iBotPeaches/Apktool [A tool for reverse engineering Android apk files]
• https://github.com/AndnixSH/APKToolGUI [GUI for apktool, signapk, zipalign and baksmali utilities]
• https://github.com/pxb1988/dex2jar
• https://github.com/skylot/jadx [Dex to Java decompiler]
• https://github.com/neocanable/garlic [Fast APK/DEX/JAR Java decompiler (C)]
• https://github.com/LuckyPray/DexKit-Android [dex deobfuscator]
• https://github.com/LSPosed/DexBuilder [Generate dex file by c++]
• https://github.com/rednaga/APKiD [PEiD for Android]
• https://github.com/APKLab/APKLab [Android Reverse-Engineering Workbench for VS Code]
• https://github.com/pgp/XFiles [File explorer for (rooted) Android]
• https://github.com/gmh5225/AdbFileManager [File manager using ADB protocol]
• https://github.com/Eternal-Dash/Dashfile_Manager [Windows desktop ADB + root Android device manager (.NET/Avalonia) with Magisk/KernelSU/APatch module browsing, AVB tooling, and plugin system]
• https://github.com/MuntashirAkon/AppManager [A full-featured package manager and viewer]
• https://github.com/pgp/XFiles [A general-purpose file explorer for (rooted) Android]
• https://github.com/Raival-e/File-Explorer [An Android file explorer]
• https://github.com/SysAdminDoc/FileExplorer [Full-featured rooted Android file manager (Kotlin/Compose) with dual-pane tabs, SAF, USB OTG, APK analyzer, and root module browser]
• https://github.com/d4rken-org/butler [Open-source Android file explorer with root and Shizuku support, app manager, APK export, and regex search]
• https://github.com/obfusk/apksigcopier [apksigcopier - copy/extract/patch android apk signatures & compare apks]
• https://github.com/loerting/dalvikus [Android reverse-engineering tool / smali editor]
• https://github.com/azw413/Glass [APK/AAB: DEX class tree, smali viewer, arm64 .so disassembly, manifest, CFG, xref, bundle search; GPU-accelerated Rust disassembler]

Android Memory Explorer

• https://github.com/misc0110/PTEditor [PT Editor]
• https://github.com/joaomlneto/procmap
• https://github.com/kp7742/MemDumper [Dump]
• https://github.com/LLeavesG/eBPFDexDumper [DexDumper based eBPF on Android Platform]
• https://github.com/mrcang09/Android-Mem-Edit
• https://github.com/ExploitTheLoop/writemem
• https://github.com/abcz316/rwProcMem33 [Linux read & write process memory module]
• https://github.com/ri-char/rwMem [The fork version of rwProcMem33]
• https://github.com/IAIK/armageddon [Cache attacks on ARM]
• https://github.com/tamirzb/CVE-2021-1961 [CVE RW]
• https://github.com/MJx0/KittyMemory [Runtime code patching]
• https://github.com/gmh5225/KittyMemory-IOS [Runtime code patching for IOS]
• https://github.com/vrolife/mypower [Memory scanner]
• https://github.com/gmh5225/memory_server [Memory scanner & analyzer with REST API]
• https://github.com/KuhakuPixel/AceTheGame [Game Hacking Tools]
• https://github.com/thatskymod/Sky-CotL-Scripts [Sky: Children of the Light mod/script hub — Canvas Android modloader, GameGuardian, Lua scripts, PC/Steam assets, and virtual-space setups]
• https://github.com/dbcyyds/MemDbg [Android CE-style memory debugger with Vulkan+ImGui overlay, root engine, pointer scan, and Lua 5.4]
• https://github.com/andoridcharlyroot-debug/charlyengine [Open-source Android Cheat Engine clone (Kotlin + NDK) with root memory scan, value inject/freeze, and saved sessions]
• https://github.com/vastobb/sephile [Rooted Android memory scanner and editor (Compose UI, ptrace NDK) with search, freeze, live hex inspector, and CI-built APKs]
• https://github.com/gmh5225/Android-MemoryTool [RPM]
• https://github.com/Anonym0usWork1221/C-Android-Memory-Tool [RPM]
• https://github.com/Poko-Apps/MemKernel [RPM]
• https://github.com/DeNA/mempatch [Memory tampering tool]
• https://github.com/hackcatml/zygisk-memdump [A zygisk module that dumps so file from process memory]
• https://github.com/mrexodia/lldbext-dump [Extension to create a full memory dump using LLDB on Android]
• https://github.com/block/stoic [Run code within any debuggable Android process, without modifying its APK]
• https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]

Android Application CVE

• https://github.com/shakevsky/keybuster [Samsung Keymaster TA — AES-GCM IV reuse (CVE-2021-25444) and downgrade (CVE-2021-25490) PoC; hardware key extraction on Galaxy S8–S21; TrustZone research client]
• https://github.com/nahid0x1/CVE-2024-0044 [a vulnerability affecting Android version 12 & 13]

Android Kernel CVE

• https://github.com/ScottyBauer/Android_Kernel_CVE_POCs [List]
• https://github.com/tangsilian/android-vuln [List]
• https://github.com/jiayy/android_vuln_poc-exp [List]
• https://github.com/jsirichai/CVE-2019-2215 [Root for Pixel 2/XL]
• https://github.com/bluefrostsecurity/CVE-2020-0041 [Root for Pixel 3]
• https://github.com/j4nn/CVE-2020-0041 [Root for Pixel 3]
• https://github.com/polygraphene/DirtyPipe-Android [Root for Pixel 6]
• https://github.com/tiann/DirtyPipeRoot [Root for Pixel 6]
• https://github.com/Markakd/bad_io_uring [Root for Pixel 6]
• https://github.com/0x36/Pixel_GPU_Exploit [Root for Pixel7/8 Pro with Android 14]
• https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver [Root for Samsung]
• https://github.com/0xbinder/android-kernel-exploitation-lab [CVE-2019-2215]
• https://github.com/zhuowei/cheese [CVE-2025-21479]
• https://github.com/farazsth98/poc-CVE-2025-38352 [CVE-2025-38352]
• https://github.com/villager1314/CVE-2026-64560-Analysis [CVE-2026-64560 — posix-cpu-timers non-leader exec() race UAF; Linux/Android trigger PoC + patch analysis]
• https://github.com/x-spy/CVE-2026-43499-popsicle [CVE-2026-43499]
• https://github.com/Colorful-glassblock/duchamp-root [CVE-2026-43499]
• https://github.com/BuSung-dev/Root-My-Galaxy [Samsung Galaxy KernelSU installer — CVE-2026-43499]
• https://github.com/alex193a/Root-My-Pixel [Jailbreak supported Google Pixel phones with CVE-2026-43499]
• https://github.com/JoinChang/ghostlock-oneplus [GhostLock (CVE-2026-43499) futex PI UAF exploit with multi-device offset tables for locked-bootloader OnePlus/OPPO/realme/Xiaomi root + KernelSU]
• https://github.com/Romk-a/CVE-2026-43499-ghostlock-vivo-x100-ultra-root [GhostLock PI-futex exploit port for Vivo X100 Ultra with KernelSU and vr.ko anti-root bypass research]
• https://github.com/zsw125/o3root [Shizuku-driven CVE-2026-98260 LPE chain with matching KernelSU-family LKM loader for Xiaomi yingtian/lhasa (HyperOS 4, kernel 6.18.21)]
• https://github.com/YuKongA/ghostlock-app [GhostLock One-Tap Execution App - CVE-2026-43499]
• https://github.com/mitschud/DirtyFrag [Ephemeral root via the CVE-2026-43284 page-cache exploit]

Android Bootloader Bypass

• https://github.com/MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass [Xiaomi HyperOS BootLoader Bypass]
• https://github.com/atlas4381/qualcomm_avb_exploit_poc [Unlocking qualcomm bootloader]
• https://github.com/AdaUnlocked/2026-All-Brands-Bootloader-Unlock-Status [Continuously updated reference guide to bootloader unlock, root, and iOS jailbreak status across major OEM brands for mobile modding research]

Android Key Attestation

• https://github.com/quarkslab/android-hardware-attestation-demo [End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]

IoT / Smart devices

• https://github.com/TaszkSecLabs/xiaomi-c400-pwn [Xiaomi Smart Camera exploits and jailbreak]
• https://github.com/keowu/sjcam [SJCAM SJ4000 Air (Allwinner V3) firmware reverse engineering, parsers, custom CFW (Lelouch), and CVE-2026-52656 PoC]
• https://github.com/bboe/firebreak [Python CLI to USB-unlock, root, and reflash Amazon Echo Dot (2nd gen) via amonet targets or restore stock Fire OS]

Android ROM

• https://xdaforums.com [Guide]
• https://github.com/Akipe/awesome-android-aosp [Guide]
• https://github.com/musabcel/android_rom_list [List]
• https://github.com/vm03/payload_dumper [Android OTA payload dumper]
• https://developer.android.com/studio/run/win-usb [Google USB Driver]
• http://www.miui.com/unlock/download.html [Unlocker for xiaomi]
• https://miuiver.com/miflash [MiFlash]
• https://xiaomifirmwareupdater.com [Xiaomi Firmware Updater]
• https://sourceforge.net/projects/recovery-for-xiaomi-devices/files [TWRP for xiaomi]
• https://github.com/cfig/Android_boot_image_editor [Android ROM tool]
• https://github.com/badabing2005/PixelFlasher [Android ROM tool for Pixel]
• https://github.com/ShivamXD6/ROM-Shifter [Android app for fast ROM backup, restore, migration, and post-flash tooling with Magisk, KernelSU, and APatch support]
• https://github.com/chakradhartode/flashkit [Termux:GUI pocket flasher to sideload ROMs, GSI, and recovery operations on a second Android device over OTG from a rooted host phone]
• https://github.com/Zenlua/Tool-Tree [Android ROM/APK unpack-repack toolkit for root and non-root ARM64 devices]
• https://github.com/Ctapchuk/android_bootable_recovery-OFRP [OrangeFox Recovery]

Android Device Trees

• https://github.com/MiCode/kernel_devicetree [xiaomi device trees]
• https://github.com/cupid-development/ [xiaomi device trees]
• https://github.com/PixelOS-AOSP/official_devices [PixelOS device trees]
• https://github.com/ymdzq/OFRP-device_xiaomi_mondrian [OFRP for Redmi K60 (mondrian)]
• https://github.com/flakeforever/device_xiaomi_mondrian [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]

Android Kernel Source

• https://source.android.com/docs/setup/build/building-kernels [Docs]
• https://android.googlesource.com/kernel/manifest/+refs [manifest]
• https://android.googlesource.com/kernel/manifest [manifest]
• https://android.googlesource.com/kernel/common [GKI]
• https://github.com/aosp-mirror/kernel_common [GKI]
• https://github.com/PixelOS-AOSP/manifest [An AOSP based ROM aiming to provide the best of Pixel]
• https://www.android-x86.org [X86]
• https://blissos.org [X86]
• https://github.com/MiCode/Xiaomi_Kernel_OpenSource [xiaomi kernel]
• https://github.com/xiaomi-sm8450-kernel [xiaomi kernel]
• https://github.com/Danda420/kernel_xiaomi_sm8250 [xiaomi kernel for POCO F3/F4]
• https://github.com/LowTension/android_kernel_xiaomi_sm8475 [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
• https://github.com/RooTurkk/ROOTURK-Kernel [Android 15 GKI 6.6 kernel source for POCO X7 Pro with built-in KernelSU Next, SuSFS root hiding, and game-oriented idle tuning]
• https://github.com/GrapheneOS-Archive/kernel_msm-coral [Pixel 4/4XL/4a]
• https://github.com/msnx/KernelSU-Pixel4XL [KernelSU for Google Pixel4XL]
• https://github.com/universal5433/android_kernel_samsung_universal5433 [samsung 15433]
• https://github.com/SM7325-AE/android_kernel_motorola_dubai [Moto Edge 30]
• https://github.com/mylove90/pc_ginkgo [Redmi Note 8/8T with KernelSU]
• https://github.com/fiqri19102002/android_kernel_xiaomi_sweet [Redmi Note 10 Pro]
• https://github.com/ExWhyZed9/android_kernel_gki_common_5.10 [Redmi Note 11T Pro(+) / POCO X4 GT]
• https://github.com/psavarmattas/android_kernel_oneplus_sm7250-WKSU [KernelSU for Oneplus]
• https://github.com/huawei-mediatek-devs/android_kernel_huawei_mt6761 [huawei mt6761]
• https://github.com/pascua28/android_kernel_samsung_sm7150 [samsung sm7150]
• https://github.com/gmh5225/A146B-KSU [KernelSU for SAMSUNG A14 5G (a14x)]
• https://github.com/utziacre/android_kernel_xiaomi_pipa [Xiaomi Pad 6 kernel]
• https://github.com/utziacre/android_kernel_oneplus_sm8250 [OnePlus 8/8T/8Pro/(9R?) kernel]
• https://github.com/Andrea-lyz/oppo_oplus_realme_sm8750 [Automatic kernel builder for Oppo/OnePlus/Realme Snapdragon SM8750 / MediaTek MT6991 devices]

Android Root

• https://github.com/fynks/awesome-android-root [Awesome Android Root]
• https://github.com/topjohnwu/Magisk
• https://github.com/tiann/KernelSU
• https://github.com/rathorekrishna401-NeuroVoid/ApexSU [Hardened KernelSU fork with Rust userspace, stealth hardening, and reduced attack surface for Android 12+]
• https://github.com/gmh5225/KernelSU-4.4 [Adapted for Linux Kernel 4.4 + Google GCC 4.9]
• https://github.com/BuSung-dev/Root-My-Galaxy [One-click KernelSU installer for supported Samsung Galaxy firmware via CVE-2026-43499]
• https://github.com/tbc0309/KPA-Root [Bootloader unlock, Magisk root, and restore toolkit for the KONKR Pocket Advance gaming handheld with integrity-module support]
• https://github.com/yingyangdao/honor-v10-lab [Documented Honor V10 (EMUI 9) root lab: SWTP bootloader unlock, Magisk 20.1, EdXposed, Frida Gadget workaround for Huawei SELinux limits, tcpdump, and reusable scripts]
• https://github.com/bmax121/APatch
• https://github.com/lzghzr/APatch_kpm [APatch modules]
• https://github.com/abcz316/SKRoot-linuxKernelRoot
• https://github.com/0x36/Pixel_GPU_Exploit
• https://github.com/0xCD4/SSL-bypass [Root Detection & SSL Bypass Script]
• https://github.com/Nai64/Nai64Patches [Curated Morphe patch source for Android games — root/integrity bypass, license checks, Play Integrity spoof, and SSL pinning]
• https://github.com/quarkslab/android-hardware-attestation-demo [Bypass backend hardware Key Attestation on rooted/unlocked-bootloader devices by Frida-relaying the backend challenge to a clean attestation oracle — genuine TEE/StrongBox chain, no forgery]
• https://github.com/eltavine/Duck-Detector-Refactoring [DuckDetector refactor: Android local device-integrity inspector for root tampering, runtime hooking, mount anomalies, attestation trust, and virtualization evidence]
• https://github.com/systemnb/RootSocketKit [Root privilege IPC via Unix Socket — Magisk/KernelSU/APatch compatible JNI client, reinforcement-proof, low-latency root ops (OpenProcess, ReadMemory)]
• https://github.com/AtawurRahmanTanvir/NEXUS [Root-required Kotlin/Compose Android utility for device identity spoofing, environment sanitization, kernel memory purge, and telemetry/log cleanup]

Android Kernel driver development

• https://github.com/gmh5225/AndroidDriveSignity [Bypass driver signature verification in Android kernel(ARMv8.3)]
• https://github.com/gmh5225/android-kernel-driver-template [A GKI Android kernel driver(AArch64) template]
• https://github.com/dabao1955/kernel_build_action [a action to build kernel automatically]
• https://github.com/systemnb/compile_android_driver [kade — lyenv-based Android kernel driver automation for GKI/non-GKI builds via kadeflow.yaml, ABI patching, and GitHub Actions]
• https://github.com/TheWildJames/kernel_build_scripts [kernel build scripts]
• https://github.com/orhpel/android-kernel-kit [Bash toolkit (AKK) for Android kernel build, boot.img repack, flash, and post-boot log/debug workflows]
• https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]
• https://github.com/fuqiuluo/ovo [Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping]
• https://github.com/qq703048949/event_replay [Android touch-event replay toolkit: Magisk module + command socket + gesture trace analyze/generate; supports left/right/up/down/click]

Android Kernel Explorer

• https://docs.kernel.org [Linux Kernel documentation]
• https://armv8-ref.codingbelief.com/en [ARM Architecture Reference Manual for ARMv8-A]
• https://github.com/yhnu/op7t [DIY Kernel]
• https://github.com/yabinc/simpleperf_demo [Perf]
• https://github.com/gmh5225/android_ebpf [EBPF]
• https://github.com/PShocker/Android_bpf_sys [EBPF]
• https://github.com/SeeFlowerX/stackplz [EBPF]
• https://github.com/Sh11no/eDBG [eBPF-based lightweight debugger for Android]
• https://github.com/cloudfuzz/android-kernel-exploitation [Android Kernel Exploitation]
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE [Root CVE]
• https://github.com/xmmword/dpatch [Syscall Dispatcher Patching PoC]
• https://github.com/aquasecurity/tracee [Linux Runtime Security and Forensics using eBPF]
• https://github.com/quarkslab/peetch [eBPF toolkit: dump (sniff traffic with PID/process), tls (OpenSSL key/master-secret extraction), proxy (intercept and decrypt TLS); PCAPng + Scapy; OpenSSL, IPv4, TLS 1.2]
• https://github.com/AndroidReverser-Test/Kernel-Trace [A kpm kernel module based on uprobe, capable of simultaneously hooking a large number of user address space functions]
• https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth breakpoint/hook via R^X page split, bypass self-read integrity check]
• https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]
• https://github.com/fuqiuluo/rnidbg [An Android-ARM64 kernel emulator written in Rust. (Rewrite from unidbg)]

Android Kernel Driver

• https://github.com/rogxo/kernel_hack
• https://github.com/Jiang-Night/Kernel_driver_hack
• https://github.com/systemnb/android-kernel-hacking-toolkit [Android aarch64 LKM toolkit — filecopy, hideproc, propedit, syscall_hijack; CFI bypass, kprobes, mmuhack for sys_call_table]
• https://github.com/WeiJiLab/kernel-hook-framework [Kernel inline hook framework]
• https://github.com/Poko-Apps/MemKernel [RPM]
• https://github.com/libtersafe/KPM-MemReader [KPM kernel module, cross-process memory read via ioctl hook; KernelPatch/APatch]
• https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth probe/hook, R^X page split so read sees original code while exec uses shadow; KernelPatch/APatch]
• https://github.com/Dispa1r/Integrated_kernel_module [Android ARM64 kernel module (lsdriver + wxshadow) + Zygisk injector for game RE — PTE-remap/AT S1E0R memory R/W, W^X shadow-page stealth breakpoints, HW/PTE/single-step breakpoints, do_el0_svc syscall monitor, virtual touch/gyro/GNSS; ptrace-less ELF-linker injection]
• https://github.com/bmjubairdadu/kernel-loader [Rooted Android app to match the running kernel, fetch/load .ko modules via Magisk/KernelSU/APatch with vermagic patch, insmod -f, and SELinux handling]

Android Network Explorer

• https://github.com/emanuele-f/PCAPdroid
• https://github.com/DoranekoSystems/ebpf-analyzer [PacketProxy plugin with rooted Android x86_64 eBPF TCP/syscall capture, process attribution, and optional Frida native/Java stacks—no device proxy]
• https://github.com/damanoreshkan-beep/rtl8852au-userspace [No-root userspace RTL8852AU Wi-Fi driver for Android with libusb monitor mode, channel hopping, and 802.11 frame injection]
• https://github.com/zhizhuodemao/android_proxy_mcp [Android Proxy MCP — MCP-based HTTP/HTTPS capture & analysis for AI]

Cellular / SIM

• https://github.com/tomasz-lisowski/swsim [Pure-software USIM/UICC SIM card simulator — full APDU/SIM logic without physical hardware; PC/SC via swICC reader; pairs with SIMtrace2/cardem for phone testing; GSM/LTE auth, MILENAGE, private LTE/IoT and cellular security research]

Android memory loading

• https://github.com/icculus/mojoelf
• https://github.com/lockedbyte/so_loader

IOS jailbreak

• https://github.com/KpwnZ/Def1nit3lyN0tAJa1lbr3akTool [iOS 15.7 and iOS 16.5]
• https://github.com/opa334/Dopamine [iOS 15 and 16]
• https://github.com/roothide/Dopamine2-roothide [iOS 15 and 16]
• https://github.com/felix-pb/kfd [iOS 15 and 16]
• https://github.com/0x36/weightBufs [ANE kernel r/w exploit for iOS 15 and macOS 12]
• https://github.com/jjolano/shadow
• https://github.com/gmh5225/IOS-jailbreak--Fugu15
• https://github.com/Kc57/iHide
• https://github.com/regulad/aaoracled [Jailbroken iOS App Attest oracle daemon: headless DCAppAttestService attestation/assertion API for mobile integrity-bypass research]
• https://github.com/palera1n/palera1n
• https://github.com/checkra1n
• https://github.com/opa334/TrollStore [jailed app]
• https://github.com/paradiseduo/IPAPatch [Patch iOS Apps without Jailbreak]
• https://github.com/Nirad-Maharaj/Disable-Call-Recording-BookRestore- [iOS file-exploit based tool to disable call-recording notifications without jailbreak]
• https://github.com/34306/mdc0 [CVE-2025-24203]
• https://github.com/jailbreakdotparty/dirtyZero [CVE-2025-24203]
• https://github.com/wh1te4ever/darksword-kexploit-fun [DarkSword kernel r/w exploit playground; iOS/iPadOS 17.0-26.0.1 except A19/M5; sandbox escape, process control/crash, SSV root FS overwrite, UID/GID/sticky bits, disable ASLR via launchd P_DISABLE_ASLR]
• https://github.com/wh1te4ever/xnu_1day_practice [XNU 1-day exploit practice collection — PoCs for CVE-2019 through CVE-2025 (e.g. 30883, 24153, 24257, 43510, 43520) plus Coruna/PEGruber research]
• https://github.com/wh1te4ever/humptylock [iOS 14.0–14.4.2 kernel r/w exploit app from Coruna Pendulum PE; pipe/lockf/OOL-port primitives; tested iPhone 6s–11 Pro]
• https://github.com/rooootdev/lara [WIP darksword kexploit implementation; iOS 17.1.1-26.0.1 tested; includes font overwrite, app bypass, file manager, and DirtyZero2 experiments]
• https://github.com/zeroxjf/lightsaber [iOS 18.4-18.6.2 userland exploit chain with JS injection into SpringBoard and other processes. Derived from DarkSword]
• https://github.com/staturnzz/oob_entry [iOS 3.0-10.3.4 tfp0 kernel exploit]
• https://github.com/staturnzz/momentarius [A12/A13 Apple Page Protection Layer (PPL) bypass; C; by staturnzz and Clarity]
• https://github.com/khanhduytran0/coruna [Leaked iOS exploit toolkit — WebKit chains for multiple iOS versions, partially deobfuscated]
• https://github.com/crazymind90/CVE-2026-XNU-AIO-KEVENT-UAF [XNU kern_aio.c AIO+kevent UAF; sandbox app, no entitlements; panic/double-free; iOS 26.2, patched 26.3]
• https://github.com/forcequitOS/bad_query [Experimental iOS 26.0–26.6.1 / 27.0 beta 4 sandbox-escape PoC demonstrating access to selected app, daemon, plug-in, App Group, and system-container paths]
• https://github.com/34306/usbliter8-fun [iOS 27.0 beta CFW jailbreak via usbliter8 SecureROM exploit; iPhone 11 Pro only; RP2350 PWN DFU; destructive (breaks SEP/WiFi/baseband/Apple services)]

IOS Network / Location

• https://github.com/Yu9191/wloc [Spoof Apple WiFi/cell network location (gs-loc WLOC) — MITM protobuf patch via Surge/Quantumult X/Loon/Stash/Shadowrocket; online picker + Shortcuts; GCJ-02→WGS84; no jailbreak; indoor/WiFi positioning only]
• https://github.com/mekos2772/ios-location-spoofer [iOS network location spoofer without jailbreak — MITM Apple map lookup responses; patch WiFi BSSID + CellTower coords; Surge/Shadowrocket/Loon/Stash/QX modules; motion state spoof; location-picker web UI]

IOS Memory Explorer

• https://github.com/hackcatml/kfd-explorer [iOS kernel memory explorer]
• https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
• https://github.com/jsherman212/xnuspy [an iOS kernel function hooking framework for checkra1n'able devices]
• https://gist.github.com/gmh5225/95151b245267a27b3cdbea949632c680 [DirtyZero Exp]
• https://github.com/MxIris-Reverse-Engineering/RuntimeViewer [Objective-C Runtime Viewer for macOS and iOS]
• https://github.com/vaenshine/VansonMod [TrollStore iOS memory editor with value scanning, hex editing, pointer analysis, RVA patching, signatures, scripts, and app archive management]

IOS File Explorer

• https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
• https://github.com/LaurieWired/Malimite [Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles]
• https://github.com/azw413/Glass [IPA/Mach-O: fat slice selection, Info.plist, Frameworks disassembly, CFG, xref; AArch64 native RE in the same bundle workflow as Android]

IOS App Packaging

• https://github.com/AloneMonkey/frida-ios-dump [Frida-based tool to pull decrypted IPAs from jailbroken iOS devices over USB SSH, with parallel module downloads and Frida 17 bridge support]
• https://github.com/everettjf/copyapp [Agent-driven iOS/macOS app analysis and independent rebuilds from UI, sandbox, and Frida evidence (standard and jailbroken routes)]
• https://github.com/addrianyy/ios_packager [Package and sign iOS applications]
• https://github.com/xscope0/xkvm-ios-injector [Go CLI toolbox to inject, extract, and convert iOS tweak packages for sideloaded IPAs]

Virtual Environments

• https://github.com/FBlackBox/BlackBox [Android]
• https://github.com/ServenScorpion/VirtualApp [Android]
• https://github.com/chinaapps/zn-toolbox [Host-no-root Android container VM (Twoyi fork) with built-in root and LSPosed for isolated mobile modding]
• https://github.com/wumingzhinu/VirtualMachine [Android VM app (VM Studio) with Vulkan rendering, Magisk root toggle, Xposed module support, and Google Play services for isolated mobile environments]
• https://github.com/woand/ShitJumpingVM [Android NEXTVM engine: isolated app sandboxes via Binder proxy and ActivityThread hooks, multi-instance identity spoofing, and anti-detection without root]
• https://github.com/Iviesever/rooted-android-game-vm [Windows desktop rooted Android game VM workbench with GUI/CLI management, APK install/update, root diagnostics, and private app-data export for isolated mobile testing]
• https://github.com/mandiant/flare-vm
• https://github.com/hzqst/VmwareHardenedLoader
• https://github.com/d4rksystem/VMwareCloak
• https://github.com/utmapp/UTM [Virtual machines for iOS and macOS]

Decompiler

• IDA Pro
• Binary Ninja
• https://github.com/radareorg
• https://github.com/radareorg/iaito [Official radare2 GUI (Qt5/6), focused on reverse engineering workflow]
• https://github.com/gmh5225/ghidra
• https://github.com/adam-040/Enigma [C++ reimplementation of Ghidra analytical core (SoftwareModeling + Utility): no JVM, SLEIGH + native Capstone pipelines, embeddable for AI/agents]
• https://github.com/gmh5225/retdec
• https://github.com/1-3-7/disrobe [Rust CLI suite for static recovery: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and nested application packages through an automatic pipeline]
• https://github.com/Sidenai/hyperion-disassembler [Native multi-arch disassembler & decompiler — PE/ELF/Mach-O/.NET, x86/x64/ARM64/MIPS/PPC, RTTI recovery, SSA decompiler, Lua scripting, packer detection]
• https://github.com/kernelstub/Retract [Static binary analysis workbench: PE/ELF/Mach-O, x86/x64 disasm, CFG, pseudocode, browser UI via --serve; malware triage and RE]
• https://github.com/ngwg/ceasta [Integrated disassembler, decompiler, and x64dbg-style debugger for Windows and Linux with Lua plugins and a built-in MCP server for AI-assisted binary analysis]
• https://github.com/AkashaCorporation/HikariSystem-HexCore [VS Code-based native RE IDE: Capstone/Unicorn/Remill/Helix decompilation pipeline, PE/ELF emulation, YARA/IOC/entropy, headless .hexcore_job.json automation, and agent integration]
• https://github.com/kernelstub/Cognitor [Patch Tuesday semantic diff CLI for Windows build snapshots; driver IOCTL lab, defensive patch review, disclosure workflows]
• https://github.com/azw413/Glass [Rust, GPL-3.0] Mobile-first GPU disassembler (gpui) for APK/DEX/smali and AArch64 ELF/Mach-O (Android/iOS); CFG, xref, bin/insn search, annotations, in-place patch export; CLI + MCP; free IDA alternative]
• https://github.com/Maxamedxasa/SakoREStudio [Mobile-first Android disassembler and decompiler for APK, ELF, PE, and DEX with ptrace debugger, call graph, and SakoScript plugins]
• https://github.com/Col-E/Recaf [Java]
• https://github.com/gmh5225/bytecode-viewer [Java]
• https://github.com/gmh5225/deobfuscator [Java]
• https://github.com/t1zzo/classrevive [Multi-engine Java decompiler (CFR, Vineflower, Procyon, JADX) with per-method recompile verification, obfuscation profiling, and Skidfuscator/Aidsfuscator recovery]
• https://github.com/Coldzer0/LuaDecompiler [Lua bytecode disassembler and decompiler for Lua 5.1, 5.2, 5.3, 5.4, and 5.5 binary chunks]
• https://github.com/KamiKitsune420/bgt-decomp-tools [Python toolkit to recover AngelScript structure, strings, and assets from BGT/NVGT blind-audio-game executables with identify/recover workflows]
• https://github.com/xV4L3x/hermit [Hermes bytecode (HBC) toolkit: parse, disassemble, decompile to JavaScript, and structurally patch React Native Hermes bundles with round-trip fidelity]
• https://github.com/gmh5225/binsync [Sync]
• https://github.com/gmh5225/ethersplay [EVM dissassembler]
• https://github.com/Hexorg/Ouroboros [A Symbolic-Execution Decompiler written in Rust]
• https://github.com/sefcom/oxidizer [Rust decompiler on angr — high-fidelity pseudocode from stripped binaries, enum/match/? recovery, Rust 1.39–1.93]
• https://github.com/Noelo-Lab/kuna [Agent-first decompiler in Rust, originally ported from Ghidra; CLI, WASM, and Ghidra integration; tunable for LLM-driven autonomous refinement]
• https://github.com/Noelo-Lab/decbench [DecBench — benchmark for exact decompilation: structural CFG (GED), type recovery, recompilation bytematch; angr/Ghidra/IDA/Binja + LLMs; https://decbench.com]
• https://github.com/QuesmaOrg/BinaryAudit [BinaryAudit — open-source Harbor benchmark for AI agents finding injected backdoors in stripped binaries (Ghidra/Radare2); lighttpd/dnsmasq/Dropbear/Sozu/Caddy]
• https://github.com/NeverSight/NeverD [The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM]

IDA themes

• https://github.com/gmh5225/dp701 [Dark theme for IDA Pro]
• https://github.com/gmh5225/ida-dark-plus [Dark+ Theme]
• https://github.com/gmh5225/long_night
• https://github.com/gmh5225/IdaThemer
• https://github.com/PoP-Lin/IDAPro-MuiLs [Modern Windows UI theme plugin for IDA Pro 9.3 with scoped Qt styling, live preview, and persistent appearance settings]

IDA Plugins

• https://github.com/gmh5225/ida-plugins [List of IDA Plugins]
• https://github.com/gmh5225/idaplugins-list [List of IDA Plugins]
• https://github.com/HexRaysSA/plugin-repository [Official Hex-Rays JSON manifest and sync pipeline for plugins.hex-rays.com and the IDA Plugin Manager]
• https://github.com/fr0gger/awesome-ida-x64-olly-plugin [Curated list of IDA, x64dbg, Ghidra, GDB, and OllyDbg plugins]
• https://github.com/gmh5225/idawilli [IDA Pro resources, scripts, and configurations]
• https://github.com/gmh5225/idasdk-collection/tree/master [IDA SDK]
• https://github.com/gmh5225/ida-sdk [IDA SDK]
• https://github.com/gmh5225/IDASkins [Skins]
• https://github.com/gmh5225/ida-nord-theme [Skins]
• https://github.com/giladreich/ida_migrator [Migrate Database]
• https://github.com/nevergiveupcpp/oh-my-dump [IDA Pro 9.x plugin to export and import names, types, comments, colors, and breakpoints across IDBs for different builds of the same x86/x64 binary]
• https://github.com/gmh5225/NtRays [Windows Kernel Enhance]
• https://github.com/gmh5225/ida_bitfields [Windows Kernel Enhance]
• https://github.com/gmh5225/DriverBuddyReloaded [Windows Kernel Analysis]
• https://github.com/gmh5225/IDA2Obj [COFF Relink]
• https://github.com/synacktiv/dotNIET [Import .NET Symbol]
• https://github.com/aliyunav/Finger [Recognizing Function By Cloud]
• https://github.com/gmh5225/FindFunc [Recognizing Function By Pattern]
• https://github.com/kirovgrad/Renamaida [IDA Pro plugin to build JSON instruction signatures from debug libraries and rename unknown library functions via Jaro-Winkler matching]
• https://github.com/FPSZ/ida-better-information [Single-file IDA Pro plugin and CLI to detect C runtime on stripped binaries, apply FLIRT, rename libc calls, and annotate MMX/SSE math in Hex-Rays (undoable, offline).]
• https://github.com/FPSZ/ida-better-reverse [IDA Pro plugin and CLI for stripped static ELF: glibc/musl build detection, link-aware FLIRT naming, Hex-Rays libc/syscall notes, variable data-flow views, and zoomable call flowcharts]
• https://github.com/gmh5225/sigmakerex [Signature Maker]
• https://github.com/gmh5225/IDA-Pro-SigMaker [Signature Maker]
• https://github.com/mahmoudimus/ida-sigmaker [Zero-dependency IDA Pro 9+ cross-platform signature maker with optional SIMD speedups]
• https://github.com/gmh5225/ida-sigmaker [Signature Maker]
• https://github.com/gmh5225/FakePDB [PDB Generation From IDA]
• https://github.com/gmh5225/Ponce [Symbolic Execution]
• https://github.com/gmh5225/ttddbg [Time Travel Debugging]
• https://github.com/gmh5225/LazyIDA [LazyIDA]
• https://github.com/gmh5225/HappyIDA [Hex-Rays decompiler utilities: parameter labeling, SEH, Rust strings]
• https://github.com/nologic/idaref [IDA Pro plugin showing full x86-64/ARM/MIPS instruction reference at the cursor]
• https://github.com/danigargu/deREferencing [IDA Pro plugin adding dereferenced register and stack views with colors for x86, ARM, and MIPS debugging]
• https://github.com/gmh5225/ida-function-string-associate [IDA 9.X: auto-generate function comments from string literals]
• https://github.com/gmh5225/qsynthesis [Greybox Synthesizer geared for deobfuscation of assembly instructions]
• https://github.com/gmh5225/ida_medigate [RTTI]
• https://github.com/gmh5225/findyara-ida [Yara]
• https://github.com/gmh5225/ida_vmware_windows_gdb [IDA+VMWARE+GDB]
• https://github.com/gmh5225/ida_bochs_windows [IDA+BOCHS]
• An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts
• https://github.com/gmh5225/efiXplorer [UEFI firmware]
• https://github.com/Accenture/protobuf-finder [Protobuf]
• https://github.com/gmh5225/golang_loader_assist [GO Reversed]
• https://github.com/gmh5225/GhidraDec [Ghidra Decompiler]
• https://github.com/siesta/mcore-decompiler [IDA Pro 9.4 plugin decompiling Motorola M·CORE firmware into structured C pseudocode with stack-frame and control-flow recovery]
• https://github.com/gmh5225/EasyRe [Trace Execution]
• https://github.com/gmh5225/ida_ps5_elf_plugin [PS5 elf loader]
• https://github.com/gmh5225/tenet [Execution Traces]
• https://github.com/gmh5225/Tenet-IDA9.0 [Execution Traces]
• https://github.com/gmh5225/frinet [Frida-based tracer]
• https://github.com/gmh5225/findcrypt-yara [Find crypto constants]
• https://github.com/gmh5225/VMAttack [VMAttack PlugIn for IDA Pro]
• https://github.com/gmh5225/sk3wldbg [Unicorn]
• https://github.com/gmh5225/Classy [Manage classes]
• https://github.com/gmh5225/ida_names [Renames pseudocode windows with the current function name]
• https://github.com/helpsystems/turbodiff [diff]
• https://github.com/joxeankoret/diaphora [diff]
• An IDAPython module for way more convienent way to Reverse Engineering iOS kernelcaches
• https://gitlab.com/eshard/d810 [Deobfuscate code at decompilation time by modifying IDA Pro microcode]
• https://github.com/CKCat/d810 [Deobfuscate code at decompilation time by modifying IDA Pro microcode]
• https://github.com/w00tzenheimer/d810-ng [D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
• https://github.com/airbus-seclab/AutoResolv [Resolves functions imported from external libraries]
• https://github.com/snare/ida-efiutils [EFI binaries]
• https://github.com/JusticeRage/Gepetto [ChatGPT]
• https://github.com/MayerDaniel/ida_gpt [ChatGPT]
• https://github.com/mahaloz/DAILA [ChatGPT]
• https://github.com/ke0z/VulChatGPT [ChatGPT]
• https://github.com/WPeace-HcH/WPeChatGPT [ChatGPT]
• https://github.com/lzyddf/IDA_Plugin_PCodeGPT [ChatGPT]
• https://github.com/deadeert/EWS [Emulation]
• https://github.com/patois/genmc [Display Hex-Rays Microcode]
• https://github.com/RolfRolles/HexRaysDeob [Hex-Rays Microcode]
• https://github.com/KasperskyLab/hrtng [IDA Pro plugin for decryption, deobfuscation, patching, and Hex-Rays transforms]
• https://github.com/HexRaysSA/goomba [Simplify MBA]
• https://github.com/es3n1n/ida-wakatime-py [WakaTime integration for IDA Pro]
• https://github.com/senator715/IDA-Fusion [Fast Signature scanner & creator]
• https://github.com/cellebrite-labs/PPLorer [Resolves PPL calls to the actual underlying PPL function]
• https://github.com/kweatherman/ida_missinglink [Fills in missing indirect CALL & JMP target information]
• https://github.com/yubie-re/ida-jm-xorstr-decrypt-plugin [Attempts to decrypt JM Xorstr in some x64 binaries]
• https://github.com/piat0n/ida-plugin-strings-decryptor-anogs [IDA Pro plugin to auto-detect and decrypt obfuscated strings in Tencent Anogs/ACE (TSS) libraries for mobile games (ARM32/ARM64, PUBG Mobile profiles)]
• https://github.com/timetravelthree/IDARustDemangler [Rust Demangler & Normalizer]
• https://github.com/gmh5225/ida-find-.data-ptr [.data ptr lookup script]
• https://github.com/repnz/ida-plugins [Register Cross References]
• https://github.com/lstaroth/AntiXorstr [Anti Xorstr]
• https://github.com/SentineLabs/AlphaGolang [Analyzing Golang Binaries]
• https://github.com/tmr232/Sark [IDAPython Made Easy]
• https://github.com/govcert-ch/ConfuserEx_IDAPython [Deobfuscation script for ConfuserEx]
• https://github.com/sonyps5201314/pdb [PDB plugin with enhance and bugfix]
• https://github.com/Coldzer0/IDA-For-Delphi [IDA-For-Delphi]
• https://github.com/AntonKukoba1/BetterCallStack [Improve call stack]
• https://github.com/za233/IDADeflat [deflat]
• https://github.com/RomanRybachek/Copy_RVA [Copy RVA]
• https://github.com/RevEngAI/reai-ida [RevEng.AI]
• https://github.com/gaasedelen/microavx [AVX Lifter]
• https://github.com/thalium/ida_kmdf [IDA kmdf]
• https://github.com/zengfr/XrefsExt [XrefsExt plugin]
• https://github.com/TheCruZ/FindXrefs [IDA Pro plugin that scans large binaries for missing string/data xrefs and materializes undefined bytes so cross-references appear]
• https://github.com/seifreed/xrefgen [IDA Pro cross-reference generator for indirect refs and complex control-flow, with XRefer-compatible output]
• https://github.com/sterrasec/genpatch [Python script for patching binary]
• https://github.com/frasten/ida-genpatch [IDA Pro plugin that exports grouped patched-byte sequences and disassembly context for building external patchers]
• https://github.com/AzzOnFire/yarka [YARA signature creation]
• https://github.com/VirusTotal/vt-ida-plugin [VirusTotal plugin]
• https://github.com/crifan/AutoRename [Auto rename symbol]
• https://github.com/LAC-Japan/IDA_Plugin_AntiDebugSeeker [Extract anti-debugging]
• https://github.com/cseagle/blc [Integrate Ghidra's decompiler]
• https://github.com/Goatman13/ps2_ida_vu_micro [Find and disassembly vu microcode in ps2 executables]
• https://github.com/Goatman13/spu2c [IDA plugin that annotates PlayStation 3 Cell SPU opcodes as readable C-style comments]
• https://github.com/arizvisa/ida-minsc [Functional DWIM interface]
• https://github.com/wINfOG/IDA_Easy_Life [Deobfuscation]
• https://github.com/senko37/yarascan-ida [Scan file with Yara rules]
• https://github.com/SamuelTulach/ida-unity-pdb-downloader [Unity PDB Downloader]
• https://github.com/TrungNguyen1909/aarch64-sysreg-ida [A IDA plugin to show ARM MSRs nicely]
• https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
• https://github.com/williballenthin/ida-settings [Python library and GUI plugin for fetching and editing IDA Pro plugin configuration via Hex-Rays HCLI/ida-config.json]
• https://github.com/AlonSoko/ida-plugin-lens [IDA Pro plugin for Edit > Plugins: icons, grouping, version labels, and hcli-driven update status]
• https://github.com/3641397194-wq/ida-zh-cn [Runtime Simplified-Chinese UI plugin for IDA Pro 9.x that localizes menus and dialogs without patching IDA binaries]
• https://github.com/gmh5225/IDA-MapSymbolParser [IDA Map File Symbol Renamer]
• https://github.com/gmh5225/IDA-KallsymsSymbolRenamer [IDA kallsyms Renamer]
• https://github.com/XMCVE/import-kallsyms [IDA Pro Plugin to import /proc/kallsyms for Linux Kernel]
• https://github.com/tomrus88/OpenLumina [Allows connecting to third party Lumina servers]
• https://github.com/stuxnet147/IDA-Assistant [Claude-3 models assistant]
• https://github.com/goseungduk/CE_Tracer-IDA [CheatEngine Value Tracer of IDA]
• https://github.com/binarly-io/idapcode [Displaying the P-Code for the current function]
• https://github.com/ElvisBlue/emotet-deobfuscator [IDA plugin to deobfuscate emotet CFF]
• https://github.com/threatlabz/pikabot-deobfuscator [Deobfuscating Pikabot's strings using RC4 and AES]
• https://github.com/Pycatchown/ClassMaker [IDA plugin to make classes automatically]
• https://github.com/airbus-cert/comida [An IDA Plugin that help analyzing module that use COM]
• https://github.com/Sandspeare/ida2llvm [Lifting IDA Microcode into LLVM IR]
• https://github.com/crtdll/ida-gameguard-str-dec [GameGuard String Decryption]
• https://github.com/kkent030315/IDARustCargo [Displaying potentially installed Cargo dependencies]
• https://github.com/dNop90/dOffset [IDA Pro and Cheat Engine to get the offset of the current module]
• https://github.com/sneakyevil/ida_functioncolor [IDA Plugin to colorize function definition in pseudocode]
• https://github.com/apkunpacker/IDA-Gepetto [IDA plugin which queries Local language models]
• https://github.com/Jackiemin233/Gemini-Genius [IDA python 3 plugin and binary file similarity comparison]
• https://github.com/lj94093/IDAAndroidBreakpoint [IDA plugin aid to set android so breakpoint]
• https://github.com/jonpalmisc/ida_screenshot [High-resolution screenshot capture plugin for IDA Pro]
• https://github.com/JANlittle/IDARustHelper [Small rust binary analysis helper for IDA]
• https://github.com/mefistotelis/ida-pro-loadmap [Plugin for IDA Pro disassembler which allows loading .map files]
• https://github.com/OALabs/hashdb-ida [HashDB API hash lookup plugin for IDA Pro]
• https://github.com/Vu1nT0tal/firmeye [IoT]
• https://github.com/sean2077/big5-decode-ida [IDA Plugin for decoding bytes as big5]
• https://github.com/Vis-Wing/Binoculars [Binoculars is an IDA PRO plugin with an integrated AI interface]
• https://github.com/Reodus/CBS [IDA Plugin to set custom breakpoints on mnemonics]
• https://github.com/matteyeux/IDArling [IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays]
• https://github.com/xsslize/idarem [IDA Pro plugin that serves disassembly, Hex-Rays pseudocode, graphs, and live sync over HTTP to a React browser client]
• https://github.com/richor1042/IDAFuncOutline [optimize the readability of decompiled code for iOS ARM64 binaries]
• https://github.com/Dump-GUY/IDA_PHNT_TYPES [Converted phnt to IDA TIL, IDC (Hex-Rays)]
• https://github.com/Mrack/DeObfBR [libtprt.so]
• https://github.com/janisslsm/ida-ps4-helper [A helper plugin for PS4 module loader]
• https://github.com/Antelcat/ida_copilot [ChatGPT Agent analyses your IDA pseudocode]
• https://github.com/crytic/ida-evm [IDA Processor Module for the Ethereum Virtual Machine (EVM)]
• https://github.com/Duntss/IDA-ZVM-Disassembler [Zeus VM bytecode processor + loader for IDA Pro, from OALabs ZVM]
• https://github.com/NoneShell/IDAComments [a IDA plugin helps you to manage your IDA Comments]
• https://github.com/emoose/idaxex [Xbox360/Xenon loader plugin for IDA 9]
• https://github.com/Goatman13/ida_vmx128_helper [IDA plugin that corrects misinterpreted VMX128 A-register operands in Xbox 360 (PowerPC Xenon) binaries during disassembly]
• https://github.com/junron/auto-enum [automatically identify and set enums for standard functions]
• https://github.com/ViRb3/swift-ida [IDA plugin to aid with Swift reverse engineering]
• https://github.com/Krietz7/IDA-DataExportPlus [a IDA Pro plugin to export data better]
• https://github.com/harlamism/IdaClu [For grouping similar functions]
• https://github.com/eset/DelphiHelper [help the analysis of x86/x86_64 binaries written in Delphi]
• https://github.com/milankovo/YaraVM [IDA processor for loading and disassembling compiled yara rules]
• https://github.com/cellebrite-labs/LabSync [An IDA plugin that can be used to partially synchronize IDBs between different users reversing the same binaries]
• https://github.com/xp987/symbridge [Live IDA ↔ x64dbg annotation and type synchronization bridge]
• https://github.com/cellebrite-labs/FunctionInliner [An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining]
• https://github.com/herosi/PyClassInformer [RTTI Parsing IDA plugin]
• https://github.com/0xGotcha/XrefXpert [An advanced cross-reference navigation tool for IDA Pro]
• https://github.com/TKazer/ScyllaHide-For-IDA9.0RC [ScyllaHide-For-IDA9]
• https://github.com/mrexodia/ida-pro-mcp [MCP for IDA pro]
• https://github.com/TechMecca/kiln-ida [IDA Pro 9.1 Streamable HTTP MCP plugin exposing functions, xrefs, debugger control, and optional IDB edits to AI clients]
• https://github.com/bkerler/ida_rpc [JSON-RPC daemon for agent-assisted RE: decompile, disassemble, xrefs, rename, types, patches; headless & GUI]
• https://github.com/saileaxh/iida-mcp [Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
• https://github.com/MeroZemory/ida-multi-mcp [Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
• https://github.com/MxIris-Reverse-Engineering/ida-mcp-server [MCP for IDA pro]
• https://github.com/taida957789/ida-mcp-server-plugin [MCP for IDA pro]
• https://github.com/fdrechsler/mcp-server-idapro [MCP for IDA pro]
• https://github.com/rand-tech/pcm [MCP for IDA pro]
• https://github.com/gmh5225/ida_export_functions [Export IDA Pro Function List to a Specified Path (Markdown Format)]
• https://github.com/L4ys/IDA-WPP-Remover [Remove WPP calls from hexrays decompiled code]
• https://github.com/0xdea/augur [Augur is a blazing fast IDA Pro headless plugin that extracts strings and related pseudo-code from a binary file]
• https://github.com/0xdea/rhabdomancer [IDA Pro headless plugin: locate calls to potentially insecure API functions; tiered badness, bookmarks, backtrace audit paths; idalib/Rust]
• https://github.com/DennyDai/headless-ida [Run IDA scripts headlessly]
• https://github.com/cpkt9762/ida-cli [Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib]
• https://github.com/trailofbits/idac [IDA Pro CLI for agents and humans: Unix socket to live GUI or headless idalib, structured JSON, batch/preview/dry-run, bundled agent skill; not MCP — early alpha]
• https://github.com/cellebrite-labs/ida-bridge [Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
• https://github.com/P4nda0s/IDA-NO-MCP [IDA plugin + Rust/idalib CLI: export Hex-Rays decompilation, disasm fallback, strings/imports/exports/memory as files for AI IDEs without MCP]
• https://github.com/JustasMasiulis/ida_buddy [Windbg-style idalib CLI (idb) for agents: persistent headless worker per database, compact stdout, disasm/decompile/xrefs/types and DB mutations with undo]
• https://github.com/gilboz/ida_kernelcache_ng [An IDA Plugin for analyzing iOS kernelcaches]
• https://github.com/mahmoudimus/ida-taskr [IDA Taskr is a pure Python library for IDA Pro related parallel computing]
• https://github.com/sigwl/AiDA [An AI-powered assistant for IDA 9.0+ to accelerate reverse engineering of C++ games]
• https://github.com/alexhude/FRIEND [FRIEND is an IDA plugin created to improve disassembly and bring register/instruction documentation right into IDA View]
• https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]
• https://github.com/SamuelTulach/unxorer [Yet another IDA Pro/Home plugin for deobfuscating stack strings]
• https://github.com/loyaltypollution/ida2llvm [IDA2LLVM - Dynamic Binary Lifting IDA code to LLVM IR]
• https://github.com/GAMMACASE/PltPatcher [Patches PLT sections when IDA fails to do so]
• https://github.com/yoavst/ida-ios-helper [Plugin to ease reversing iOS projects]
• https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
• https://github.com/milankovo/ida_enums_helper [IDA Enums Helper Plugin]
• https://github.com/axelmierczuk/tenrec [A headless, extendable, multi-session, IDA Pro MCP framework]
• https://github.com/blacktop/ida-mcp-rs [Headless IDA Pro MCP server]
• https://github.com/kweatherman/yara4ida [Unofficial YARA IDA Pro plugin]
• https://github.com/Berk000x/BinaryLens [An IDA plugin that uses LLM to speed up binary analysis]
• https://github.com/jtang613/IDAssist [AI-powered RE plugin for IDA Pro: LLM function explanation, semantic knowledge graph, RAG, MCP integration]
• https://github.com/ackwrap/ida-pro-agent [IDA Pro 9.4 Windows plugin with built-in AI console and MCP gateway for pseudocode analysis, bounded caller tracing, guard-evidence extraction, and preview/apply/rollback IDB ChangeSets]
• https://github.com/pgarba/ida-llm-explainer [Local llama.cpp IDA plugin for function explain/rename/struct inference with human-in-the-loop accept]
• https://github.com/CyberSecurityUP/DriverVuln-Analyzer-IDA-Plugin [Driver Vuln Analyzer]
• https://github.com/ssmugabi/IDAPlugins [Integrate essential IDA Pro plugins for enhanced functionality, including deobfuscation, binary diffing, and custom cryptography support]
• https://github.com/momo5502/patch-finder [IDA plugin to find patched memory]
• https://github.com/HexRaysSA/ida-cyberchef [A Qt-based CyberChef interface designed for malware analysis workflows, particularly in IDA Pro]
• https://github.com/idkhidden/DrawIDA [Lightweight whiteboard plugin for IDA that allows reverse engineers to sketch and brainstorm directly inside IDA]
• https://github.com/hyuunnn/ida-slides [Present live RE with Marp/Slidev decks docked in IDA; @name/@addr tokens jump disasm/pseudocode, embed decompiled lines, unresolved-ref lint]
• https://github.com/rem0obb/rtti-parser [IDA script to parse RTTI information in executable support for IDA 9.2]
• https://github.com/19h/ida-semray [High-performance, AI-driven semantic analysis for the IDA Pro decompiler]
• https://github.com/K4ryuu/IDA-VTableExplorer [C++ virtual table detection and annotation tool for IDA Pro 9.x]
• https://github.com/oxiKKK/ida-vtable-tools [IDA 9.X plugin for vtable ops: dump C++ interface skeleton (.hpp), rename with class prefix, set this pointer type, show slot index/offset]
• https://github.com/19h/chernobog [A Hex-Rays IDA Pro plugin for deobfuscating binaries protected with the Hikari LLVM obfuscator]
• https://github.com/danielplohmann/mcrit-plugin [A plugin to use MCRIT from IDA Pro]
• https://github.com/dyussekeyev/ida-spotlight [Workflow-centric function triage and prioritization plugin for IDA Pro]
• https://github.com/s3rg0x/AIMachDec [AIMachDec is an IDA plugin for Apple AARCH64/ARM64 binaries that utilizes LLMs to translate assembly functions into readable pseudo-code in C, Objective-C, or Swift]
• https://github.com/not1cyyy/Kiroshi [An IDA Pro Plugin to detect common Anti-Cheat Artifacts]
• https://github.com/HexRaysSA/ida-claude-code-plugins [IDA Claude Code Plugins]
• https://github.com/stolevchristian/LUDA [Lua scripting plugin for IDA Pro]
• https://github.com/allthingsida/idasql [Interface with IDA in SQL via live virtual tables]
• https://github.com/a1ext/auto_re [IDA PRO auto-renaming plugin with tagging support]
• https://github.com/SymbioticSec/ida-security-scanner [A security-focused code scanner for IDA Pro]
• https://github.com/cristeigabriela/IDAFind [Ctrl+F search support for Pseudocode windows]
• https://github.com/thalium/symless [IDA Pro plugin that helps reconstruct structures]
• https://github.com/buzzer-re/Rikugan [A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI]
• https://github.com/buzzer-re/ToCode [Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries; supports IDA Pro and radare2]
• https://github.com/guheng-re/unflat [unflattener]
• https://github.com/Dump-GUY/ApplyCalleeTypeEx [ApplyCalleeType reborn for IDA Pro 9.3 — apply function prototype to indirect CALL for correct decompiler/disasm; IDA 8.x–9.3+]
• https://github.com/allthingsida/idacpp [A C++ REPL for IDA Pro / IDA C++ SDK]
• https://github.com/milankovo/ida-search [An IDA Pro 9.x plugin that brings 010 Editor-style type-aware binary search to IDA]
• https://github.com/CSIT-SG/AETHER [An AI-powered reverse-engineering copilot for assisting tedious malware analysis in IDA Pro]
• https://github.com/thatskriptkid/re-harness [OpenCode agent harness for Qwen 27B/35B with read-only IDA 9.3/IDASQL PE static-analysis tools; NeverD/LLVM lift→O3→redecompile fallback for oversized functions; malware analysis; macOS/Linux]

IDA Signature Database

• https://github.com/push0ebp/sig-database
• https://github.com/AlonSoko/karta-x-configs [Release-packaged Karta-x library identification configs (GCC/clang/MSVC) for matching and naming embedded open-source functions in game and native binaries]
• https://github.com/cpkt9762/solana-sbpf-rlib [Solana sBPF rlib files for IDA Pro / Ghidra / Binary Ninja signature generation]

Binary Ninja Plugins

• https://github.com/Vector35/official-plugins
• https://github.com/Vector35/community-plugins
• https://github.com/FuzzySecurity/BinaryNinja-Themes [Theme]
• https://github.com/EliseZeroTwo/SEH-Helper [SEH Helper]
• https://github.com/Vector35/tanto [Slices Functions]
• https://github.com/ergrelet/triton-bn [Triton]
• https://github.com/google/binexport [BinDiff]
• https://github.com/Pusty/BinaryNinjaPlugins
• https://github.com/borzacchiello/seninja [Symbolic Execution]
• https://github.com/yellowbyte/opaque-predicates-detective
• https://github.com/ex0dus-0x/fuzzable [Fuzzer]
• https://github.com/jmprdi/binja-division-deoptimization [Division and Modulo Deoptimizer]
• https://github.com/Vector35/OpaquePredicatePatcher [Opaque Predicate Patcher]
• https://github.com/jmprdi/binja-division-deoptimization [Division and Modulo Deoptimizer]
• https://github.com/mrphrazer/obfuscation_detection [Collection of scripts to pinpoint obfuscated code]
• Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
• https://github.com/seeinglogic/ariadne [Graph Analysis]
• https://github.com/skr0x1c0/binja_kc [Plugin for loading MachO kernelcache and dSYM files]
• https://github.com/Vector35/workflow_objc [Objective-C]
• https://github.com/apekros/binja_sigmaker [Create and find signatures]
• https://github.com/joren485/bndb2pat [Binary Ninja plugin to generate IDA Pro FLIRT .pat pattern files for signature libraries]
• https://github.com/dayzerosec/AMD-SP-Loader [AMD-SP or PSP firmware]
• https://github.com/WhatTheFuzz/binaryninja-openai [Integrates OpenAI]
• https://github.com/dzervas/frinja [Frida plugin for Binary Ninja]
• https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
• https://github.com/ergrelet/themida-spotter-bn [Detect Themida/WinLicense and Code Virtualizer's obfuscated code locations]
• https://github.com/ahaggard2013/binaryninja-ollama [Binary Ninja Ollama]
• https://github.com/0xricksanchez/Shellcoder [BinaryNinja Shellcoder Plugin]
• https://github.com/pd0wm/binaryninja-pcode [This plugin serves as a bridge between Binary Ninja and Ghidra's disassembler]
• https://github.com/mutinylaboratories/ghidra_svr_bridge [Binary Ninja plugin that bidirectionally syncs symbols, comments, types, and analysis with a Ghidra Server repository via a Java bridge]
• https://github.com/zhuzhu-Top/deobf [libtprt.so]
• https://github.com/junron/auto-enum [automatically identify and set enums for standard functions]
• https://github.com/otter-sec/bn-ebpf-solana [Binary Ninja plugin for Solana eBPF]
• https://github.com/fosdickio/binary_ninja_mcp [MCP for Binary_Ninja]
• https://github.com/Invoke-RE/binja-lattice-mcp [MCP for Binary_Ninja]
• https://github.com/mrphrazer/obfuscation_analysis [Binary Ninja plugin to analyze and simplify obfuscated code]
• https://github.com/ScriptWare-Software/native-predicate-solver [Binary Ninja plugin for removing opaque predicates]
• https://github.com/MZHeader/binja-d810 [Binary Ninja plugin inspired by D-810/d810-ng that simplifies MBA obfuscation, opaque predicates, and OLLVM-style control-flow flattening in MLIL/HLIL]
• https://github.com/buzzer-re/Rikugan [A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI]
• https://github.com/banteg/bn [binary ninja cli for agents]
• https://github.com/seekbytes/ptxNinja [Binary Ninja plugin for reverse engineering PTX — CUDA GPU virtual ISA]

Ghidra Plugins

• https://github.com/AllsafeCyberSecurity/awesome-ghidra [List]
• https://github.com/CENSUS/ghidra-frida-hook-gen
• https://github.com/mitros123/DragonHook [Ghidra plugin exposing GhidraDB queries to Frida at runtime for dynamic call-target resolution, backtraces, and live xref/comment updates]
• https://github.com/Gekkio/GhidraBoy [Sharp SM83 / Game Boy extension for Ghidra]
• https://github.com/PSI-Rockin/ghidra-teak-dsp [Ghidra SLEIGH extension and CDC/DSP1 loader for Nintendo 3DS/DSi XpertTeak DSP firmware (Home Menu, Sound App disassembly)]
• https://github.com/CUB3D/ghidra-hexagon-sleigh [Ghidra SLEIGH extension for Qualcomm Hexagon QDSP6 decompilation and analysis]
• https://github.com/thixotropist/ghidra_decompiler_plugins [Loadable Ghidra decompiler plugins and rules that simplify RISC-V vector-instruction analysis in the decompiler window]
• https://github.com/sengi12/ghidra-hexEditor [Dockable hex editor Ghidra plugin for byte-level memory editing during RE]
• https://github.com/ntdlll/Scalpel [Ghidra extension for dockable dark-mode hex/ASCII viewing, wildcard hex search, and inline byte patching during RE]
• https://github.com/Battelle/cantordust [Ghidra extension for interactive binary visualization—trigram clouds, metric maps, and bitmap views to aid reverse engineering]
• https://github.com/fmagin/ghidra-openai [ChatGPT]
• https://github.com/securityjoes/ThreatResearch [ChatGPT]
• https://github.com/evyatar9/GptHidra [ChatGPT]
• https://github.com/moyix/gpt-wpre [ChatGPT]
• https://github.com/pudii/gba-ghidra-loader [GameBoy]
• https://github.com/MEhrn00/Ghidra_COFFParser [COFF]
• https://github.com/ghidragolf/ghidra_scripts [Scripts]
• https://github.com/PAGalaxyLab/ghidra_scripts [Scripts]
• https://github.com/TrackAndTruckDevs/SPF_GhidraPatternHelper [Ghidra script to generate and search byte signatures with SPF-style templates for ATS/ETS2 plugin RE]
• https://github.com/danbrodsky/GFred [Command Palette]
• https://github.com/Nalen98/AngryGhidra [Use angr in Ghidra]
• https://github.com/overkazaf/Ponce4Ghidra [Interactive symbolic execution Ghidra plugin with angr and Z3 — symbolize inputs, set find/avoid targets, and solve constraints from the decompiler UI]
• https://github.com/overkazaf/D810G [Ghidra deobfuscation framework for OLLVM/Tigress CFF, MBA (Z3), opaque predicates, BCF, strings, and VM devirtualization; CLI and analyzer plugin]
• https://github.com/justfoxing/ghidra_bridge [Python 3 bridge to Ghidra's Python scripting]
• https://github.com/GalaxyBatMan111/dsh-plugins [DSH plugin bundle with PyGhidra Ghidra bridge for binary import, decompilation, strings, and xrefs]
• https://github.com/Cristallin2006/ghidra-skill-for-dsh [dsh agent skill family: Ghidra headless RPC daemon plus seven RE scenarios (triage, unpack, static, vuln audit, dynamic, traffic, Android APK)]
• https://github.com/spix18/dsh-ghidra [DSH Ghidra bridge plugin with 219 agent tools for import, decompile, xrefs, call graphs, memory edits, and malware triage via PyGhidra and MCP]
• https://github.com/atlas0fd00m/viv-ghidra-decompiler [Vivisect extension bridging symbolik analysis to a headless Ghidra backend for decompiled C pseudocode]
• https://github.com/0xeb/libghidra [Typed API for Ghidra program databases from C++/Python/Rust; functions, types, memory, decompiler; LibGhidraHost HTTP extension or offline Sleigh backend]
• https://github.com/astrelsky/GhidraOrbis [Orbis OS specific software and file formats]
• https://github.com/astrelsky/Ghidra-Cpp-Class-Analyzer [C++ Class and Run Time Type Information Analyzer]
• https://github.com/Washi1337/ghidra-nativeaot [Ghidra analyzer/UI plugin for reversing .NET Native AOT binaries (type hierarchy, frozen objects)]
• https://github.com/DMaroo/GhidRust [Rust decompiler]
• https://github.com/Comsecuris/gdbghidra [GDB session]
• https://github.com/radareorg/r4ghidra [Ghidra extension with radare2-style REPL and r2pipe/r2web integration for cross-tool binary analysis]
• https://github.com/mfthomps/RESimGhidraPlugins [Ghidra Debugger plugins for the RESim reverse-engineering simulator (Simics/gdb integration)]
• https://github.com/hyuunnn/Hyara [Yara]
• https://github.com/TorgoTorgo/ghidra-findcrypt [Ghidra analyzer that locates and labels cryptographic constants]
• https://github.com/Deatty/Ghidra-Obfuscation-Detection [Detect obfuscated/complex code]
• https://github.com/Marisa-Chan/GhidrOrean [Ghidra Python scripts: Oreans VM (Themida/Code Virtualizer) DeVirt — Deathway Unvirtualizer reimplementation; CISC/TIGER]
• https://github.com/advanced-threat-research/GhidraScripts [Some scripts]
• https://github.com/fuzzypickles14/BetterStringAnalyzer [A better string analyzer for Ghidra]
• https://github.com/partoftheworld/ghidrapy_functionstringassociate [Ghidra script that associates string literals with functions as comments, mirroring IDA FunctionStringAssociate]
• https://github.com/clearbluejar/ghidriff [Python Command-Line Ghidra Binary Diffing Engine]
• https://github.com/MISP/bsimvis [Ghidra BSim-based binary similarity, function diffing, and family clustering with API and web UI]
• https://github.com/Katharsas/ghidra-struct-importer [Struct Importer]
• https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
• https://github.com/astrelsky/GhidraGradlePlugin [Gradle]
• https://github.com/jtang613/GhidrAssist [An LLM extension for Ghidra to enable AI assistance in RE]
• https://github.com/keshav0045/stripped-binary [Predict stripped-binary function names from Ghidra decompiler output (dataset, kNN/LoRA models, FastAPI service, Ghidra plugin)]
• https://github.com/RevEngAI/plugin-ghidra [RevEng.AI Ghidra plugin for binary similarity, function renaming, and AI-assisted reverse engineering]
• https://github.com/DSecurity/efiSeek [Ghidra analyzer for UEFI firmware]
• https://github.com/LaurieWired/GhidraMCP [MCP for Ghidra]
• https://github.com/Rantanen/ghidra-minidump-loader [Windows Minidump loader for Ghidra]
• https://github.com/andrew-hoffman/ghidra-vxd-tools [Ghidra Jython scripts to annotate Windows 9x VxD INT 20h calls in legacy device drivers]
• https://github.com/jtang613/GhidrAssistMCP [An MCP extension for Ghidra]
• https://github.com/bethington/ghidra-mcp [Ghidra MCP server/plugin with 200+ tools for AI-assisted reverse engineering]
• https://github.com/ant4g0nist/pyre [Ghidra decompiler in your browser]
• https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
• https://github.com/westfox-5/GhidraMetrics [A Ghidra plugin for native code metrics]

Radare Plugins

• https://github.com/radareorg/r2ai [LLM-based reversing for radare2]
• https://github.com/radareorg/radius2 [Fast binary emulation and symbolic execution framework using radare2]
• https://github.com/seifreed/r2SMT [Rust SMT-assisted opaque-predicate deobfuscator and symbolic-analysis toolkit for radare2]
• https://github.com/radareorg/r2garlic [Garlic DEX/Dalvik decompiler plugin for radare2]
• https://github.com/seifreed/r2morph [A metamorphic binary transformation engine based on r2pipe and radare2]
• https://github.com/buzzer-re/ToCode [Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries; supports IDA Pro and radare2]

Windbg Plugins

• https://github.com/comaeio/SwishDbgExt
• https://github.com/lowleveldesign/comon [Trace COM]
• https://github.com/bruce30262/TWindbg [PEDA-like debugger UI for WinDbg]
• https://github.com/JKornev/cfgdump [Analyze Control Flow Guard map]
• https://github.com/yardenshafir/WinDbg_Scripts [WinDbg scripts]
• https://github.com/long123king/dk [Refactored version of tokenext]
• https://github.com/ch3rn0byl/WinDbg-Extensions [Callback Extension]
• https://github.com/KasperskyLab/WinDbg-JS-Scripts [JS Scripts]
• https://github.com/DumpAnalysis/WinDbg_Copilot [WinDbg Copilot]
• https://github.com/eversinc33/drvtrace [Trace driver module transitions]
• https://github.com/kernullist/windbg-decompile-ext [WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode]

X64DBG Plugins

• https://github.com/x64dbg/x64dbg/wiki/Plugins
• https://github.com/horsicq/x64dbg-Plugin-Manager
• https://github.com/horsicq/nfdx64dbg [x64dbg plugin for Nauz File Detector (linker/compiler/tool detection)]
• https://github.com/horsicq/stringsx64dbg [Strings plugin for x64dbg]
• https://github.com/m417z/Multiline-Ultimate-Assembler
• https://github.com/x64dbg/Classroom
• https://github.com/VenTaz/Themidie
• https://github.com/Ahmadmansoor/x64dbgScript
• https://github.com/push0ebp/xMalHunter [Detect malicious materials]
• https://github.com/morsisko/xFindOut
• https://github.com/jdavidberger/chaiScriptPlugin
• https://github.com/gmh5225/X64DBG-ViewDllNotification
• https://github.com/legendabrn/AutoAttach
• https://github.com/secrary/idenLib [Generate signatures]
• https://github.com/gmh5225/GhidraDec [Ghidra Decompiler]
• https://github.com/x64dbg/x64dbgbinja [Binary Ninja]
• https://github.com/DNLINYJ/Anti_miHoYo_Jcc_Obfuscate
• https://github.com/mrexodia/DisableParallelLoader [Disable parallel loading of dependencies]
• https://github.com/ElvisBlue/x64dbgpython [Running python3 script]
• https://github.com/secrary/idenLibX [Library Function Identification]
• https://github.com/x64dbg/SlothBP [Collaborative Breakpoint Manager]
• https://github.com/Kwansy98/ApiBreakpoint [Api Breakpoint]
• https://github.com/0ffffffffh/yummyPaste [paste string formatted byte data block into x64dbg easy]
• https://github.com/horsicq/x64dbg-Plugin-Manager [Plugin manager for x64dbg]
• https://github.com/ZehMatt/x64dbgPlaytime [Lua script]
• https://github.com/milcert/ExpoMon [Exports monitoring]
• https://github.com/m417z/x64dbg-xfg-marker [Marks XFG call signatures as data]
• https://github.com/Kwansy98/x64dbgCallFinder [Call Finder]
• https://github.com/gmh5225/X64DBG-MapLdr [Loads the map file generated by IDA Pro]
• https://github.com/xp987/symbridge [Live IDA ↔ x64dbg annotation and type synchronization bridge]
• https://github.com/CynicRus/DWARFHelper [Load DWARF debug symbols from PE (.exe/.dll) as labels, functions, and file:line comments; libdwarf; x86/x64]
• https://github.com/mibho/x64dbgTraceReader [Trace Reader]
• https://github.com/Steesha/CodeCleaner [Cleaning Themida Mutation Assembly codes]
• https://github.com/ivanpotatoes/KozDbg [Open-source x64dbg plugin that bypasses VMProtect 3.3.x–3.10.x user-mode and kernel-debugger anti-debug checks via version-specific profiles (no kernel driver)]
• https://github.com/notpidgey/ManyTypes [x64dbg typeparsing plugin with Windows types]
• https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]
• https://github.com/dariushoule/x64dbg-rippy [AI reverse engineering assistant for x64dbg]
• https://github.com/dariushoule/x64dbg-automate-pyclient [Python client for scriptable and repeatable debug sessions; full RPC protocol + MCP server]
• https://github.com/codecat/ClawSearch [x64dbg memory scanner plugin inspired by Cheat Engine]

Cheat Engine Plugins

• https://github.com/FreeER/CE-Extensions [Lua Extensions]
• https://github.com/Skyrimfus/CE-lua-extensions [Lua Extensions]
• https://github.com/cheat-engine/UnrealEngineTools [Official CE Lua tools to scan Unreal Engine games (UObject/UClass/FProperty)]
• https://github.com/cheat-engine/ControllerMode [Official CE Lua extension to navigate and operate Cheat Engine with a game controller while attached to a process]
• https://github.com/goooroooX/CE-Decky [Decky Loader plugin to install Cheat Engine in Proton, search community tables, and expose cheats as SteamOS Quick Access toggles without Desktop Mode]
• https://github.com/cheat-engine/aitools [Official CE extension integrating LLM agents via registerAITool callbacks, bundled RE skills (memory/pointer scan, Unreal, auto-assembler), and Google AI or local model backends]
• https://github.com/CheatEngineNet/CheatEngine.Client [Official C#/.NET fluent client API for Cheat Engine plugin workflows built on CheatEngine.SDK (memory/AOB scanning, NuGet package)]
• https://github.com/palepine/GDDumper [Cheat Engine script to dump/inspect Godot 3.x/4.x runtime SceneTree and GDScript]
• https://github.com/bbfox0703/Mydev-Cheat-Engine-Tables [CT]
• https://github.com/Hexorg/CheatEngineTables [Collection of Cheat Engine tables curated from CE forums (offline-focused)]
• https://github.com/antaresjay/freeplay [Rust Windows trainer that converts Cheat Engine .CT tables to TOML and runs Auto Assembler scripts]
• https://github.com/abhijeetadarsh/CTTrainer [Standalone Windows ImGui/DX11 trainer that parses Cheat Engine .CT tables and reads, writes, and freezes values in attached 32/64-bit game processes]
• https://github.com/heaven-hm/gtlibcpp [C++17 memory/trainer library with Cheat Engine .CT parsing, freeze management, and a local JSON-RPC agent for authorized offline trainer workflows on Windows]
• https://github.com/inuNorii/Elden-Ring-CT-TGA [Elden Ring]
• https://github.com/gmh5225/CE-remap-plugin [Remap]
• https://github.com/gmh5225/overwatch-iat-fixer [Overwatch IAT Fixer]
• https://github.com/FreeER/CE-Examples [Some Examples]
• Porting ce's monodatacollector to android/ios
• https://github.com/gmh5225/wasm-ceserver [Analyzing WebAssembly]
• https://github.com/Eruditi/CE-MCP-Plugin [MCP for Cheat Engine]
• https://github.com/TindalosKorone/dsh-cheatengine [DSH agent plugin bridging DeepSeek Harness to Cheat Engine via ce_* tools for memory scan, breakpoints, pointer analysis, and Lua/AA scripting]

Injection:Windows

• https://github.com/itaymigdal/awesome-injection [awesome injection]
• https://github.com/btbd/smap [Scatter Manual Map]
• https://github.com/btbd/modmap [Extend Manual Map]
• https://github.com/KGB-1337/memmap [Extend Manual Map]
• https://github.com/weak1337/ModExMap [Extend Manual Map]
• https://github.com/mactec0/Kernelmode-manual-mapping-through-IAT [IAT Manual Map]
• https://github.com/charliewolfe/Stealthy-Kernelmode-Injector [PTE/VAD Manipulation Manual Map]
• https://github.com/wbenny/injdrv [APC]
• https://github.com/alexkrnl/Kernel-dll-injector [APC]
• https://github.com/w1u0u1/kinject [Map + APC]
• https://github.com/1401199262/RemoteCall [APC Remote Call]
• https://github.com/TheCruZ/Simple-Manual-Map-Injector [Manual Map]
• https://github.com/andrew9382/manual_mapping_dll_injector [Manual Map]
• https://github.com/danielkrupinski/MemJect [Manual Map]
• https://github.com/can1357/ThePerfectInjector [PTE.User]
• https://github.com/dumbasPL/fumo_loader [PTE.User]
• https://github.com/gmh5225/executor [PTE.User]
• https://github.com/Nou4r/PresentInjector [PTE.User]
• https://github.com/JGonz1337/kernel-eac-be-injector [PTE.User]
• https://github.com/Cr4sh/KernelForge [Hijack ROP]
• https://github.com/Compiled-Code/be-injector [Attack COW]
• https://github.com/ergrelet/dll-hot-reload [Hot Reload]
• https://github.com/ExpLife0011/KeUserModeCallBack [KeUserModeCallBack]
• KeUserModeCallBack Win10
• https://github.com/YouNeverKnow00/Kernelmode-DLL-Injector [Manual Map]
• windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
• https://github.com/Broihon/GH-Injector-Library [inject library and tool]
• https://github.com/5paceman/nightshade [inject tool]
• https://github.com/deepinstinct/Dirty-Vanity [RtlCreateProcessReflection]
• https://github.com/LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection [NtQueueApcThreadEx + gadget]
• https://github.com/S12cybersecurity/FrankensteinAPCInjection [NtQueueApcThreadEx2 + existing handles & natural RWX]
• https://github.com/3xpl01tc0d3r/ProcessInjection [Various process injection techniques]
• https://github.com/dis0rder0x00/DbgNexum [Shellcode via Windows Debug API + HWBP; file mapping transfer; no WPM/RPM/VirtualAllocEx]
• https://github.com/TwoSevenOneT/InjectSetConsole [Console child process injection via named-pipe IPC; no VirtualAllocEx/WriteProcessMemory]
• https://github.com/TwoSevenOneT/PhantomBuffer [Stealth shellcode delivery via SendMessage WM_SETTEXT and cdb RIP redirect; avoids VirtualAllocEx/WriteProcessMemory]
• https://github.com/zorftw/lsass-extend-mapper [Manual mapper from LSASS]
• https://github.com/zorftw/revert-mapper [Map x64 DLLs in WoW64]
• https://github.com/SDXT/MMInject [Using NX Bit Swapping and VAD hide]
• https://github.com/Fahersto/code_injection [Several code injection techniques]
• https://github.com/gmh5225/Kernel-VAD-Injector [Hide VAD]
• https://github.com/nettitude/Tartarus-TpAllocInject [TpAllocInject]
• https://github.com/SafeBreach-Labs/PoolParty [ThreadPool]
• https://github.com/hasherezade/thread_namecalling [SetThreadDescription]
• https://github.com/Cracked5pider/earlycascade-injection [Early Cascade Injection]
• https://github.com/0xPrimo/KMDllInjector [kernel-mode DLL Injector]
• https://github.com/gmh5225/StealthAPCDispatcher [Thread scheduling stealth method using APC with encrypted shellcode]
• https://github.com/isiddique2024/Page-Table-Injector [Page Table Injector (PT-Injector)]
• https://github.com/xan105/Mini-Launcher [Application launcher with DLL Injection and Lua Scripting]
• https://github.com/a0yark/DXInject-UC [D3D11 GPU payload transport + compute shader decode, GPU-assisted process hollowing (research)]
• https://github.com/M3351AN/ZhangBing-Injector [DLL injector using WHQL-signed driver; credits kdmapper]
• https://github.com/qiufuyu123/Positron [Runtime JS injection toolkit for Electron (V8/Node.js) apps via manual-map DLL injection; self-unmapping payload, REPL/SDK]

Injection:Linux

• https://github.com/itaymigdal/awesome-injection [awesome injection]
• https://github.com/ixty/mandibule

Injection:Android

• https://github.com/gmh5225/Android-ModGamesByInjectZygote
• https://github.com/erensariisik03-sudo/Farming-Simulator-12-Mp-Build [Native Android mod injecting libmultiplayermod.so into FS12 via runtime hooking for multiplayer]
• https://github.com/gmh5225/Android-DLL-Injector
• https://github.com/reveny/Android-Ptrace-Injector
• https://github.com/reveny/Android-LD-Preload-Injector
• https://github.com/ohchase/yaui
• https://github.com/cs1ime/AndroidSuperInject [Injecting into SELinux-protected system service processes]
• https://github.com/erfur/linjector-rs [Code injection on Android without ptrace]
• https://github.com/NepMods/InjectARM64 [Non-root injection]
• https://github.com/reveny/Android-Virtual-Inject [Inject through Virtual Space without root permissions]
• https://github.com/Kysnez4/MS_KIT [MelonLoader/Frida mod kit and Zombix loader for Magic Survival (Unity IL2CPP on Android): C# mod API, packaging tools, and no-root sideload injection workflow]

Injection:IOS

• https://github.com/opa334/opainject [iOS runtime dylib injection tool]
• https://github.com/notahacker8/RobloxCheats [macOS Roblox dylib injector with internal/external ESP and offset finder]

Injection:PlayStation

• https://github.com/buzzer-re/NineS [A PlayStation 5 ELF injector]

DLL Hijack

• https://github.com/Sh0ckFR/DLLirant [Hijacking researches]
• https://github.com/redteamsocietegenerale/DLLirant [Hijacking researches Tool]
• https://github.com/knight0x07/ImpulsiveDLLHijack [Hijacking researches]
• https://github.com/wietze/HijackLibs [Project for tracking publicly disclosed DLL Hijacking opportunities]
• https://github.com/gmh5225/DLL-Hijack-ExportDumper [Dump the export table of PE files]
• https://github.com/cyberark/DLLSpy [DLL Hijacking Detection Tool]
• Project for identifying executables and DLLs vulnerable to relative path DLL hijacking
• https://github.com/anhkgg/SuperDllHijack [A general DLL hijack technology]
• https://github.com/ctxis/DLLHSC [DLL Hijack SCanner]
• https://github.com/kjjkjjzyayufqza/DDGACreg [TG4AC version.dll proxy hook (MinHook) with free camera, NESYS/card server, and companion localhost content program]
• https://github.com/00xJS/SR5-Tweak-Menu [dinput8.dll host and in-game tweak/cheat menu for Saints Row (2022) DX12 (Epic)]

Hook

• https://github.com/stars/gmh5225/lists/hook [Lists]
• https://github.com/microsoft/Detours
• https://github.com/wbenny/DetoursNT
• https://github.com/wesjian/GenericGameDetourAPIHook [Modular Microsoft Detours anti-cheat bypass framework with ~130 API hooks across 16 modules, deployed via dinput8.dll proxy]
• https://github.com/gmh5225/ntminhook [A modified version of MinHook that only uses the Windows Native API]
• https://github.com/mrexodia/AppInitHook [Global user-mode hooking framework via AppInit_DLLs (MinHook-based)]
• https://github.com/stevemk14ebr/PolyHook
• https://github.com/stevemk14ebr/PolyHook_2_0
• https://github.com/WopsS/RenHook
• https://github.com/bmax121/KernelPatch [Hooking the Linux kernel]
• https://github.com/gmh5225/subhook
• https://github.com/axhlzy/PyAsmPatch
• https://github.com/gmh5225/Driver-KDtour [Easy Kernel Detour]
• https://github.com/nelfo/PGHooker [Page Guard]
• https://github.com/weak1337/SkipHook [Skip Hook]
• https://github.com/0mdi/edgegdi_hook [gdi32 .data swap]
• https://github.com/noobpk/frida-android-hook [frida hook for android]
• https://github.com/SamuelTulach/LightHook [cross-platform hook library]
• https://github.com/3intermute/arm64_silent_syscall_hook [ARM64 Patching exception handler]
• https://github.com/kubo/plthook [PLT(Procedure Linkage Table) hook]
• https://github.com/LeoChen-CoreMind/elf-got-patcher [ARM64 ELF static GOT hook patcher: code-cave shellcode injection, .init_array RELA hijack, config-driven ASLR-safe patching]
• https://github.com/WeiJiLab/kernel-hook-framework [linux kernel inline hook framework]
• https://github.com/Rprop/And64InlineHook [Android ARMv8 inline hook framework]
• https://github.com/GToad/Android_Inline_Hook_ARM64 [Android ARMv8 inline hook framework]
• https://github.com/ChwnWang0/Android-kernel-inline-hook-framework [ARM64 Android kernel inline hook framework with instruction relocation]
• https://github.com/BossKoopa/BWSR [Arm64 inline hooking for iOS, Android, OSX, and Linux]
• https://github.com/regomne/ilhook-rs [Rust x86]
• https://github.com/iofomo/abyss [Android system call hook]
• https://github.com/jsherman212/xnuspy [an iOS kernel function hooking framework for checkra1n'able devices]
• https://github.com/Firejumper93/Ghost-Recon-Wildlands-First-Person-No-EAC [First-person camera mod for Ghost Recon Wildlands via dxgi proxy DLL, ThunkHook, and in-process memory writes on current EAC builds]
• https://github.com/winstxnhdw/lc-hax [Harmony-based internal cheat for Lethal Company (Unity mono) with CI, docs, and portable CLI workflow]

ROP Finder

• https://github.com/0vercl0k/rp [rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries]
• https://github.com/JonathanSalwan/ROPgadget [This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation]
• https://github.com/helpsystems/Agafi [A gadget finder and a ROP-Chainer tool for x86 platforms]
• https://github.com/hugsy/ropgadget-rs [Another (bad) ROP gadget finder, but this time in Rust]
• https://github.com/Boyan-MILANOV/ropium [ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together]
• https://github.com/angr/angrop [angrop is a rop gadget finder and chain builder]

ROP Generation

• https://github.com/d4em0n/exrop

Anti Signature Scanning

• https://github.com/scrt/avdebugger
• https://github.com/R7flex/dll-ollvm [LLVM 18 pass plugin (sub/bcf/fla/trim) for manually mapped Windows DLLs to evade anti-cheat allocation/table pattern scans]

RPM

• https://github.com/btbd/access
• https://github.com/crvvdev/intraceptor [access]
• https://github.com/bromoket/access_updated [Updated fork of btbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility]
• https://github.com/juniorjacob/readwrite-kernel-stable
• https://github.com/DarthTon/Blackbone
• https://github.com/HoShiMin/Kernel-Bridge
• https://github.com/waryas/EUPMAccess
• https://github.com/waryas/UMPMLib
• https://github.com/EBalloon/Remap [Clone process]
• https://github.com/TheCruZ/EFI_Driver_Access [EFI RPM]
• https://github.com/SamuelTulach/efi-memory [EFI RPM]
• https://github.com/ekknod/SubGetVariable [EFI RPM]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/489305-read-write-process-attach.html
• https://www.unknowncheats.me/forum/anti-cheat-bypass/444289-read-process-physical-memory-attach.html
• https://github.com/gamozolabs/mempeek [Linux]
• https://github.com/SamuelTulach/meme-rw [kdmapper]
• https://github.com/gmh5225/Driver-RPM-DirectPageManipulation [read physical memory]
• https://github.com/btbd/ddma [Disk based DMA for ATA and SCSI]
• https://github.com/gmh5225/DDMA-1 [Disk based DMA for ATA and SCSI]
• https://github.com/ekknod/vm [Minimal memory library for Windows/Linux]
• https://github.com/ALittlePatate/TaxiDriver [W/RPM Driver and usermode for Linux]
• https://github.com/gmh5225/Android-MemoryTool [RPM for Android]
• https://github.com/Poko-Apps/MemKernel [RPM for Android]
• https://github.com/libtersafe/KPM-MemReader [KPM module, cross-process read for Android; KernelPatch/APatch]
• https://github.com/Anonym0usWork1221/C-Android-Memory-Tool [RPM for Android]
• https://github.com/0xenia/remem [RPM for Windows]
• https://github.com/un4ckn0wl3z/DMAInvoker [DMA RPM for Windows]
• https://github.com/Vekor64/Driver-physical-rw [Kernel-mode W/RPM for Windows]
• https://github.com/nbqofficial/norsefire [Kernel-mode W/RPM/mouse_event for Windows]
• https://github.com/M3351AN/Shirakumo [RPM for Windows]
• https://github.com/M3351AN/Usugumo [Kernel-mode W/RPM/mouse_event for Windows]
• https://github.com/waryas/WaryasSWHE [Usermode exploit to bypass any AC using a 0day shatter attack]

DMA

• https://github.com/JPShag/DMA-FW-Guide-2.0 [Guide]
• https://github.com/Silverr12/DMA-CFW-Guide [Guide to building custom/modified DMA attack firmware based on pcileech-fpga]
• https://github.com/16SalomonArs/Pcileech-DMA-Firmware-Guide [Windows-first guide to building custom PCILeech FPGA DMA firmware (donor analysis, BAR/TLP, Vivado)]
• https://github.com/Rakeshmonkee/DMA [Guide]
• https://github.com/acageduser/DMA-Attack-Firmware-Customization [Guide to disguising LambdaConcept PCIe Screamer Squirrel DMA firmware as a Realtek RTL8111 NIC to evade anti-cheat PCIe enumeration]
• https://github.com/PacktPublishing/Learn-FPGA-Programming [Guide]
• https://github.com/Lagrossa/DFSC4317-Obfuscating-Game-Hacking-Through-Hardware [Course research on FPGA DMA external memory reads for Deadlock, with minimap entity plotting and accompanying paper/slides]
• https://github.com/enjoy-digital/litepcie [Small footprint and configurable PCIe core]
• https://github.com/apoj-inc/Cyclone-V-PCIe-AVMM-DMA [Configurable Intel Cyclone V PCIe 2.0 x4 FPGA DMA engine (AVMM, multi-channel FIFOs, MSIX) with Linux driver and userspace examples]
• https://github.com/cakehonolulu/pciem [A Linux framework for synthetic PCIe device emulation entirely in userspace]
• https://github.com/ufrisk/pcileech
• https://github.com/ufrisk/pcileech-fpga [FPGA HDL/firmware modules for PCILeech DMA attack hardware]
• https://github.com/realquantumstealth-hub/PCILeech-DMA-Fullstealth [Quantumstealth open source Fullstealth firmware; Vivado build for M2/Squirrel/Captain 75T/Enigma X1]
• https://github.com/NoviceLevel/Pcileech-QuantumStealth-Max [Pcileech QuantumStealth Max firmware; Vivado for M2/Squirrel/100T/Captain 75T/Enigma X1/Immortal 75T]
• https://github.com/ekknod/pcileech-wifi [pcileech-fpga with wireless card emulation]
• https://github.com/JOKOSAHS/DMA-Pcileech [pcileech-style DMA network-card firmware (AX200) for FPGA DMA research vs anti-cheat]
• https://github.com/12i192i1043/pcileech-cmedia-cmi8738 [PCILeech FPGA firmware emulating C-Media CMI8738/PCI-SX sound card on Artix-7 DMA boards]
• https://github.com/Cr4sh/pico_dma
• https://github.com/Cr4sh/s6_pcie_microblaze [PCIe DIY DMA toolkit for Xilinx SP605 with TLP control, UEFI/Hyper-V backdoor PoCs]
• https://github.com/kWAYTV/dma-cheat-base [Cheat base]
• https://github.com/Spuckwaffel/DMALib [DMA library]
• https://github.com/Metick/DMALibrary [DMA library]
• https://github.com/lyk64/VolkDMA [C++ DMA library for FPGA memory R/W, scatter I/O, module dumps, signature scans, CR3 fix, and kernel-derived input state (LeechCore/MemProcFS based)]
• https://github.com/chase-irql/StrataDMA [Cross-platform C++17 MemProcFS/VMMDLL wrapper for authorized DMA Windows memory inspection: scatter I/O, CR3 recovery, signature scans, VFS/registry, and hardware-free mock tests]
• https://github.com/ekknod/vm [Minimal memory library for Windows/Linux]
• https://github.com/gmh5225/ReClass-DMA [ReClass DMA]
• https://github.com/Metick/CheatEngine-DMA [CheatEngine DMA]
• https://github.com/kaijia2022/Cheat-Engine-DMA-Plugin [CheatEngine DMA]
• https://github.com/un4ckn0wl3z/DMACheatEngineLoader [CheatEngine DMA, not open-source]
• https://github.com/gmh5225/MemTools [Windows/Linux DMA testing tools]
• https://github.com/Dray973/Aetheris [PyQt6 Windows forensics suite with PCILeech-FPGA physical memory read/write via MemProcFS, process autopsy, and audited reversible actions]
• https://github.com/sh1ftd/dma-speedtest-memflow-rs [Windows CLI/GUI for benchmarking DMA read/write throughput and latency via memflow (pcileech/native)]
• https://github.com/sh1ftd/dma-tools-rs [Rust Windows GUI for flashing Artix-7 FPGA bitstreams, reading device DNA, and validating PCILeech/memflow DMA setups via CH347 or RS232 JTAG]
• https://github.com/sercanarga/fpga-dma-multi-tool [Windows Go utility to detect/configure Artix-7 FPGA DMA boards, flash bitstreams, and measure DMA throughput]
• https://github.com/Sylnar/NexusForge [Windows .NET tool to detect Artix-7 FPGA DMA boards, read device DNA, flash firmware, install CH347/FT601 drivers, and run DMA speed tests]
• https://github.com/MewDMA/MewTools [Windows DMA setup utility for 35T/75T/100T FPGA cards: driver install, firmware flashing, DNA ID, speed tests, MAKCU/FERRUM support, and second-PC optimizer]
• https://github.com/sercanarga/pcileechgen [Go tool to clone a real PCI/PCIe donor via VFIO and synthesize ready-to-flash PCILeech FPGA bitstreams through Vivado]
• https://github.com/sonodima/physpatch [Scanning and patching of the entire Windows Kernel using DMA]
• https://github.com/gmh5225/DMA-PCIE-BOARD-75T [DMA-PCIE-BOARD-75T]
• https://github.com/dom0ng/pcileech-wifi-v2 [pcileech-fpga with wireless card emulation]
• https://github.com/Trustings/DMA_PE_Dumper [DMA PE (Portable Executable) Dumper with DTB patching capabilities]
• https://github.com/mltpig/PCILeech-FPGA-DMA_VMD [PCILeech FPGA DMA VMD Controller Simulation Project]
• https://github.com/Herooyyy/Free-DMA-Firmware-pcileech [Free DMA Firmware.Bypass VGK/FAC and MSI-X interrupt]
• https://github.com/Herooyyy/Pcileech-AMDPCI [Using no interrupt bypass faceit/vgk]
• https://github.com/Herooyyy/Pcileech-Intel-I226-V-FullEmu [Intel-I226-V]
• https://github.com/Herooyyy/Pcileech-ISABridge [Use specific PID/VID to bypass faceit]
• https://github.com/Herooyyy/Pcileech-Activator-Anti-crack [DMA activator signal config (FT601/SystemVerilog): activation signal definition, state machine, anti-crack]
• https://github.com/d1skq/vgk-dma-bypass [VGK DMA bypass]
• https://github.com/kEv1nZ0/VTD-Bypass [VT-d/IOMMU]
• https://github.com/gmh5225/Pcileech-DMA-NVMe-VMD [Firmware real camouflage through motherboard VMD function.（Pcileech-DMA）]
• https://github.com/a0yark/ArcRaidersRadar-dma-Radar [DMA radar/ESP, MemProcFS + Unicorn Engine for pointer decryption emulation]
• https://github.com/TheAustinUS/LuminaryDMA [Call of Duty read-only DMA cheat framework with PCILeech/MockDMA backends, BO6 offsets, and client-info decryption]
• https://github.com/orphannn/hoozi-cs2-dma [CS2 external DMA assistant with configurable player ESP, map collision visibility checks, and LeechCore/VMM integration]
• https://github.com/MGreif/PCILeech_DMA_Proxy [A DLL with Loader that hooks common windows memory API functions and proxies them to the remote device via DMA]

W2S

• https://github.com/DrNseven/D3D11-Worldtoscreen-Finder

Overlay

• https://github.com/coltonon/D2DOverlay
• https://github.com/SurgeGotTappedAgain/Window-Hijack
• https://github.com/SeanPesce/Direct3D9-Overlay [DX9]
• https://github.com/Unkn0wnH4ck3r/GameOverlayUIHook [Steam]
• https://github.com/gmh5225/Steam-Hook-Render-PoC [Steam]
• https://github.com/xo1337/steam-overlay-x64 [Steam]
• https://github.com/Splitx12/StrongSteam [GDI + Steam]
• https://github.com/gmh5225/dwmhook [DWM]
• https://github.com/LoxTus/dwm-overlay [DWM]
• https://github.com/rlybasic/DWM_Hook [DWM]
• https://github.com/mfxiaosheng/dwmhook [DWM VFTable]
• https://github.com/gmh5225/nvidia-overlay-hijack [Hijack Nvidia]
• https://github.com/Brattlof/D3DOverlay-Nvidia-Hijack [Hijack Nvidia]
• https://github.com/gmh5225/NVIDIA-OVERLAY [Hijack Nvidia]
• https://github.com/Calvin-LLC/nvidia-overlay-hijack [Hijack Nvidia]
• https://github.com/es3n1n/nvidia-overlay-renderer [Nvidia]
• https://github.com/muturikaranja/overlay [SetWindowsHookEx]
• https://github.com/gmh5225/OBS-graphics-hook32-Hook [OBS Hook]
• https://github.com/gmh5225/OBS-Hook [OBS Hook]
• https://github.com/PierreCiholas/NotAnOverlay [Duplicating with GDI]
• https://github.com/SsageParuders/Android_Native_Surface [Android Native Overlay]
• https://github.com/gmh5225/Android_Native_Surface [Android Native Overlay]
• https://github.com/horoni/android_imgui_menu [Rust Android cdylib mod menu with EGL/Vulkan render-chain hooks and ARM64 inline hooking]
• https://github.com/xBrunoMedeiros/eac-overlay [EAC Overlay]
• https://github.com/3r4y/imgui-external-overlay [imgui overlay]
• https://github.com/Nn1ff/crosshair-z [Lightweight Electron crosshair overlay for Windows: click-through topmost window, no game injection or hooks, portable offline build]
• https://github.com/allnighter51/Iris [Rust/Tauri 2 external Win32 layered overlay for transparent HUD compositing without DLL injection or game memory reads, with WDA_EXCLUDEFROMCAPTURE stream exclusion]
• https://github.com/rabbanyhmm/ImOverlay-DX11 [Lightweight C++20 Win32/DirectX 11 transparent multi-window overlay framework with smart click-through and parent-child hierarchy]
• https://github.com/husnaintariq577/kx-vision [C++ DirectX overlay for Guild Wars 2 with D3D render hooks, game offsets, and ESP-style world/player visualization]
• https://github.com/myso-kr/hell-is-us-mod [External Hell Is Us companion (hiumod) that attaches to the running game, reads memory for minimap/quest overlays, and exposes optional single-player cheats without modifying game files]
• https://github.com/J0xna/Kernel-Overlay-Hider [Kernel Overlay Hider]
• https://github.com/geeksonsecurity/android-overlay-malware-example [Android]
• https://github.com/SamuelTulach/OverlayCord [Discord]
• https://github.com/hiitiger/goverlay [DirectX hook game overlay for Electron/Qt/CEF apps injected into games]
• https://github.com/gameplug-labs/gameplug [Multi-API (D3D9–12/Vulkan) proxy-DLL framework for ImGui overlays and game plugins on Windows]
• https://github.com/storycraft/asdf-overlay [Rust overlay library with DirectX, OpenGL, and Vulkan hooking for in-game overlays]

Render/Draw

• https://github.com/vmcall/dxgkrnl_hook
• https://github.com/thesecretclub/window_hijack [Hijacking thread contexts]
• https://github.com/r1cky33/krnl-gdi-render [Dxgkrnl + GDI]
• https://github.com/BadPlayer555/KernelGDIDraw [Kernel + GDI]
• https://github.com/NSG650/NtDOOM [Kernel + GDI]
• https://github.com/Splitx12/StrongSteam [GDI + Steam]
• https://github.com/Sentient111/KernelDrawing [Drawing from kernelmode without any hooks]
• https://github.com/wbaby/DoubleCallBack [DWM In Kernel]
• https://github.com/cs1ime/KernelDwm [DWM In Kernel]
• https://github.com/gmh5225/DWM-DwmDraw [DWM StackWalk]
• https://github.com/Yukin02/Dwm-Overlay [DWM Overlay without modify .text]
• https://github.com/Polarmods/PolarImGui [Imgui On Android]
• https://github.com/vrolife/android_native_app_imgui [Imgui On Android]
• https://github.com/LGLTeam/Android-Mod-Menu [Floating mod menu for Android]
• https://github.com/springmusk026/ImGui-Unity-With-Layout [Imgui For Unity]
• https://github.com/springmusk026/Imgui-Unity [Imgui For Unity]
• https://github.com/gmh5225/Android-Mod-Menu-ImGui [Imgui For Unity]
• https://github.com/Octowolve/Unity-ImGUI-Android [Imgui For Unity]
• https://github.com/lbertitoyt/ImGUI-Zygisk-Unity [Imgui For Unity]
• https://github.com/gmh5225/zygisk-imgui-modmenu [ImGui with Zygisk]
• https://github.com/gmh5225/ImGui-Unity-Android [Imgui For Unity]
• https://github.com/gmh5225/BepInEx-IL2CPPBase [IL2CPP Menu]
• https://github.com/springmusk026/Android-Mod-Menu-Kotlin [IL2CPP Menu]
• https://github.com/gmh5225/Android-OpenGL-ES-Chams [Chams]
• https://github.com/RequestFX/ImGUI-Advanced-Cheat-Menu [Imgui Menu]
• https://github.com/gmh5225/External-imgui-Cheat-Menu-Example-2023 [External Imgui Menu]
• https://github.com/gmh5225/External-ImGui-Android [External Imgui Menu for Android]
• https://github.com/xProHackerx/imgui-ios-mod-menu [Imgui Menu for IOS]
• https://github.com/gmh5225/egui-d3d11 [Menu]
• https://github.com/springmusk026/Android-ModMenu-SemiJni [Menu for imgui]
• https://github.com/fedes1to/Zygisk-ImGui-Menu [ImGui menu using Zygisk]
• https://github.com/reveny/Zygisk-ImGui-Mod-Menu [ImGui menu using Zygisk]
• https://github.com/s4m33r89/Imgui-Native-ModMenu [Imgui Menu for Android]
• https://github.com/joeyjurjens/iOS-Mod-Menu-Template-for-Theos [IOS mod menu]

UI Interface

• https://github.com/adamhlt/ImGui-Standalone
• https://github.com/ocornut/imgui_club [Official Dear ImGui extensions including a hex memory editor widget]

Vulnerable Driver

• https://www.loldrivers.io/drivers [Living Off The Land Drivers]
• https://github.com/magicsword-io/LOLDrivers [Living Off The Land Drivers]
• https://github.com/KeServiceDescriptorTable/vulnerable-drivers [Vulnerable drivers for windows machines]
• https://github.com/ghostbyt3/BYOVDFinder [Identifies LOLDrivers that are not blocked by the active HVCI policy]
• https://github.com/LongpanZhou/BYOVD-AI-Guide [BYOVD research playbook: driver corpus, LOLDrivers/blocklist gates, Ghidra static audits, VM write-primitive verification]
• https://github.com/rtfmkiesel/loldrivers-client [Scan loldrivers]
• https://github.com/FourCoreLabs/LolDriverScan [Scan loldrivers]
• https://github.com/trailofbits/HVCI-loldrivers-check [HVCI loldrivers check]
• https://github.com/hacksysteam/HackSysExtremeVulnerableDriver [Guide]
• https://github.com/xct/windows-kernel-exploits [Guide]
• https://github.com/namazso/physmem_drivers [Vulnerable Driver List]
• https://github.com/alfarom256/drivers_and_shit [Vulnerable Driver List]
• https://github.com/NullArray/WinKernel-Resources/tree/main/Drivers [Vulnerable Driver List]
• https://github.com/CaledoniaProject/drivers-binaries [Vulnerable Driver List]
• https://github.com/Xxmmy/vulnerable-driver-scanner [Scans for vulnerable drivers]
• https://github.com/Sentient111/VulnerableDriverScanner [Scans for vulnerable drivers]
• https://github.com/shareef12/cpuz [CPU-Z]
• https://github.com/SamLarenN/CPUZ-DSEFix [CPU-Z]
• https://github.com/gmh5225/gdrv-loader/tree/1909_mitigation [gdrv.sys]
• https://github.com/backengineering/VDM [gdrv enhance]
• https://github.com/Compiled-Code/eac-mapper [gdrv.sys]
• https://github.com/gmh5225/CVE-2018-19320-LPE [gdrv.sys]
• https://github.com/gmh5225/CVE-2018-19320 [gdrv.sys]
• https://github.com/gmh5225/gdriver-lib [gdrv.sys]
• https://github.com/holi4m/gdrv-loader-v2 [gdrv.sys]
• https://github.com/gmh5225/KDP-compatible-driver-loader [gdrv.sys]
• https://github.com/1337kenzo/gdrv-loader-updated [gdrv.sys Win11]
• https://github.com/AmitMoshel1/gdrv_sys_exploit [gdrv.sys Win11]
• https://github.com/eddeeh/kdmapper [iqvw64e.sys]
• https://github.com/TheCruZ/kdmapper [iqvw64e.sys]
• https://github.com/Brattlof/kdmapper-1909 [iqvw64e.sys]
• https://github.com/paysonism/saturn-mapper [iqvw64e.sys]
• https://github.com/rmccrystal/kdmapper-rs [A kdmapper library for Rust]
• https://github.com/kkent030315/MsIoExploit [MsIo64.sys]
• https://github.com/gmh5225/VulnerableKernel_Driver [MsIo64.sys]
• https://github.com/kkent030315/evil-mhyprot-cli [Mhyprot2.sys]
• https://github.com/gmh5225/evil-mhyprot-cli [Mhyprot2.sys]
• https://github.com/gmh5225/mhydeath [Mhyprot2.sys]
• https://github.com/gmh5225/mhyprot2 [Mhyprot2.sys]
• https://github.com/gmh5225/Mhyprot2DrvControl [Mhyprot2.sys]
• https://github.com/gmh5225/CVE-2020-36603 [Mhyprot2.sys]
• https://github.com/gmh5225/AvastHV [Avast]
• https://github.com/gmh5225/KasperskyHook [Kaspersky]
• https://github.com/gmh5225/EvilKaspersky [Kaspersky]
• https://github.com/gmh5225/CVE-2021-21551 [dbutil_2_3.sys]
• https://github.com/gmh5225/CVE-2021-21551 [dbutil_2_3.sys]
• https://github.com/gmh5225/Kernel-Cactus [dbutil_2_3.sys]
• https://github.com/gmh5225/CVE-2021-21551-POC [dbutil_2_3.sys]
• https://github.com/gmh5225/TS-Fucker [dbutil_2_3.sys]
• https://github.com/gmh5225/imxyviMapper [AsUpIO.sys]
• https://github.com/gmh5225/vdk [Speedfan.sys]
• https://github.com/gmh5225/SpeedFan-Exploit [Speedfan.sys]
• https://github.com/gmh5225/CapcomLib [Capcom.sys]
• https://github.com/gmh5225/dolboeb-executor [Capcom.sys]
• https://github.com/gmh5225/CapcomDKOM [Capcom.sys]
• https://github.com/gmh5225/dbk64-vulnerability-driver [dbk64.sys]
• https://github.com/gmh5225/CVE-2015-2291 [IQVW64.sys]
• https://github.com/gmh5225/AsIO-Exploit [AsIO3.sys]
• https://github.com/gmh5225/AsusDrv [AsusBiosIoDrv64.sys]
• https://github.com/gmh5225/asus-bsitf-0-day-poc [CVE-2026-13585 bsitf.sys — IOCTL maps kernel contiguous memory to usermode + physical address disclosure]
• https://github.com/gmh5225/OpenHardwareMonitor-PoC [OpenHardwareMonitorLib.sys]
• https://github.com/gmh5225/PPLKiller [RTCore64.sys]
• https://github.com/gmh5225/PsNotifRoutineUnloader [RTCore64.sys]
• https://github.com/gmh5225/CYBERSEC2023-BYOVD-Demo [RTCore64.sys]
• https://github.com/gmh5225/RTCore64_Vulnerability [RTCore64.sys]
• https://github.com/gmh5225/CVE-2022-42045 [amsdk.sys]
• https://github.com/gmh5225/WatchDogKiller [amsdk.sys]
• https://github.com/gmh5225/CVE-2022-3699 [LenovoDiagnosticsDriver.sys]
• https://github.com/gmh5225/lenovo_mapper [LenovoDiagnosticsDriver.sys]
• https://github.com/gmh5225/lenovo_exec [LenovoDiagnosticsDriver.sys]
• https://github.com/redteamfortress/PhantomKiller [BYOVD process killer via signed Lenovo BootRepair.sys — IOCTL 0x222014 ZwTerminateProcess, kills PPL-protected EDR/AV]
• https://github.com/gmh5225/CVE-2022-42046 [wfshbr64.sys]
• https://github.com/gmh5225/amd-ryzen-master-driver-v17-exploit [AMD's Ryzen Master Driver]
• https://github.com/gmh5225/RToolZ [ProcExp152.sys]
• https://github.com/gmh5225/nullmap [Afd.sys]
• https://github.com/gmh5225/Windows-10-22H2-Vulnerable-driver-communication [asromgdrv.sys]
• https://github.com/gmh5225/HPHardwareDiagnostics-PoC [etdsupp.sys]
• https://github.com/gmh5225/Blackout [gmer64.sys]
• https://github.com/gmh5225/Terminator [zam64.sys]
• https://github.com/gmh5225/zam64-zemina [zam64.sys]
• https://github.com/EvilBytecode/EDR-XDR-AV-Killer [zam64.sys]
• https://github.com/gmh5225/CVE-2017-9769 [rzpnk.sys]
• https://github.com/gmh5225/echoac-poc [echo_driver.sys]
• https://github.com/gmh5225/kur [echo_driver.sys]
• https://github.com/gmh5225/NVDrv [nvaudio.sys]
• https://github.com/gmh5225/UCMapper [nvaudio.sys]
• https://github.com/gmh5225/HITCON-2023-Demo-CVE-2023-20562 [AMDCpuProfiler.sys]
• https://github.com/gmh5225/BadRentdrv2 [rentdrv2.sys]
• https://github.com/gmh5225/S4Mapper [SignalRgbDriver.sys]
• https://github.com/gmh5225/dse_hook [winio64.sys]
• https://github.com/gmh5225/s4killer [probmon.sys]
• https://github.com/gmh5225/KExecDD [KSecDD.sys]
• https://github.com/gmh5225/KexecDDPlus [KSecDD.sys]
• https://github.com/gmh5225/CVE-2024-26229 [csc.sys]
• https://github.com/gmh5225/ZeroHVCI [csc.sys]
• https://github.com/gmh5225/Win-Driver-EXP/tree/main/CVE-2024-33218 [AsUpIO64.sys]
• https://github.com/gmh5225/Win-Driver-EXP/tree/main/CVE-2024-30804 [AsInsHelp64.sys]
• https://github.com/gmh5225/CVE-2020-14974 [IObitUnlocker.sys]
• https://github.com/gmh5225/ProcessKiller-BYOVD [viragt64.sys]
• https://github.com/CyberSecurityUP/UrekMazino-Malware [viragt64.sys]
• https://github.com/gmh5225/BYOVD/tree/main/Viragt64-Killer [viragt64.sys]
• https://github.com/CyberSecurityUP/ViGEmBus-Driver-Exploitation [ViGEmBus.sys]
• https://github.com/MrAle98/ATDCM64a-LPE [atdcm64a.sys]
• https://github.com/gmh5225/CVE-2024-35250 [ks.sys]
• https://github.com/gmh5225/CVE-2024-21338 [appid.sys]
• https://github.com/MrAle98/CVE-2024-49138-POC [CLFS.sys]
• https://github.com/gmh5225/CVE-2025-21333-POC [vkrnlintvsp.sys]
• https://github.com/nu1lptr0/CVE-2025-21333 [LPE due to integer truncation in vskrnlintvsp.sys]
• https://github.com/Xacone/Eneio64-Driver-Exploit [eneio64.sys]
• https://github.com/gmh5225/BYOVD/tree/main/TfSysMon-Killer [SysMon.sys]
• https://github.com/gmh5225/BYOVD/tree/main/Ksapi64-Killer [ksapi64.sys]
• https://github.com/gmh5225/BYOVD/tree/main/BdApiUtil-Killer [BdApiUtil64.sys]
• https://github.com/0xJs/BYOVD_EDRKiller/tree/main/BdApiUtil [BdApiUtil64.sys]
• https://github.com/gmh5225/BYOVD/tree/main/Wsftprm-Killer [wsftprm.sys]
• https://github.com/0xJs/BYOVD_EDRKiller/tree/main/Wsftprm [wsftprm.sys]
• https://github.com/xM0kht4r/AV-EDR-Killer [wsftprm.sys]
• https://github.com/0xJs/BYOVD_EDRKiller/tree/main/truesight [truesight.sys]
• https://github.com/kyxiaxiang/360WFP_Exploit [BYOVD: Use 360netmon_x64.sys_wfp ​​WFP driver to block EDR/XDR network connection]
• https://github.com/sai2fast/DsArk64 [BYOVD: DsArk64.sys (Qihoo 360) - WHQL-signed, process kill from ring 0 + kernel R/W]
• https://blog.talosintelligence.com/decrement-by-one-to-rule-them-all [AsIO3.sys]
• https://github.com/gmh5225/Killer-Exercice [An Exercice for Red Team to Reverse & Exploit, that's a valide BYOVD Killer, not HVCI Blocklisted, and not in LOLBIN]
• https://github.com/gmh5225/ampa.sys-exp [ampa.sys]
• https://github.com/0xJs/BYOVD_read_write_primitive [BYOVD Read Write primitive]
• https://github.com/U65535F/ThrottleStopPoC [ThrottleStop.sys]
• https://github.com/ANYLNK/NSecSoftBYOVD [NSecKrnl.sys]
• https://github.com/moiz-2x/CVE-2025-24990_POC [ltmdm64.sys]
• https://github.com/symeonp/Lenovo-CVE-2025-8061 [PoC for popping a system shell against the LnvMSRIO.sys driver]
• https://github.com/gmh5225/Killer [Non HVCI Block listed - Microsoft signed driver exploited to kill AV/EDR's processes]
• https://github.com/andreisss/KslDump [PPL LSASS dump via Defender KslD.sys — legacy on-disk driver, IOCTL 0x222044 + MmCopyMemory read]
• https://github.com/vergamota/KslKatz [BYOVD Credential Extractor using Microsoft Defender's KslD.sys]
• https://github.com/xM0kht4r/VEN0m-Ransomware [IMFForceDelete.sys]
• https://github.com/ZeroMemoryEx/CVE-2025-26125 [IMFForceDelete.sys]
• https://github.com/KeServiceDescriptorTable/cormem.sys-vulnerable-driver [cormem.sys]
• https://github.com/Muz1K1zuM/PoisonKiller_bof [PoisonX.sys]
• https://github.com/waryas/xign_poc_april_2026 [xhunter64.sys]
• https://github.com/BlackSnufkin/AxHunter [Rust PoCs for Wellbia XIGNCODE3 xhunter1.sys and xhunter2.sys (CVE-2026-15430)]
• https://github.com/gmh5225/qiomem [Qiomem.sys]
• https://github.com/gmh5225/PdFwKrnlMapper [PdFwKrnl.sys]
• https://github.com/gmh5225/pdfwkrnl-exploit [PdFwKrnl.sys]
• https://github.com/Bad-Jubies/Exploits [AmdPowerProfiler.sys]

Driver Communication

• https://github.com/gmh5225/Driver-Communication-List
• https://github.com/gmh5225/ida-find-.data-ptr [.data ptr lookup script]
• https://github.com/EBalloon/Common-Registry [Registry Callback]
• https://github.com/gmh5225/Common-Registry-Jmp-RCX [Registry Callback]
• https://github.com/0xGREG/registry-callbacks [Registry Callback]
• https://github.com/adrianyy/rw_socket_driver [Socket]
• https://github.com/zoand/BOOM [Hijack Beep.sys]
• https://github.com/gmh5225/Driver-read_write [Hijack IRP Beep.sys]
• https://github.com/isoadam/gina_public [Hijack IRP Null]
• https://github.com/Barracudach/Swap-control-ioctl [Hijack IRP SpeedFan.sys]
• https://github.com/adspro15/km-um-communication
• https://github.com/namazso/PawnIO [Windows kernel driver that loads Pawn modules for physical/virtual memory I/O, MSR/PCI access, and IOCTL-based user-mode communication]
• https://github.com/zer0condition/GoodmansKernel [Signed WDM driver embedding wasm3 to load unsigned WASM kernel modules with nt/hal FFI, IOCTL control, InfinityHook, and HVCI-compliant execution]
• https://github.com/Spuckwaffel/Kernel-Thread-Driver [Thread]
• https://github.com/Astronaut00/DoubleDataPointer [Double Data Pointer]
• https://github.com/btbd/access [NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
• https://github.com/bromoket/access_updated [NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
• https://github.com/paradoxwastaken/Poseidon [NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
• https://github.com/FarmEquipment69/umap-mapper [NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
• https://github.com/0mWindyBug/DataptrHooks [NtConvertBetweenAuxiliaryCounterAndPerformanceCounter]
• https://github.com/gmh5225/r69-driver [NtQueryAuxiliaryCounterFrequency]
• https://github.com/KeServiceDescriptorTable/roak [NtQueryAuxiliaryCounterFrequency]
• https://github.com/weak1337/EvCommunication [NtTokenManagerCreateFlipObjectReturnTokenHandle]
• https://github.com/gmh5225/Driver-kaldereta [NtTokenManagerGetAnalogExclusiveTokenEvent]
• https://github.com/UCFoxi/Shared-FlushFileBuffers-Communication [FlushFileBuffers]
• https://github.com/gmh5225/UCFoxi-Shared-FlushFileBuffers-Communication-Update FlushFileBuffers]
• https://github.com/Sinclairq/DataCommunication [NtCompareSigningLevels]
• https://github.com/ExpLife0011/NtCompareSigningLevel-hook [NtCompareSigningLevels]
• https://github.com/muturikaranja/AfdIrpCallDispatch [.data Pointer hook in Afd.sys]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/483093-vtable-kernel-function-hook-communication.html [NtUserMessageCall]
• https://github.com/EBalloon/MapPage [NtUserGetObjectInformation]
• https://github.com/Compiled-Code/eac-mapper [NtMapVisualRelativePoints]
• https://github.com/gmh5225/eac-bypass-1 [NtMapVisualRelativePoints]
• https://git.back.engineering/_xeroxz/NtWin32k [NtUserGetThreadState]
• https://github.com/sbsbsbssbsbs/boundcallback [KeRegisterBoundCallback]
• https://github.com/gmh5225/DataPtrSwap-driver [NtSetCompositionSurfaceAnalogExclusive]
• https://github.com/xPasters/.data-ptr-swap [NtSetCompositionSurfaceAnalogExclusive]
• https://github.com/ryan-weil/ReadWriteDriver [NtUserSetSysColors]
• https://github.com/D3DXVECTOR2/NtUserUpdateWindowTrackingInfo [NtUserUpdateWindowTrackingInfo]
• https://github.com/KiFilterFiberContext/windows-software-policy [clip]
• https://github.com/gmh5225/Interep-Driver-Leak [NtGdiPolyPolyDraw]
• https://github.com/gmh5225/Comm-data-ptr-driver [NtGdiPolyPolyDraw]
• https://github.com/JGonz1337/kernel-eac-be-comm [NtGdiPolyPolyDraw]
• https://github.com/Lynnette177/Rigel-Driver [NtGdiDdDDINetDispGetNextChunkInfo]
• https://github.com/NullTerminatorr/NullHook [NtDxgkGetTrackedWorkloadStatistics]
• https://github.com/gmh5225/Kernel-Cheat-for-directx3D [NtDxgkGetTrackedWorkloadStatistics]
• https://github.com/gmh5225/Comm-Data-Pointer-Swap [NtDCompositionSetChildRootVisual]
• https://github.com/gmh5225/Comm-NekoSwap [Win32kApiSetTable]
• https://github.com/gmh5225/kernel_payload_comms [Shared Memory]
• https://github.com/Chase1803/UCMiraka-ValorantExternal [NtUserGetPointerProprietaryId]
• https://github.com/gmh5225/Comm-ImMiraclela [NtDxgkGetTrackedWorkloadStatistics/NtDxgkGetAvailableTrackedWorkLoadIndex]
• https://www.unknowncheats.me/forum/2976731-post45.html [IsWin32KSyscallFiltered]
• https://github.com/J0xna/Kernel-Overlay-Hider [NtMITPostWindowEventMessage]
• https://github.com/gmh5225/Eac-Injector-Driver [NtQueryIntervalProfile]
• https://github.com/gmh5225/job_communication [NtQueryInformationJobObject]
• https://github.com/gmh5225/custom_data_ptr_swap_sample [NtQueryLicenseValue]
• https://github.com/zer0condition/ZeroThreadKernel [NtCreateCompositionSurfaceHandle]
• https://github.com/gmh5225/NullDriverCheat [NtOpenCompositionSurfaceSectionInfo]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/560809-firmwaretablehandler.html [FirmwareTableHandler]
• https://github.com/oakboat/DataPtrHookWin11 [NtUserSetGestureConfig]
• https://github.com/GetRektBoy724/Win32kHooker [.data ptr swapper for newer win32k versions]
• https://github.com/bootmgfw/lithium-kernel [Windows kernel driver + usermode client: physical/virtual memory R/W, page-table walk, pattern scan, MouClass mouse IOCTL]
• https://github.com/zensenzay/wnf-driver-meme [Kernel driver and usermode client using Windows Notification Facility state names for covert UM/KM comm, plus process memory R/W and ObRegisterCallbacks handle stripping]

EFI Driver

• https://github.com/mrexodia/EfiCMake
• https://github.com/tandasat/MiniVisorPkg
• https://github.com/Th3Spl/SimpleUEFI [UEFI Environment for VisualStudio (MSVC), Extremely easy to setup]
• https://github.com/Th3Spl/PerfectSMBios [UEFI SMBIOS serial spoof before bootx64.efi; no ntoskrnl/winload pointers; Linux-capable; C]
• https://github.com/Oliver-1-1/SmmInfect [SMM Driver]
• https://github.com/Shtan7/VisualUEFI-2.0 [Debug source with clion+clang+gdb]
• https://github.com/SamuelTulach/EasyUefi [Visual Studio template for GNU-EFI]
• https://github.com/btbd/umap [EFI Manual Map]
• https://github.com/ekknod/sumap [EFI Manual Map]
• https://github.com/xtremegamer1/xigmapper [EFI Manual Map]
• https://github.com/Valthrun/valthrun-uefi-mapper [EFI Manual Map]
• https://github.com/ekknod/KiSystemStartupMeme [Custom KiSystemStartup]
• https://github.com/SamuelTulach/efi-memory [RPM]
• https://github.com/TheCruZ/EFI_Driver_Access [RPM]
• https://github.com/gmh5225/Driver-efi-bootkit
• https://github.com/SamuelTulach/rainbow [HWID]
• https://github.com/gmh5225/-Rainbow---EFI [HWID]
• https://github.com/gmh5225/Fortnite-EFI-External [Fortnite]
• https://github.com/ajkhoury/UEFI-Bootkit
• https://github.com/iss4cf0ng/OpenPetya [PoC MBR bootkit inspired by Petya ransomware; custom MBR/stage-2; Real→Protected Mode; NTFS MFT Salsa20 encryption; Assembly/C/C++]
• https://github.com/wesmar/EfiTool [0/68 VirusTotal. NT AUTHORITY\SYSTEM before the logon screen. No disk writes. No kernel driver. No PCR violations in production builds — BitLocker never prompts. In-RAM SYSTEM hive patching via direct gBS->ExitBootServices hook at UEFI level]
• https://github.com/wesmar/NTFS_EFI [Native NTFS read/write UEFI x64 driver with EFI Commander pre-boot file manager — chkdsk-clean unmount, no EDK2 BaseTools]
• https://github.com/wesmar/undervolter [Native UEFI x64 Intel CPU undervolting via MSR/MMIO before OS load; NVRAM Setup patching (CFG/OC Lock), Secure Boot SelfEnroll, Plundervolt-related voltage-interface research]
• https://github.com/SamuelTulach/negativespoofer [HWID]
• https://github.com/gmh5225/EfiDump [Dump]
• https://github.com/ekknod/Nmi [Blocking NMI interrupts]
• https://github.com/ekknod/smm [Smm cheat]
• https://github.com/sa413x/UEFI-Bootloader [Simple mmapper which using UEFI runtime driver]
• https://github.com/gmh5225/bootlicker [Generic UEFI bootkit used to achieve initial usermode execution]
• https://github.com/ekknod/efi-monitor [Hooking MmCopyMemory PG safe]
• https://github.com/leap0x7b/luaboot [A fully scriptable UEFI bootloader]
• https://github.com/Cr4sh/SmmBackdoorNg [UEFI backdoor]
• https://github.com/Oliver-1-1/UEFI-Graphic [Simpel usage of graphic in UEFI]
• https://github.com/Jamesits/BGRTInjector [Changes the boot screen image on a UEFI computer]
• https://github.com/NoInitRD/Memory-Dump-UEFI [A UEFI application for dumping the contents of RAM]
• https://github.com/NSG650/NoMoreBugCheckReloaded [NoMoreBugCheck Reloaded]
• https://github.com/x90skysn3k/x260-lenovo-opencore [Lenovo-X260-Hackintosh-BigSur-OpenCore-0.8.5]
• https://github.com/gmh5225/OfflineCrashDumpUefi [EDK2 UEFI implementation for writing an Offline Crash Dump]
• https://github.com/Twobot7/advanced-efi-driver-with-gdi-and-kernel-mouse-input [A UEFI-based driver for direct memory access and process manipulation, with built-in security features and stealth capabilities]

QEMU/KVM/PVE/VBOX

• https://github.com/HexRaysSA/rax [Self-checking CPU emulator: x86-64/AArch64/Hexagon/RISC-V; differential-verified vs KVM/QEMU; boots Linux, GDB stub; Hex-Rays, Rust, MIT]
• https://github.com/david942j/kvm-kernel-example [Guide]
• https://github.com/airbus-seclab/qemu_blog [Guide]
• https://github.com/quickemu-project/quickemu [Quickly create and run optimized QEMU VMs for Windows/macOS/Linux]
• https://github.com/VMLabDev/vmlab-win3d [Windows guest WDDM/Venus driver package for vmlab QEMU: host-GPU D3D9–12, OpenGL, and Vulkan in Win10/11 VMs]
• https://github.com/VirtualBox/virtualbox [VirtualBox Git mirror]
• https://github.com/lsxll666/AntiCheatToggle [WinForms utility to stop/disable Tencent ACE, Perfect World, and related anti-cheat kernel drivers blocking VirtualBox VM spawn (VERR_INVALID_NAME -104), with one-click restore]
• https://github.com/BigAnteater/KVM-GPU-Passthrough [GPU Passthrough]
• https://github.com/dmaivel/ntoseye [Kernel Debugger]
• https://github.com/ispras/qemu/tree/windbg [Windbg]
• https://github.com/cyberus-technology/virtualbox-kvm [VirtualBox with KVM Backend]
• https://github.com/quic/gunyah-hypervisor [Type-1 hypervisor for ARM64]
• https://github.com/Qemu-Gang
• https://github.com/memflow/memflow-kvm
• https://github.com/IntroVirt/IntroVirt [Guest introspection library]
• https://github.com/weltling/virtio-villain-mshv [Linux MSHV UAPI test suite for partition lifecycle and VP state via nested Hyper-V (Virtio Villain, Cloud Hypervisor or OpenVMM)]
• https://github.com/MisterY52/apex_dma_kvm_pub
• https://github.com/SamuelTulach/BetterTiming [Bypass CPU Timing]
• https://github.com/WCharacter/RDTSC-KVM-Handler [Bypass RDTSC]
• https://github.com/batusan/Hardened-qemu [Hidden QEMU]
• https://github.com/zhaodice/qemu-anti-detection [Hidden QEMU]
• https://wbenny.github.io/2025/06/29/i-made-my-vm-think-it-has-a-cpu-fan.html [I made my VM think it has a CPU fan]
• https://github.com/kila58/qemu-patched [Hidden QEMU]
• https://github.com/Scrut1ny/Hypervisor-Phantom [Hidden QEMU]
• https://github.com/zhaodice/proxmox-ve-anti-detection [Hidden PVE]
• https://github.com/tteck/Proxmox [PVE Helper Scripts]
• https://github.com/nyx-fuzz/QEMU-Nyx [Intel-PT]
• https://github.com/doomedraven/Tools/blob/master/Virtualization/kvm-qemu.sh [QEMU Script]
• https://github.com/GlacierW/MBA [QEMU Malware Behavior Analyzer]
• https://github.com/Qemu-Gang/Escape-from-TuxKov [EFT]
• https://github.com/LWSS/Ape-ex-Abominations [Apex]
• https://github.com/Qemu-Gang/QemuUnrealDumper-4.25 [UE SDK Dump By QEMU]
• https://github.com/panda-re/panda [Platform for Architecture-Neutral Dynamic Analysis]
• https://github.com/cs1ime/blacksun-framework [Framework for game cheat development]
• https://github.com/cs1ime/ceserver-rawmem [CE]
• https://github.com/gmh5225/kvm-csgo-cheat [CSGO]
• https://github.com/atombottle/cs2_kvm_dma [CS2]
• https://github.com/gmh5225/cs16-trigger-kvm [CS1.6]
• https://github.com/tenclass/mvisor [C++ remake]
• https://github.com/k3v1n1990s/docker-win [wsl2]
• https://github.com/SingularityCloud/KVM.Performance [ioapic]
• https://github.com/xqemu/xqemu [Play original Xbox games]
• https://github.com/alephsecurity/xnu-qemu-arm64 [xnu]
• https://github.com/ktock/qemu-wasm [QEMU on browser]

Wine

• https://github.com/ValveSoftware/Proton [Steam]
• https://github.com/pgarba/ptrace_read_teb [use ptrace to read the TEB of a process on Linux]
• https://github.com/redecorate/Holodori-Kernel-Bypass [Userspace emulation of Hololive Dreams usrdrv017964 kernel anti-cheat for Wine/Proton]
• https://github.com/dazi2011/crossover-patcher [Experimental CrossOver patcher to improve compatibility with Windows games protected by anti-cheat]
• https://github.com/Zagrios/Obelisk [Open-source Apple silicon macOS launcher for Steam/Epic/GOG with Voile Wine runtime and voile-lkd for Windows and Linux anti-cheat–supported titles]
• https://github.com/CDJuaum/RunEXE [Python PE analyzer and Wine launcher that flags kernel anti-cheat/DRM blockers and auto-provisions prefixes and dependencies before running Windows games on Linux]
• https://github.com/Glory42/RigCheck [Rust Linux desktop app that verdicts Steam games against your hardware, ProtonDB, and anti-cheat Linux blockers; local-first]
• https://github.com/ertunc-ozbay/pointblank-linux [Rust standalone launcher to run Point Blank (Zepetto/TAM) on Linux with unmodified CheatBlocker anti-cheat via Wine-GE/Proton, TLS-aligned runner, and prefix setup]
• https://github.com/BlaMacfly/ArchMod [Native Rust/Tauri cheat panel for Steam games on Proton: launch Windows trainers in the correct prefix, scan memory natively, and share community address profiles]
• https://github.com/DeckCheatz/DeckCheatz [AGPL Rust trainer launcher for Steam Deck and Linux with Flatpak/Nix packaging and Proton/Wine-friendly trainer UI]
• https://github.com/Qiming-Liu/Decky-Game-Cheats-Manager [Decky Loader plugin to search, download, and launch Game Cheats Manager trainers on Steam Deck with Proton sidecars and per-game associations]

Anti Screenshot

• https://github.com/KANKOSHEV/NoScreen [Hide Window]
• https://github.com/gmh5225/dwmhook [DWM]
• https://github.com/wongfei/wda_monitor_trick
• https://github.com/Mes2d/Screenshot-Detection-Bypass [BitBlt]
• https://github.com/oakboat/DisableNvidiaScreenshot [DWM]

Spoof Stack

• https://github.com/mgeeky/ThreadStackSpoofer
• https://github.com/danielkrupinski/x86RetSpoof
• https://github.com/Apex-master/return-address-spoofing
• https://github.com/Peribunt/Exception-Ret-Spoofing
• https://github.com/Peribunt/Ret-Spoofing
• https://github.com/WithSecureLabs/CallStackSpoofer
• https://github.com/gmh5225/CallStackSpoofer-2
• https://github.com/Barracudach/CallStack-Spoofer
• https://github.com/frkngksl/NimicStack
• https://github.com/thesecretclub/callout-poc
• https://github.com/veryboreddd/Return-address-spoofer
• https://www.unknowncheats.me/forum/anti-cheat-bypass/512002-x64-return-address-spoofing.html
• https://github.com/Kudaes/Unwinder [Another approach to thread stack spoofing]
• https://github.com/klezVirus/SilentMoonwalk [a TRUE call stack spoofer]
• https://github.com/gmh5225/spoof-stack-SafeCall [header only]
• https://github.com/fortra/hw-call-stack [HWBP]
• https://github.com/evilashz/ProxyAPICall [Custom stack call]
• https://github.com/Kudaes/Shelter [ROP-based sleep obfuscation]
• https://github.com/susMdT/LoudSunRun [Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven]
• https://github.com/gmh5225/Fenrir [Stack spoofing using jmp rdi]
• https://github.com/gmh5225/StackSpoofer_Macro [An easy-to-use and powerful Macro for Stack Spoofing]
• https://github.com/HulkOperator/Spoof-RetAddr [Spoofing the return address of a WinAPI call by modifying the stack]
• https://github.com/klezVirus/BYOUD [BYOUD is a framework for x64 stack spoofing on Windows. It tackles a complete opposite approach from classic stack spoofing, manipulating unwind metadata to hide arbitrary chunks of the call chain in debuggers and EDRs]
• https://github.com/Sizeable-Bingus/BingusLdr [Crystal Palace DLL loader with CET-compatible stack spoofing, EAF-compatible API resolution, heap/image masking]
• https://github.com/xec412/NocturneLdr [CET-compatible Windows x64 shellcode loader — fully backed call stacks via code-cave injection into signed module .text, RtlAddFunctionTable + inverted function table collapse, donor unwind metadata; CRT-free, DJB2 API hash, EAF/ShieldedRead, Zilean sleep obfuscation]

Hide

• https://github.com/JKornev/hidden
• https://github.com/sina85/hide-file [Hide File]
• https://github.com/ch3rn0byl/ANTfs [Delete File]
• https://github.com/KANKOSHEV/NoScreen [Hide Window]
• https://github.com/gmh5225/WindowProtect [Hide Window]
• https://github.com/nlepleux/MappedCallback [Hide Callback]
• https://github.com/rogerxiii/kernel-codecave-poc [Find Codecave]
• https://github.com/armvirus/SinMapper [Manual Map In Signed Driver]
• https://github.com/0xf1a/DSMM [Discarded Driver Section Manual Map]
• https://github.com/ekknod/sumap [EFI Manual Map]
• https://github.com/VollRagm/lpmapper [Manual Map To Large Page Driver]
• https://github.com/armvirus/CosMapper [Signed Driver Map]
• https://github.com/gmh5225/HideDriverTesting [Hide Driver]
• https://github.com/IcEy-999/Drv_Hide_And_Camouflage [Hide Driver]
• https://github.com/Kudaes/Puzzle [Windows minifilter abuse PoCs for stealth and concealment]
• https://github.com/zensenzay/memfilter-fn-driver- [Minifilter driver for file/registry hiding, handle access stripping, and cross-process MDL memory via fltmgr comm port]
• https://github.com/wesmar/VaultGuard [Folder and file protection via kernel FSFilter minifilter — pure x64 MASM, zero CRT (~60 KB); hide, lock, read-only or block execution; Win11 GUI with Mica, scriptable CLI, drag-and-drop, per-process trusted bypass]
• Exploring CI.dll and Bigpool Cache [Driver Trace Cleaner]
• https://github.com/BadPlayer555/TraceCleaner [Driver Trace Cleaner]
• https://github.com/Sentient111/ClearDriverTraces [Driver Trace Cleaner]
• https://github.com/KelvinMsft/NoTruth [Hide Memory By VT]
• https://github.com/EBalloon/MapPage [Self Map Driver]
• https://github.com/Compiled-Code/eac-mapper [Self Map Driver]
• https://github.com/nbqofficial/HideDriver [Hide Driver By Modify Flink/Blink]
• https://github.com/ExpLife0011/HideDriver [Hide Driver By MiProcessLoaderEntryk]
• https://github.com/gmh5225/Driver-HideKernelThread-IoCancelIrp [Hide Kernel Thread]
• https://github.com/kitty8904/blanket [Hide Kernel Thread]
• https://github.com/jxy-s/herpaderping [Hide Process/File]
• https://github.com/Cracked5pider/KaynStrike [Spoofs Thread Start Address]
• Using .reloc section to replace the typical allocation calls
• https://github.com/longpoxin/hideroot [Magisk]
• https://github.com/Rwkeith/Diglett [Hide Kernel Thread]
• https://github.com/gmh5225/Driver-SessionMapper [Session Driver]
• https://github.com/gmh5225/Map-file-in-system-space [MiMapViewInSystemSpace]
• https://github.com/gmh5225/Driver-DriverNoImage [Hijack Driver]
• https://github.com/gmh5225/Driver-Systemthread-from-PspCidTable-src [Hide Process/Thread/Handle]
• https://github.com/reveny/Android-Library-Remap-Hide [Remap a library for Android]
• https://github.com/Anatdx/Kasumi [Kernel-level path manipulation and hiding framework for Android GKI/Linux]
• https://github.com/rad9800/BootExecuteEDR [BootExecute EDR Bypass]

Anti Forensics

• https://github.com/PaulNorman01/Forensia
• https://github.com/ashemery/Anti-Forensics

Triggerbot & Aimbot

• https://github.com/changeofpace/MouHidInputHook
• https://github.com/gmh5225/AcDrv [mouse hook]
• https://github.com/ekknod/MouseClassServiceCallbackTrick
• https://github.com/ekknod/MouseClassServiceCallbackMeme
• https://github.com/blackhades00/PareidoliaTriggerbot
• https://github.com/adspro15/DirectInput
• https://github.com/nbqofficial/norsefire
• https://github.com/petercunha/Pine [Neural Network]
• https://github.com/gmh5225/AI-FPS-b00m-h3adsh0t [Neural Network]
• https://github.com/univrsal/input-overlay [Keyboard Mapper]
• https://github.com/Miffyli/gan-aimbots [Machine Learning]
• https://github.com/RootKit-Org/AI-Aimbot [Machine Learning YOLOv5]
• https://github.com/ai-aimbot/AIMr [Python YOLO screen-capture AI aimbot with CLI/GUI and optional hardware input paths]
• https://github.com/AMXZzzz/SF_TRT_61 [Machine Learning YOLO]
• https://github.com/Fragmentaim/Auto_aim [DXGI + TensorRT + driver-level input]
• https://github.com/Passer1072/RookieAI_yolov8 [Machine Learning YOLOv8]
• https://github.com/Leksa667/YOLOv8-Overlay-CS2 [YOLOv8 in CS2]
• https://github.com/dqforgive-sudo/pubg-ai-yolov4 [PUBG yolov4]
• https://github.com/lkeai2007/yolov5_PUBG [PUBG yolov5]
• https://github.com/Hellonihaohh/yolo-v8s [PUBG yolo dataset]
• https://github.com/Hellonihaohh/yolo-v8m [PUBG yolo dataset]
• https://github.com/lehmenkuehler/camera-triggerbot [Camera Triggerbot]
• https://github.com/BuddyBoi/KernelMoveMouse [gptCursorAsync]
• https://github.com/Zpes/mouse-input-injection [NtUserInjectMouseInput]
• https://github.com/gmh5225/Overwatch-1-cheat-source [NtUserInjectMouseInput]
• https://github.com/gmh5225/NtUserInjectMouseInput-syscall [NtUserInjectMouseInput SYSCALL]
• https://github.com/gmh5225/ClickPic [OpenCV + Triggerbot]
• https://github.com/gmh5225/OpenCV-SmartAimBot [OpenCV + Triggerbot]
• https://github.com/Lexikos/AutoHotkey_L
• https://github.com/tgillam/HumanMouseMovement
• https://github.com/AsfhtgkDavid/windmouse [Human-like mouse movement using WindMouse algorithm]
• https://github.com/Chaoses-Ib/IbInputSimulator [Simulating keyboard, mouse]
• https://github.com/guvenada/Titanium-Macro [Kernel-level input automation engine using an Interception driver wrapper to inject HID events with microsecond timing, aimed at bypassing user-mode input restrictions imposed by anti-cheat and game engines]
• https://github.com/ekknod/logitech-cve [logitech]
• https://github.com/gmh5225/razer-rzctl [Razer]
• https://github.com/vsaint1/kernel-mouse [MouClass]
• https://github.com/gmh5225/android_touch [For Android]
• https://github.com/muchenspace/android_virtualTouch [For Android]
• https://github.com/gmh5225/PTFakeTouch [For IOS]
• https://github.com/M3351AN/mouse_input_injection [NtUserInjectMouseInput]
• https://github.com/M3351AN/Usugumo [Kernel-mode mouse_event]
• https://github.com/BatogiX/logitech-cve [A Rust library for interacting with Logitech virtual driver]

WallHack

• https://github.com/DrNseven/D3D11-Wallhack

HWID

• https://github.com/dword64/Ow-Anti-Flag
• https://github.com/btbd/hwid
• https://github.com/gmh5225/Driver-HWID-btbd-modified
• https://github.com/gmh5225/HWID-Permanent-HWID-Spoofer
• https://github.com/gmh5225/PrecisionSpoofer-CPP
• https://github.com/gmh5225/Hwid-Spoofer-EAC-BE
• https://github.com/semihcevik/hwidspoofer
• https://github.com/Theordernarkoz/Hwid--Spoofer
• https://github.com/Theordernarkoz/Hwid-Spoofer
• https://github.com/gmh5225/Apex-Spoofer
• https://github.com/gmh5225/HWID-EclipsedSpoofer-EAC-BE
• https://github.com/BuzzerFelix/HWIDSpooferEAC
• https://github.com/SamuelTulach/rainbow [EFI]
• https://github.com/gmh5225/-Rainbow---EFI [EFI]
• https://github.com/btbd/wpp [Intercepting DeviceControl via WPP]
• https://github.com/vmcall/owned_alignment [Abusing Alignment]
• https://github.com/gmh5225/HWID-Kernel-Spoofer
• HWID-Spoofer-UD-Fortnite-WarZone-Apex-Rust-Escape-From-Tarkov-and-all-EAC-BE-Games-IMGUI-Loader-Base
• https://github.com/SamuelTulach/mutante
• https://github.com/Veuqx0/ImGui-Spoofer-Leaked
• https://github.com/gupr0x4/HWID-Spoofer-for-Fortnite-and-Valorant
• https://github.com/gmh5225/Full-Hwid-Spoofer-V6
• https://github.com/gmh5225/HWID-SteamSpywareTerminator [Steam]
• https://github.com/SamuelTulach/negativespoofer [EFI]
• https://github.com/Th3Spl/PerfectSMBios [EFI SMBIOS serial spoof before bootx64.efi; no ntoskrnl/winload pointers; Linux-capable]
• https://github.com/Alex3434/wmi-static-spoofer
• https://github.com/zensenzay/eac-spoofer-meme [Kernel HWID spoofer source for SMBIOS WMI, disk/volume, GPU, network, EFI, and registry modules]
• https://github.com/gmh5225/hwid-spoofer
• https://github.com/namazso/hdd_serial_spoofer
• https://github.com/gmh5225/EASY-HWID-SPOOFER
• https://github.com/singhhdev/Spoofer-AMIDEWIN
• https://github.com/gmh5225/HWID-Pasted-Hwid-Spoofer
• https://github.com/Skotschia/hwid_spoofer
• https://github.com/SamuelTulach/tpm-spoofer [TPM]
• https://github.com/s0ngidong3/TPM-SPOOFER [TPM]
• https://github.com/Android1500/AndroidFaker [Android]
• https://github.com/Scrut1ny/Windows-Spoofer
• https://github.com/roomyoni/Nvidia-GPU-Spoof [Spoofing the NVIDIA GPU UUID by modifying "nvlddmkm.sys"]
• https://github.com/5ec1cff/TrickyStore [trick of keystore. Android 12 or above is required]
• https://github.com/beakthoven/TrickyStore [A trick of keystore. Android 10 or above is required]

Bypass Page Protection

• https://github.com/illegal-instruction-co/CountHook [WorkingSet]

SDK CodeGen

• https://github.com/cursey/sdkgenny
• https://github.com/praydog/luagenny
• https://github.com/ssyuqixe/obfCoder
• https://github.com/Jadis0x/URKit [Native C++ mod SDK generator for Windows x64 Unity games (Mono/IL2CPP) with CMake project scaffolding, loaders, hooks, ImGui overlay, and optional MCP dev bridge]

Game Engine Explorer:Unreal

• https://github.com/UE4SS-RE [UE RE]
• https://github.com/praydog/UEVR [Universal Unreal Engine VR Mod (4.8 - 5.4)]
• https://github.com/gmh5225/shootergame-Hack [ShooterGame Demo]
• https://github.com/cqcallaw/shootergame [ShooterGame Demo]
• https://github.com/CorrM/CleanCheat [Game cheat base]
• https://github.com/trumank/patternsleuth [Unreal Engine address scanner and test suite]
• https://github.com/trumank/jmap [Unreal Engine reflection data format and extractor]
• https://github.com/Encryqed/Dumper-7 [SDK Dump for all of UE4 and UE5]
• https://github.com/TheHolyOneZ/Zircon-UE-Dumper [Runtime UE 4.22–5.7 reflection dumper: C++ SDK, .usmap, IDA/Ghidra/BN types, Frida bindings, and Python stubs from live process, minidump, or disk]
• https://github.com/Kiyogitpy/wardogs-data-docs [Defensive-research Wardogs (UE 5.7) reference: cooked data exports, UEDumper C++ SDK, mappings, and cross-linked docs with responsible disclosure]
• https://github.com/Spuckwaffel/UEDumper [SDK Dump for UE 4.19 - 5.2]
• https://github.com/BadBrojo/UEDumper-MemProcFS [UEDumper+MemProcFS 4.19 - 5.2]
• https://github.com/BobHUnrealTech/UnrealSDKDumper-4.25 [SDK Dump for UE 4.23 - 4.27]
• https://github.com/Shhoya/Shh0yaUEDumper [SDK Dump]
• https://github.com/guttir14/UnrealDumper-4.25 [SDK Dump]
• https://github.com/EZFNDEV/UEDumper [SDK Dump]
• https://github.com/gmh5225/frida-ue4dump [SDK Dump For Android/IOS]
• https://github.com/MJx0/AndUE4Dumper [SDK Dump For Android]
• https://github.com/kp7742/UE4Dumper [SDK Dump For Android]
• https://github.com/gmh5225/UE4-Apk-Dumper [SDK Dump For Android]
• https://github.com/gmh5225/UE4Dumper_Emulator [SDK Dump For Android]
• https://github.com/BigWhite666/BigWhiteTool [SDK Dump For Android]
• https://github.com/MJx0/iOS_UE4Dumper [SDK Dump For IOS]
• https://github.com/yring-me/ts-ue4dumper [TypeScript and Frida UE4dumper]
• https://github.com/CorrM/Unreal-Finder-Tool [SDK View]
• https://github.com/spudgy/UnrealEngine4-SwissKnife [SDK View]
• https://github.com/shalzuth/UnrealSharp [SDK View]
• https://fearlessrevolution.com/viewtopic.php?f=23&t=14414 [UE4 CE Table]
• https://github.com/cursey/ue4genny [SDK Generator]
• https://github.com/Zebratic/UE4Injector [Inject]
• https://github.com/N-T33/UE4-Silent-Aim [Aimbot]
• https://github.com/YMY1666527646/ue4_base [SDK Template]
• https://github.com/percpopper/UE4-Freecam [FOV Changer]
• https://github.com/RussellJerome/UnrealModLoader [Mod Loader]
• Intercept ProcessEvent calls on any game object (Unreal Engine 4)
• UE4 Cheat Source Code
• https://github.com/gmh5225/ue4_cheat_engine [UE4 Cheat For Android]
• unpack, pack, list, check and mount Unreal Engine 4 .pak archives
• https://github.com/Qemu-Gang/QemuUnrealDumper-4.25 [SDK Dump By QEMU]
• https://github.com/gmh5225/UE-UnrealEngineSDK [Universal Cheat development kit]
• https://github.com/atenfyr/UAssetGUI [Viewing and modifying UE4 game assets]
• https://github.com/UE-Explorer/UE-Explorer [Browser and decompiler for UE packages]
• https://github.com/UE4SS-RE/RE-UE4SS [Re-Host of Unreal Engine 4/5 Scripting System]
• https://github.com/gmh5225/Unreal-Engine-5-PDB [UE5 PDB]

Game Engine Explorer:Unity

• https://github.com/mono/mono [mono]
• https://github.com/dnSpy/dnSpy-Unity-mono [mono]
• https://github.com/Misaka-Mikoto-Tech/MonoHook [mono hook]
• https://github.com/dnSpy/Mono.Debugger.Soft [Mono Debugger]
• https://github.com/gmh5225/unispectDMAPlugin [Mono Dump + DMA]
• https://github.com/Perfare/Il2CppDumper [Il2Cpp Dump]
• https://github.com/bombaris34/il2cpp-pdb [Il2CppDumper fork with native Rust PDB generator for x64 PE (GameAssembly.dll) — function names, full struct types and typed prototypes, auto-loaded by IDA]
• https://github.com/khang06/Il2CppDumper-YuanShen [Il2Cpp Dump for Genshin Impact]
• https://github.com/Perfare/Il2CppDumper [Il2Cpp Dump GUI]
• https://github.com/Poko-Apps/Il2cppDumpDroidGUI [Il2Cpp Dump GUI]
• https://github.com/shalzuth/Il2CppRuntimeDumper [Il2Cpp Dump Runtime]
• https://github.com/Perfare/Zygisk-Il2CppDumper [Il2Cpp Dump for Android Platform]
• https://github.com/Darlenepurpleblack444/Zygisk-Il2CppFucker [Zygisk module for live IL2CPP metadata dumping, in-process memory editing, method invocation, and Lua scripting on Android Unity games]
• https://github.com/kp7742/IL2CPPDumper [Il2Cpp Dump for Android Platform]
• https://github.com/yukiarrr/Il2cppSpy [Unity IL2CPP Disassembler (for apk)]
• https://github.com/djkaty/Il2CppInspector [Il2Cpp Dump]
• https://github.com/oobbb/android-il2cpp-modspeed [Il2Cpp hack speed]
• https://github.com/gmh5225/qiling-il2cpp-dump [Il2Cpp Dump using qiling]
• https://github.com/sinai-dev/UnityExplorer
• https://github.com/4ch12dy/il2cpp [Il2Cpp Version]
• https://github.com/nneonneo/Il2CppVersions [Il2Cpp Version]
• https://github.com/sneakyevilSK/IL2CPP_Resolver [IL2CPP resolver]
• https://github.com/extremeblackliu/IL2CPP_Resolver_External [IL2CPP resolver]
• https://github.com/knah/Il2CppAssemblyUnhollower
• https://github.com/reahly/mono-external-lib [External Mono Example]
• https://github.com/Compiled-Code/external-il2cpp [Il2Cpp]
• https://github.com/zushinzackery2-ship-it/Unity202x-eXternalrEsolve [Header-only C++17 Unity 2020–2023 external runtime introspection (Mono/IL2CPP GOM scan, IL2CPP metadata, W2S, offline dumpsdk)]
• https://github.com/Octowolve/Il2CppSDKGenerator [Il2Cpp SDK generator for Android]
• https://github.com/00christian00/UnityDecompiled [An unofficial repo of decompiled Unity dll files]
• https://github.com/knah/Il2CppAssemblyUnhollower [Managed->IL2CPP proxy assemblies]
• https://github.com/CodeCracker-Tools/MegaDumper [Dump native and .NET assemblies]
• https://github.com/SeriousCache/UABE [Extracting assets]
• https://devxdevelopment.com/Unpacker [Extracting assets]
• https://github.com/AssetRipper/AssetRipper [Extracting assets]
• https://github.com/Perfare/AssetStudio [Extracting assets]
• https://github.com/Razviar/assetstudio [Extracting assets/2025 updated]
• https://github.com/axhlzy/Il2CppHookScripts [Il2Cpp Hook Scripts]
• https://github.com/gmh5225/Il2Cpp-HookScripts [Il2Cpp/Mono Hook Scripts]
• https://github.com/BataBo/ACEPatcher [.NET Patcher]
• A tool translate a apk file to common android project and support so hook include il2cpp c++ scaffolding
• https://github.com/xxzzddxzd/unitySpeedTools [IOS Speed Tools]
• https://github.com/gmh5225/il2cpp-finder [Il2Cpp Finder]
• https://github.com/gmh5225/frida-il2cpp-datacollector [Il2Cpp datacollector for Android/IOS]
• https://github.com/BepInEx/BepInEx [plugin/modding framework]
• https://github.com/RectangleEquals/UnityRuntimeAnalysisAgent [BepInEx in-game plugin for Unity Mono introspection, instrumentation, and controlled runtime modification; runtime half of UnityLudometryMCP]
• https://github.com/BepInEx/BepInEx.Utility.IL2CPP [Universal BepInEx utility plugins for IL2CPP Unity games — graphics settings, window resize, mute in background, Message Center, ByteFiddler, ProcessAffinityOverride]
• https://github.com/gmh5225/IL22CPP [ReMake of Il2cpp internal reflection system in C++]
• https://github.com/sunnamed434/UnityVulnerableEntryPoint [Looks for a vulnerable entry point]
• https://github.com/gmh5225/MatScan [A multi-threaded rust material scanner]
• https://github.com/vfsfitvnm/frida-il2cpp-bridge [Frida dump Il2Cpp]
• https://github.com/issuimo/UnityResolve.hpp [Unity cheat framwork]
• https://github.com/ByNameModding/BNM-Android [Modding il2cpp games]
• https://github.com/SsageParuders/CheatUnityGames [Unity cheat framwork]
• https://github.com/sanqiuu/AndroidCheatTemplate [Unity cheat framwork]
• https://github.com/matheusbranhann/taskbarhero-bot [C# Unity IL2CPP memory trainer/bot for TaskbarHero with ACTk bypass, batch-read automations, and WPF control panel]

Game Engine Explorer:Source

• https://github.com/anarh1st47/Source2Dumps [Dump]
• https://github.com/CallumCVM/ValveGen [SDK Generator]
• https://github.com/praydog/Source2Gen [SDK Generator]
• https://github.com/neverlosecc/source2gen [SDK Generator]
• https://github.com/keowu/sourceengineexplorer [Explorer]
• https://github.com/neverlosecc/source2sdk

Explore UWP

• https://github.com/Wunkolo/UWPDumper
• https://github.com/Francesco149/uwpinject [dll injector for uwp apps]
• https://github.com/Francesco149/uwpspy [dll that hooks uwp interfaces]

Explore AntiCheat System:VAC

• https://github.com/danielkrupinski/VAC-Bypass-Loader
• https://github.com/danielkrupinski/VAC-Bypass [User-mode VAC bypass (C) that aborts VAC scans so CE/cheats can attach without VAC Error]
• https://github.com/danielkrupinski/vac-hooks
• https://github.com/mdilai/Shtreeba [Injector]
• https://github.com/zyhp/vac3_inhibitor
• https://github.com/krispybyte/Vook [VAC hook]
• https://github.com/ioncodes/vacation3-emu [VAC3 module emulator]
• https://github.com/gmh5225/Vac-Emulator [VAC Emulator]
• https://github.com/ianveig29/como-funciona-vac [Technical writeup of VAC/CS2 internals from public reverse-engineering sources]
• https://github.com/shefben/VALVeAntiCheat1 [Reverse-engineering notes and rebuild tooling for GoldSrc/WON-era VAC1 ModuleC/ModuleS bytecode VM modules (2002–2004)]
• https://github.com/gmh5225/VACDumper [Dump]
• https://github.com/x1tan/vac3-dumper [Dump]
• https://github.com/nevioo1337/VAC-ModuleDumper [Dump]
• https://github.com/Jackbail4/VAC-Bypass
• https://github.com/gmh5225/PreventVAC
• https://github.com/b1scoito/cozinha_loader [Injector]
• https://github.com/shuruk421/VACKeyRetrieval [Retrieves VAC module ice encryption key]
• https://github.com/RenardDev/DumpVAC [PoC to disable VAC and dump modules with automatic decryption]
• https://github.com/crvvdev/vac-bypass-kernel [Fully working kernel-mode VAC bypass]

Explore AntiCheat System:EAC

• https://github.com/thesecretclub/CVEAC-2020 [Integrity Checks]
• https://github.com/Schnocker/EAC_dbp [Debug]
• https://github.com/Compiled-Code/eac-mapper [Eac Mapper]
• https://github.com/EBalloon/MmCopyMemory [Bypass MmCopyMemory]
• https://github.com/gmh5225/EAC-Kernel-Packet-Fucker [Packet Fucker]
• https://github.com/gmh5225/EAC-HydraHook [Packet Fucker]
• https://github.com/gmh5225/EazyAntiCheatSRC [Reversed Source]
• https://github.com/chaeyk/eac-leak [EAC sdk's memory leak]
• https://github.com/gmh5225/EAC [SDK]
• https://github.com/ksoju/Eac-Bypass
• https://github.com/EBalloon/EasyAntiCheat-SRC
• https://github.com/gmh5225/EAC-EasyAntiCheat-Src-1
• https://www.unknowncheats.me/forum/anti-cheat-bypass/458928-eacs-maskable-interrupt-callback.html [NMI]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/464943-eac-nmi-bypass-callbacks.html [NMI Bypass]
• https://github.com/gmh5225/EasyAntiCheat-Reversing
• https://github.com/BishopTopG/all-about-eac [Memflow-based external VM reverse-engineering dossier on a captured EasyAntiCheat_EOS.sys build, documenting kernel callbacks, minifilter policy, and device IPC with reproducible evidence]
• https://github.com/19h/eac-analysis [eac.elf VM reconstruction: dlopen/trace harness, dispatch & VMTAIL probes, bytecode recover/IR/CFG, handler ISA, static path replay, MBA reducers; Linux ELF]
• https://github.com/Sinclairq/hiearchy-eac [Integrity Checks]
• https://github.com/Rat431/EAC_Emu [Simple EasyAntiCheat x64 emulator]
• https://github.com/xBrunoMedeiros/eac-overlay [EAC Overlay]
• https://github.com/gmh5225/ce-EasyAntiCheat-Bypass [UD CE]
• https://github.com/ioncodes/pooldump [Extract the DLL that EACs manualmaps into the game process]
• https://github.com/gmh5225/EAC-VmCheck.asm [Virtual machine checking]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/561479-eacs-instrumentation-callback-bypass.html
• https://github.com/gmh5225/Eac-Injector-Driver [Injector]
• https://github.com/gmh5225/EAC-EasyAntiCheatMemorySig [Memory sig maker]
• https://github.com/gmh5225/EAC-shellcode-1 [Shellcode]
• https://github.com/gmh5225/EAC-Driver-UD-for-now [Sample]
• https://github.com/lguilhermee/EAC-Extractor-Utility [Decrypt and Extract the files from the EAC]
• https://advancedvectorextensions.github.io/posts/easyanticheat-eprocess-emulation [EProcess Emulation]
• https://advancedvectorextensions.github.io/posts/easyanticheat-cr3-protection [CR3 Protection]
• https://github.com/Sinclairq/hierarchy-eac [Bypassing self-integrity]
• https://github.com/SamuelTulach/eac_cr3_shuffle [Bypassing CR3 protection]
• https://github.com/gmh5225/Bypassing-EasyAntiCheat-Integrity-check [Bypassing integrity check]
• https://github.com/CamxxCore/EasyAntiCheat-Emulator [EAC Emulator]
• https://github.com/gmh5225/EAC-Runtime-Extractor [Extracts eac's driver at runtime without it touching the disk]
• https://gist.github.com/gmh5225/b89938f55bcb65637168f88a433c3d4d [Skip EAC thread detection]
• https://github.com/kprprivate/EAC-CR3-BYPASS [A simple UM + KM example of how to bypass EAC CR3]

Explore AntiCheat System:BE

• https://github.com/Schnocker/NoEye
• https://github.com/ZoondEngine/NoBastian_v2 [Elevating Handle By LSASS]
• https://github.com/haram/splendid_implanter
• https://github.com/HadockKali/battleye-user-mode-bypass [SetWindowsHookExW]
• https://github.com/gmh5225/BE-Emulator
• https://github.com/masterpastaa/BattlEye-Handler-BYPASS
• https://github.com/dllcrt0/battleye-decryption
• https://github.com/dllcrt0/bedaisy-reversal
• https://github.com/experienceds/battleye-re [BEDaisy.sys RE reference: IOCTL/API/anti-DMA]
• https://github.com/AkitaYui/AkHeartbeat-BE [GTA5 Enhanced BE heartbeat bypass: client–driver RE notes, AOB scan, external D3D11 overlay menu]
• https://github.com/experienceds/pubg-p2c-re [PUBG P2C loader RE report: VMProtect, DWM overlay injection, BattlEye bypass, Zakynthos detection]
• https://github.com/brandenbailey23/r6-siege-battleye-launch-bug [Documented R6 Siege Y11S3 BattlEye/Sentinel handshake failure on standard launch paths, with timeline, driver load evidence, and working bypass via RainbowSixHelper.exe]
• https://github.com/dllcrt0/battleye-shellcode [shellcode]
• https://github.com/gmh5225/BE-BattlEye_shellcode [shellcode]
• https://github.com/Compiled-Code/be-injector [Attack COW]
• https://github.com/Aki2k/BEDaisy
• https://github.com/gmh5225/BadEye
• https://github.com/zouxianyu/BlindEye [Packet Fucker]
• https://github.com/huoji120/goodeye
• https://github.com/LilPidgey/BEClient
• https://github.com/lguilhermee/Battleye-Shellcode-Dumper [BEClient2.dll Dumper]
• https://github.com/es3n1n/be-shellcode-tester [BattlEye shellcodes tester]
• https://github.com/steffalon/battleye-rust [BattlEye RCON UDP connection]
• https://github.com/Hypercall/FakeEye [Emulator]
• https://github.com/mexploitui/FakeEye [Emulator]
• https://github.com/tr1xxx/battleye-region-walking
• https://github.com/SurgeGotTappedAgain/Pink-Eye
• https://github.com/R4YVEN/beservice_intcallbacks [Instrumentation Callback]
• https://github.com/gmh5225/bedaisy-bypass [BEDaisy.sys report bypass]

Explore AntiCheat System:EQU8

• https://blog.back.engineering/12/08/2021
• https://github.com/kkent030315/EQU8-PoC
• https://github.com/hotline1337/equ8_bypass

Explore AntiCheat System:Ricochet

• https://github.com/weak1337/ricochet_deobfuscator
• https://github.com/gmh5225/AurumRE
• https://github.com/gmh5225/ricochet-disabler

Explore AntiCheat System:RIOT

• https://github.com/Nuxar1/DecryptionDumper [Dump]
• https://github.com/lil-skies/val-exception-handler [ZwRaiseException Dump]
• https://github.com/gmh5225/Dump-val-exception-handler [RtlpCallVectoredHandlers Dump]
• https://github.com/gmh5225/VanguardImportResolver [Resolve vgk's protected imports]
• https://github.com/armvirus/VanguardTrace [Decrypting and intercepting encrypted imports of Vanguards Kernel Driver]
• https://www.unknowncheats.me/forum/anti-cheat-bypass/578829-unveiling-unseen-vanguards-guarded-regions.html [CR3 Protection]
• https://github.com/gmh5225/vgk-illegal-pf-logger [VGK's illegal PF]
• https://github.com/gmh5225/KernelSnippets/blob/main/VGK_SwapContextHk.h [VGK's SwapContextHk]
• https://github.com/gmh5225/augur-riot [Riot Vanguard streamed module to PE converter. Resolves hashed imports, reconstructs sections, and writes valid DLLs from RITO format binaries]
• https://github.com/luavmload/vanguard-update-notifier [Discord bot that polls Riot clientconfig, hashes Vanguard setup files, and alerts on anti-cheat updates]
• https://github.com/Karwmam/Vanguard-Service-Manager-vGK-Control [Windows tools to check Riot Vanguard/vgk status and toggle auto-start]
• https://github.com/shinishiz/VanguardSwitch [Windows utility to stop Riot Vanguard (vgc/vgk) when idle and re-enable it without reboot on PCs without official Vanguard On-Demand]

Explore AntiCheat System:XignCode

• https://github.com/gmh5225/XignCode-Dump
• https://github.com/gmh5225/XignCode3-bypass-alternative
• https://github.com/gmh5225/XignCode3-bypass
• https://github.com/miyakejima/xigncode3-blackdesert [Full-pipeline static reconstruction and security-property analysis of XIGNCODE3 on Black Desert]

Explore AntiCheat System:ACE

• https://github.com/H3d9/sguard_limit
• https://github.com/moeskia/fuckAce [Windows utility that throttles Tencent ACE (SGuard) processes via IDLE priority, last-CPU affinity, and EcoQoS to reduce anti-cheat overhead]
• https://github.com/rogxo/ReadPhys
• https://github.com/libtersafe/dfm_android_unicorn [Coordinate Decryption (Android ARM64)]
• https://github.com/wwweeeqqu/honor-of-kings-RE-research [Honor of Kings mobile RE: KernelPatch KPM reads, Tencent ACE analysis, IL2CPP/native notes]
• https://github.com/not1cyyy/Anti-Cheat-Amateur [Stealth kdmapper kernel driver and virtualized UE memory scanner for Tencent ACE evasion research]
• https://github.com/Lixense/ff-ace-anticheat-analysis [Byte-level RE post-mortem on Tencent ACE (libanogs/libanort) in Free Fire, with IDA tooling and detection catalog]
• https://github.com/stuffed-cat/hide-ace-kernel [KernelSU module that bind-mounts empty files over Tencent ACE kernel /proc/inte_* integrity nodes to hide KO/syscall-table reports from user space]

Explore AntiCheat System:G-Presto

• https://github.com/ARandomPerson7/G-Presto-Anti-Cheat-Reverse-Engineered/blob/main/Main.cpp

Explore AntiCheat System:NeacSafe

• https://github.com/gmh5225/NeacSafe-Analysis

Explore AntiCheat System:BadlionAnticheat

• https://github.com/KiFilterFiberContext/BadlionLogger

Explore AntiCheat System:Byfron

• https://byfron.com/
• https://www.unknowncheats.me/forum/anti-cheat-bypass/505486-byfron-tech-anti-cheat-released.html
• https://gist.github.com/gmh5225/cbe40345a9400b01329e025478ffb826 [hash]
• https://github.com/gmh5225/byfron-bypass
• https://github.com/atrexus/vulkan [A PE dumper for processes protected by user mode anti-tamper solutions (hyperion, theia, etc.)]

Explore AntiCheat System:FACEIT

• https://github.com/ekknod/EC_PRO-LAN
• https://github.com/redlanterndev/faceoff [Portable Windows utility to disable FACEIT's FACEIT_AC.sys kernel driver and service when not playing CS2, then re-enable before matches (with documented reboot flow)]

Explore AntiCheat System:CS2

• https://github.com/danielkrupinski/cs2-anticheat

Game:MapleStory

• https://forum.ragezone.com/threads/getting-packet-structures-opcodes-using-ida.792436/ [Packet]
• https://github.com/Bratah123/SpiritIDAPlugin [IDA-Plugin]
• https://github.com/icelemon1314/mapleLemon [Private Server-CMS-027]
• https://github.com/ellermister/MapleStory [Private Server-CMS-079]
• https://github.com/mrzhqiang/ms079 [Private Server-CMS-079]
• https://github.com/mimilewis/MapleStory143 [Private Server-CMS-143]
• https://github.com/unsafeblackcat/MapleStoryEx [Private Server-CMS-079]
• https://github.com/gmh5225/maplestory-v83MaplestoryCPP [Private Server-GMS-083 C++]
• https://github.com/Fraysa/Destiny [Private Server-GMS-083 C#]
• https://github.com/Bratah123/ElectronMS [Private Server-KMS-316]
• https://github.com/gmh5225/MapleStory-v113-Server-Eimulator [Private Server-TMS-113]
• https://github.com/izarooni/MapleEzorsia [v83 edits for creating a custom resolution client]
• https://github.com/Bratah123/BattleAnalysis176 [Battle Analysis]
• https://github.com/johnsonjason/MapleStoryBuildFramework [AntiCheat]
• https://github.com/Noosh404/Maplestory-V179-Cheat-Engine [V179 CT]
• https://github.com/gmh5225/MapleStory-HeavenClient [Heaven Client]
• https://github.com/ilia810/MapleUnity [Unity reimplementation of MapleStory v83 client; TDD + clean architecture; C#; NX assets]
• https://github.com/ppodds/UniStory [Unity MapleStory emulator (WIP); target TMS v245; C#; WZ maps/footholds/physics; no server yet]
• https://github.com/MapleStoryUnity/MapleStoryUnity [Unity framework for MapleStory-style MMORPGs; C#; WZ via UnityWzLib; GPL-3.0]
• https://github.com/gmh5225/TWMS-Hacking-Data [TMS CT]
• https://github.com/Inndy/MSDoggy [TMS Old Hack]
• https://github.com/PrinceFroggy/MSB [GMS Old Hack 128-140]
• https://github.com/PrinceFroggy/MSC [GMS Bot]
• https://github.com/gmh5225/Rebirth [Private Server-GMS-095 C#]
• https://github.com/gmh5225/mnwvs196 [Private Server-TMS-196]
• https://github.com/Maxcloud/MapleResearch [GMS-095 Client Analysis]
• https://github.com/gmh5225/MapleStory-CMS95-Client-Address [CMS-095 Client Analysis]
• https://github.com/gmh5225/RustMS [Private Server-Rust]
• https://github.com/gmh5225/WzComparerR2 [Maplestory online Extractor]
• Generate machine learning object detection samples from Maplestory in different formats
• https://github.com/gmh5225/MapleStory-GM-Client [Offline MapleStory Client Emulator]
• https://github.com/gmh5225/maplestory-packer-ModPacker [MapleStory Wolrds .mod file packing/unpacking tools]
• https://github.com/gmh5225/JMSv186 [JMS v186]
• https://github.com/gmh5225/MapleStory-Client [HeavenMS Client]
• https://github.com/gmh5225/MapleStory-Server [HeavenMS Server]
• https://github.com/gmh5225/LibreMaple-Client [LibreMaple Client]
• https://github.com/gmh5225/MapleServerAndroid [GMS 083 server on Android]
• https://github.com/Bratah123/ElectronMS [Private Server-KMS-316]
• https://github.com/gmh5225/AzureV316 [Private Server-KMS-316]
• https://github.com/gmh5225/MapleNecrocer [MapleStory Client Emulator]
• https://github.com/gmh5225/maplestory-artale-explab [Experience gain & HP/MP cost lab for MapleStory Worlds Artale]
• https://github.com/gmh5225/MapleStoryAutoLevelUp [An auto level up script for Maple Story Artale]
• https://github.com/tingwei1111/MapleStory-YOLOv8-Training [YOLOv8 training project for MapleStory object detection using Apple MPS acceleration]
• https://github.com/tingwei1111/maplestory-worlds-automation [YOLO for MapleStory Worlds (Artale)]

Game:Minecraft

• A minecraft server backend written in c++
• https://github.com/AnarchDevelopment/aegledll [Internal Minecraft DX11 DLL client with ImGui overlay and MinHook hooks]
• https://github.com/inpeacedTeams/phantom-client [Lunar Client 1.8.9 internal DLL with JNI/JVMTI, wglSwapBuffers OpenGL hook, and ImGui overlay modules]
• https://github.com/liuyyx/nocturne-client [Cross-version Minecraft Java JVM attach injector and in-process agent (1.8.9–26.3) with mapping tables, LWJGL frame hooks, and OpenGL overlay modules]
• https://github.com/hhhhhffd/_k0t1k-overlay [Cross-loader Minecraft Java in-game overlay via -javaagent: Byte Buddy LWJGL 2/3 hooks (OpenGL and Vulkan), no Minecraft class patches, 1.8 through 26.3+]
• https://github.com/unleg1t/Yuri [Open-source 1.8.9 MCP hacked client with Watchdog/Polar/Grim bypass modules and bundled Java 8 runtime]
• https://github.com/adanainv3-creator/OxClient [Minecraft Bedrock/PE MITM cheat client with protocol relay, combat/movement modules, and ESP]
• https://github.com/eksses/EAFE [Mineflayer elytra autopilot with vanilla physics, FSM navigation, and anti-cheat-aware Bézier flight paths]
• https://github.com/WeiNaYongQ/OmniClutch [Fabric mod for automated elytra/fall clutch saves with configurable anti-cheat-aware timing]
• https://github.com/nekoyahouse/epsilon [Open-source NeoForge and Fabric Minecraft utility client with modular addon system and custom Lumin/PrismRHI rendering stack]
• https://github.com/lolizei/Lenrete-Mod [Open-source Fabric utility/cheat client for Minecraft 26.2 with modular combat, movement, render, and HUD modules]
• https://github.com/PointOfPressure/sunset-client [Rust utility client for Horizon (Minecraft 26.3) with 100+ combat, movement, render, and world modules, ClickGUI, and Meteor-inspired architecture]
• https://github.com/Marcinator31/Vortex-Client [Open-source Fabric 1.21.11 Minecraft utility client with HUD, ESP, waypoints, combat helpers, and in-game preset configuration]
• https://github.com/Gingerbeard5773/dino-printer [Meteor Client addon that prints Litematica schematics with BlockState simulation, raytracing, and anti-cheat-aware placement settings]
• https://github.com/bliper2/jsaclient [Multi-version Minecraft Java utility client (Gradle core/fabric/loader) with movement, visuals, and open-LAN modules; integrates with Meteor when installed]
• https://github.com/xuanfeng0316/MCBotMod [Fabric mod exposing a live Minecraft Java client over TCP/JSON so external tools can drive native client methods for bots and automation]

Game:Sword With Sauce

• https://github.com/1hAck-0/UE4-Cheat-Source-Code

Game:Gunfire Reborn

• https://github.com/gmh5225/AutoGunfireReborn

Game:Fall Guys

• https://github.com/gmh5225/FallGuysSharp
• https://github.com/gmh5225/FallGuys
• https://github.com/gmh5225/Flying-Guys-fully-modified
• https://github.com/gmh5225/FlyingGuys
• https://github.com/repinek/fallguys-frida-modmenu [Android Fall Guys mod menu using Frida and frida-il2cpp-bridge]

Game:Remnant

• https://github.com/gmh5225/RemnantESP

Game:LostArk

• https://github.com/gmh5225/LostArkDumper
• https://github.com/gmh5225/LostArkLogger
• https://github.com/gmh5225/LOST-ARK-SDK
• https://github.com/gmh5225/Lost-Ark-SDK
• https://github.com/gmh5225/LostArk

Game:Battlerite

• https://github.com/gmh5225/BattleriteBot

Game:CrossFire

• https://github.com/gmh5225/titancf
• https://github.com/gmh5225/cfclap

Game:TGame

• https://github.com/gmh5225/nzPerspective [D3D9]

Game:LOL

• https://github.com/LeagueSharp
• https://github.com/gmh5225/LeagueSharp
• https://github.com/ensoulsharp-io
• https://ferrisbot.com/ferrisaio
• https://github.com/gmh5225/EloBuddy-Addons
• https://github.com/gmh5225/LeagueSharp
• https://github.com/gmh5225/LoLClient
• https://github.com/gmh5225/L-Assemblies
• https://github.com/gmh5225/LeagueSharp.Loader
• https://github.com/Kurok00/R3nzSkin [Skin]
• https://github.com/gmh5225/R3nzSkinTFT [Skin]
• https://github.com/gmh5225/LeagueSkinChanger [Skin]
• https://github.com/gmh5225/hh-lol-prophet
• https://github.com/Nuxar1/DecryptionDumper [Dump]
• https://github.com/gmh5225/LeagueDumper [Dump]
• https://github.com/gmh5225/League-Unpacker [Dump]
• https://github.com/gmh5225/lol-offset-dumper [Dump]
• https://github.com/LeagueSandbox
• https://github.com/gmh5225/lol-unpackman
• A bran-new League of Legends assistant software, a replacement for WeGame
• https://github.com/gmh5225/LViewLoL [Python based scripting platform]
• https://github.com/gmh5225/KBotExt [LCU]
• https://github.com/gmh5225/ayaya-league-external [Nodejs based scripting platform]
• https://github.com/gmh5225/TFT-OCR-BOT [TFT]
• https://github.com/gmh5225/VanderLeague [Hypervisor-assisted]
• https://github.com/gmh5225/League-DirectX11-Internal [Internal]
• https://github.com/Vatrials/League-of-Legends-Visuals-Cheat [C++ internal with orbwalker, zoomhack, skin changer, and injector]
• https://github.com/gmh5225/league-base [External]
• https://github.com/gmh5225/lol_patcher

Game:NARAKA

• https://www.unknowncheats.me/forum/other-fps-games/490052-naraka-bladepoint-reversal-structs-offsets.html
• https://github.com/gmh5225/DummyDlls_NARAKA_1_9_21 [Dump]
• https://github.com/Rythorndoran/Naraka-Hack

Game:Thetan

• https://github.com/xkp95175333/Thetan_ArenaSDK

Game:Dota2

• https://github.com/ikhsanprasetyo/dota2dumped [Offset dumper]
• https://github.com/skrixx68/Dota2-Overlay-2.0
• https://github.com/gmh5225/Dota2-Overlay-OffsetUpdater
• https://github.com/gmh5225/dota-cheat
• https://github.com/LWSS/McDota [linux]
• https://github.com/gmh5225/Dota2Cheat

Game:WOW

• https://github.com/helloobaby/wow-IAT-fix
• https://github.com/gmh5225/dumpwow
• https://github.com/adde88/WoWDumpFix
• https://github.com/xakepru/x14.08-coverstory-blizzard
• https://github.com/fail46/OHack [An open-source hack for World of Warcraft]
• https://github.com/adde88/SkyEngine [Wow Lua Unlocker]
• https://github.com/gmh5225/WOW-WowAutoFishing [Auto Fishing]

Game:Warcraft III

• https://github.com/stijnherfst/HiveWE [editor]
• https://github.com/devoltzz/devos-map-doctor [Toolkit to diagnose, unprotect, fix, and port Warcraft III maps (1.24–Reforged) for World Editor and Reforged without modifying originals]

Game:Half-Life 2

• https://github.com/codereversing/hl2aimbot
• https://github.com/codereversing/hl2esp

Game:CS1.6

• https://github.com/gmh5225/hpp-hack
• https://github.com/gmh5225/CSHackCreator-2-Demo
• https://github.com/oxiKKK/oxware
• https://github.com/execnone/simple-cs-16-multihack
• https://github.com/bit-paper/sakura
• https://github.com/eversinc33/1.6_C2 [C2]
• https://github.com/3a1/Zodiak [CS 1.6 Fastcup Full Kernel Driver Cheat]
• https://github.com/3a1/Evelion [External]

Game:CSS

• https://github.com/yoshisaac/CounterStrikeSource-Linux-Trainer [Linux External]
• https://github.com/M3351AN/UkiaRPM [External]

Game:CSGO

• https://github.com/csgohacks/master-guide [Guide]
• https://github.com/Akandesh/blazedumper [Offset]
• https://github.com/frk1/hazedumper [Offset]
• https://github.com/gmh5225/csgo-offsets [Offset]
• https://github.com/ofDataa/offsets [Offset]
• https://github.com/Akandesh/csgo_auto_dumper [Auto Dump]
• https://github.com/dretax/GarHal_CSGO
• https://github.com/danielkrupinski/Osiris
• https://github.com/danielkrupinski/GOESP [Cross-platform]
• https://github.com/danielkrupinski/Anubis
• https://github.com/s3pt3mb3r/Dainsleif
• https://github.com/gmh5225/csgo_sdk
• https://github.com/gmh5225/csgo-sdk [SDK for Rust]
• https://github.com/ekknod/csf_w [Win SDK]
• https://github.com/ekknod/csf [Linux SDK]
• https://github.com/Speedi13/ROP-COMPILER
• https://github.com/AimTuxOfficial/AimTux [Linux]
• https://github.com/seksea/gamesneeze [Linux]
• https://github.com/otvv/csgo-linux-cheat-sdk [Linux]
• https://github.com/EternityX/DEADCELL-CSGO
• https://github.com/nbqofficial/kernel-csgo
• https://github.com/HeathHowren/CSGO-Cheats
• https://github.com/Kruziikrel1/CSGO-FindMDL [Model Changer]
• https://github.com/ekknod/nv_v2 [Sound ESP]
• https://github.com/0TheSpy/SpyExternal1337hax [External]
• https://github.com/0TheSpy/Seaside [Internal]
• https://github.com/whereisr0da/Lumina-Cheat [Internal]
• https://github.com/nbqofficial/norsefire [Driver + Mouse Emulation]
• https://github.com/boltgolt/boltobserv [Radar]
• https://github.com/gmh5225/csgo_external_ahk_hack [External]
• https://github.com/ch4ncellor/CSGO-P2C-Dumper [Dump]
• https://github.com/Akatsyk/2k17-club
• https://github.com/flowxrc/csgo-xenforo-loader
• https://github.com/ALittlePatate/ezfrags
• https://github.com/Neaxic/CSGO-MAIN-INTERNAL
• https://github.com/W1lliam1337/digital-sdk
• https://github.com/sneakyevilSK/CSGO_BacktrackPatch [Backtrack Patch]
• https://github.com/NullTerminatorr/NullBase [External]
• https://github.com/krxdev-kaan/AqHax-CSGO
• https://github.com/slack69/csgo-dma-overlay [DMA]
• https://github.com/rrpvm/csgo-external-cheat
• https://github.com/petercunha/Pine [Neural Network]
• https://github.com/Bartis1313/csgo
• https://github.com/NullHooks/NullHooks [Internal]
• https://github.com/Skarbo/CSGOCrosshair [Crosshair Generator]
• https://github.com/ekknod/G37OBS [obs-studio plugin for csgo]
• https://github.com/Sentient111/Csgo-Full-kernel [Running from kernelmode]
• https://github.com/razixNew/CompiledProtection [Cheat Compiler]
• https://github.com/ekknod/EC
• https://github.com/soyware/heck_csgo_external [External]
• https://github.com/martinjanas/Sensum [Internal]
• https://github.com/cazzwastaken/kakhack [Internal]
• https://github.com/Spelchure/CSGO-Internal [Internal]
• https://github.com/binkynz/cstrike-hack
• https://github.com/R4YVEN/raybot-zero [Kernel-mode]
• https://github.com/gmh5225/CSGO-Loader [Loader]
• https://github.com/gmh5225/CSGO-NIXWARE-CSGO [Nixware]
• https://github.com/designer1337/csgo-cheat-base [Internal]
• https://github.com/yourmnbbn/tiny-csgo-client [Tiny csgo client for connecting dedicated server]
• https://github.com/click4dylan/CSGO_AnimationCode_Reversed [CSGO animation code]
• https://github.com/spirthack/CSGOSimple [Internal]
• https://github.com/ViddeBoiiii/CSGO-Ormbunke-x86 [Imgui Menu]
• https://github.com/gmh5225/legit-csgo-cheat-menu [Menu]
• https://github.com/gmh5225/autismware [HvH]
• https://github.com/emilyinure/solace-csgo [Internal]
• https://github.com/gmh5225/csgo-sdk-improved [Internal]
• https://github.com/gmh5225/cartmanv2 [Internal]
• https://github.com/gmh5225/CSGO-aw-v5.1.13 [aw-v5.1.13]
• https://github.com/ricencheese/csgo-bot
• https://github.com/forceinline/csgo-external-esp [External]
• https://github.com/gmh5225/avhook
• https://github.com/si1kyyy/csgo_cheat_external [External]
• https://github.com/manka81/csgo_cheat [External modular C++ framework with memory reading, hazedumper offsets, W2S, and DX11 ImGui overlay]
• https://github.com/gmh5225/nebulite-external [External]
• https://github.com/lstrsrt/csgo_internal_base [Internal]
• https://github.com/gmh5225/Astra [External]
• https://github.com/gmh5225/CSGO-Alphen
• https://github.com/Enzo0721/ExternalCheatV3 [External]
• https://github.com/SteamDatabase/Protobufs/tree/master/csgo [Protobuf]
• https://github.com/kyojig/csgo_kns [Internal]
• https://github.com/M3351AN/saphire [Internal]
• https://github.com/VitorMob/GHInterfacesCSGO [Internal]
• https://github.com/gmh5225/memcs [External]
• https://github.com/bloesway/csgo_sdk [SDK]
• https://github.com/DeiVid-12/SmKernel-CSGO [Driver]
• https://github.com/notgoodusename/OsirisAndExtra [Internal]
• https://github.com/M3351AN/Echinoidea [External C#]
• https://github.com/Blaumaus/le_chiffre [External]

Game:CS2

• https://github.com/danielkrupinski/Osiris
• https://github.com/ro0ti/CS2-Offsets [Offset]
• https://github.com/sezzyaep/CS2-OFFSETS [Offset]
• https://github.com/Salvatore-Als/cs2-signature-list [Signature]
• https://github.com/HLND2T/CS2_VibeSignatures [Generate CS2 signatures via Agent SKILLS with ida-pro-mcp]
• https://github.com/bruhmoment21/cs2-sdk [SDK]
• https://github.com/Omn1z/Counter-Strike2-SDK [SDK]
• https://github.com/gmh5225/cs2-sdk [SDK]
• https://github.com/gmh5225/CS2-SDK-Source2Gen [SDK]
• https://github.com/FrySimpl3/SDK_CS2 [SDK]
• https://github.com/gmh5225/cs2_sdk [SDK]
• https://github.com/NotOfficer/cs2-sdk [SDK]
• https://github.com/a2x/cs2-dumper [Dump]
• https://github.com/dougwithseismic/dezlock-dump [Runtime schema + RTTI extraction for Source 2 (Deadlock, CS2, Dota 2); no source2gen required]
• https://github.com/ianveig29/cs2-internals [Educational CS2/Source 2 internals guide covering schemas, offsets, entities, networking, Panorama, and verification labs]
• https://github.com/ianveig29/OverlayAI [External CS2 overlay in C++/DirectX 11 with ESP, aimbot, radar, and inventory/Panorama bridge via cs2-dumper offsets]
• https://github.com/Read1dno/vesta [Open-source external CS2 cheat in C++23 with DX11 overlay ESP/chams, aim/trigger tools, grenade helper, Lua API, and optional Web Radar]
• https://github.com/imnotdatguy/csgo2-cheat
• https://github.com/papstuc/counterstrike2
• https://github.com/nezu-cc/BakaWare4
• https://github.com/gmh5225/cs2-fov-changer [FOV changer]
• https://github.com/clauadv/cs2_webradar [undetected counter strike 2 browser based radar cheat]
• https://github.com/staromodny/miata [FOSS external CS2 radar in C++ (VS2022) with configurable overlay layout and cs2-dumper offset updates]
• https://github.com/MoZiHao/CS2_DMA_Radar [DMA Radar]
• https://github.com/gmh5225/cs2_webradar [Browser based radar cheat]
• https://github.com/MoZiHao/CS2_DMA_Extrnal [DMA External]
• https://github.com/gmh5225/vscript_lua51 [VScript]
• https://github.com/gmh5225/cs2_things [VScript]
• https://github.com/IMXNOOBX/cs2-external-esp [External]
• https://github.com/tiansongyu/cs2_cheat [Educational CS2 external ESP (SDL2 + ImGui) with auto-updating offsets via cs2-dumper]
• https://github.com/xfi0/Titled-Gui-CS2 [GPLv3 external CS2 cheat in C# with ESP, aimbot, radar, and minimal memory writes]
• https://github.com/hendodev/cs2-ext [External CS2 cheat with aimbot, ESP, spinbot, and pluggable driver interface]
• https://github.com/Atonl200/ProjectNexus-CSGO [C++20 external CS2 suite with aimbot, ESP, triggerbot, overlay, and optional kernel driver/mapper]
• https://github.com/UnnamedZ03/CS2-external-base [External]
• https://github.com/Tokyodidit/cs2External [External]
• https://github.com/TKazer/CS2_External [External]
• https://github.com/Valthrun/Valthrun [External]
• https://github.com/Zckyy/CS2-External [External]
• https://github.com/sFIsAnExpert/CS2-External-Cheat [External]
• https://github.com/gmh5225/tim_apple [External]
• https://github.com/kristofhracza/tim_apple [External]
• https://github.com/gmh5225/CS2-Cheat [External]
• https://github.com/Half-People/HPCS2 [External]
• https://github.com/gmh5225/CS2-External-1 [External]
• https://github.com/M3351AN/AimStar [External]
• https://github.com/Fr0go1/Aeonix-Cs2 [External]
• https://github.com/xvorost/CS-2-Glow [External]
• https://github.com/yinleiCoder/cs2-cheat-cpp [External]
• https://github.com/ByteCorum/DragonBurn [External]
• https://github.com/snipcola/ProExt [Open-source external CS2 cheat written in Rust; ESP/RCS/Aimbot/Triggerbot/Crosshair/Radar/Bomb Timer/Spectator List]
• https://github.com/yoshisaac/CounterStrike2-Linux-Cheat [Linux External]
• https://github.com/avitran0/deadlocked [Linux-only external CS2 aimbot and ESP in Rust with releases, uinput setup, and an update checker]
• https://github.com/KisSsArt/CS2-Cheat-Base [Internal]
• https://github.com/redbg/CS2-Internal [Internal]
• https://github.com/gmh5225/CS2-Cheat-Base [Internal]
• https://github.com/chaycee/CS2Internal [Internal]
• https://github.com/gmh5225/csgo2-cheat [Internal]
• https://github.com/gmh5225/Aurora [Internal]
• https://github.com/clouddss/cs2-internal-sdk [Internal]
• https://github.com/gniesporek/internal-sdk [Minimal CS2 internal cheat SDK (C++/VS) with screenshots and version-tagged game support]
• https://github.com/W1lliam1337/cstrike2-hack [Rust-based internal]
• https://github.com/eden13378/CS2-DMA-Cheat [DMA]
• https://github.com/gmh5225/CS2-Dma-Radar [DMA]
• https://github.com/chao-shushu/CS2-DMA [Open-source CS2 DMA external (FPGA/LeechCore) with ESP, radar, and grenade helper on a second machine]
• https://github.com/atombottle/cs2_kvm_dma [KVM]
• https://github.com/M3351AN/Samidare [External Ring3/Ring0]
• https://github.com/Vekor64/PythonCS2 [Python External]
• https://github.com/Jesewe/VioletWing [Python external with triggerbot, ESP, bunnyhop, and auto offset dump via cs2-dumper]
• https://github.com/maecry/asphyxia-cs2 [Internal]
• https://github.com/Kryx7z/Conglomerate-Cs2 [Open-source internal Counter-Strike 2 cheat in C++ (TempleWare-based) with Visual Studio build and DLL injection workflow]
• https://github.com/bootmgfw/cs2-cheat-source [Internal CS2 cheat with skin/glove changer, DirectX hooks, and Source 2 SDK headers]
• https://github.com/BrufelFX/RabsztynCC-CS2-Internal [CS2 internal research framework with direct syscalls, optional kernel driver IPC, DX11 hooks, and ImGui menu]
• https://github.com/Leksa667/YOLOv8-Overlay-CS2 [YOLOv8 in CS2]
• https://github.com/ccsimplyspolit/CS2-P2C-TEMPLATES [CS2 security-research P2C templates: VMProtect FVA reconstruction, kernel drivers, and user-mode injectors]

Game:Assault Cube

• https://github.com/gmh5225/external-esp-hack-assaultcube [GDI overlay]
• https://github.com/TheHeadphonesAreNeeded/VoltClient [Educational AssaultCube external: DX11 ImGui overlay, ESP, tracers, aimbot via ReadProcessMemory]
• https://github.com/gmh5225/AssaultCubeCheat
• https://github.com/201580ag/AssaultCube_Cheat
• https://github.com/kotae4/lab-esp-and-aimbot [Walkthrough of an ESP and aimbot cheat from scratch]
• https://github.com/s7shvets7s/simple_ac_internal_cheat [Educational C++20 AssaultCube internal: hooks, ESP, aimbot, ImGui overlay]
• https://github.com/jerryshell/ac-esp [Rust-built 32-bit ESP overlay DLL for AssaultCube 1.3.0.2 with injection notes, tests, and release builds]

Game:Valorant

• https://github.com/apekros/valorant_offsets [Offset]
• https://github.com/10HEAD/ValorantOffsets [Offset]
• https://github.com/ofDataa/offsets [Offset]
• https://github.com/gmh5225/valorant-externals [Offset]
• https://github.com/GLX-ILLUSION/valorant-offsets-autoupdater [Offset]
• https://github.com/hadevn/Valorant-SDK-2024 [SDK]
• https://github.com/gmh5225/valorant-gui-imgui-remake [GUI]
• https://github.com/gmh5225/valorant-internal
• https://github.com/xehn1337/valorant-dumper [Dump]
• https://github.com/gmh5225/Valorant-Dumper-Tool [Dump]
• https://github.com/lil-skies/val-exception-handler [ZwRaiseException Dump]
• https://github.com/gmh5225/Valorant-Esp-Aimbot-Hack
• https://github.com/frankelitoc/UE4-c- [External]
• https://github.com/AryuInka/Valorant-Cheat-External [External]
• https://github.com/gmh5225/Valorant-Cheat
• Iterate And Decrypt FNamePool->Entries On Valorant
• https://github.com/gmh5225/Valorant-External-1
• https://github.com/Chase1803/UCMiraka-ValorantExternal [NtUserGetPointerProprietaryId]
• https://github.com/gmh5225/Valorant-CheatExternal
• https://github.com/weedeej/ValorantCC [Crosshair Setting]
• https://github.com/gmh5225/Internal-Valorant-Cheat
• https://github.com/gmh5225/VALORANT-HACK-ESP-AIMBOT-SKINCHANGER
• https://github.com/gmh5225/valorant-esp-hack-with-driver
• https://github.com/gmh5225/Valorant-Aimbot-Bypass
• https://github.com/gmh5225/CyberAntLoader
• https://github.com/gmh5225/Valorant.External
• https://github.com/gmh5225/valorant-internal-base [Internal]
• https://github.com/gmh5225/VALORANT-HACK-ESP-AIMBOT-SKINCHANGER-SOURCE [Internal]
• https://github.com/gmh5225/Valorant-External-Source [External]
• https://github.com/gmh5225/Valorant-cheat-internal [Internal]
• https://github.com/gmh5225/Valorant-Esp-Aimbot-Cheat-Hack [External]
• https://github.com/94q/Valorant-Internal [Internal]
• https://github.com/gmh5225/Valorant-External-P2C-Leaked [External]
• https://github.com/kali11211/valorant-internal-cheat [Internal]
• https://github.com/gmh5225/valo-driver [External]
• https://github.com/kali11211/valorant-internal-cheat [Internal]
• https://github.com/gmh5225/ValorantCheatExternal [External]
• https://github.com/bootmgfw/valorant-external-cheat [External Valorant cheat with reversed UE SDK headers, kernel driver I/O, and aimbot/lineups]

Game:VEILED EXPERTS

• https://github.com/EBalloon/VEILED-EXPERTS-SDK
• https://github.com/LagradOst/ProjectD-Win64-Shipping
• https://github.com/Da3kL3o/VeiledExpertsSDK
• https://github.com/percpopper/VX-It [Decrypt]

Game:COD1

• https://github.com/attilathedud/CoD_Hacks

Game:COD7

• https://github.com/nice-sprite/COD7-Tools

Game:COD Black Ops 2

• https://github.com/gmh5225/t7-linker [100% accurate Black Ops 2 FastFile linker]

Game:COD Black Ops 3

• https://github.com/gmh5225/COD-boiii [Reverse engineering and analysis]

Game:COD WWII

• https://github.com/Brentdevent/S2x [Custom Call of Duty: WWII client; modding and client-side improvements; offline MP/zombies/campaign, Steam/Demonware emulation]

Game:COD Warzone

• https://github.com/YMY1666527646/Call-of-Duty-Warzone-MW-HACK-ESP-AIMBOT
• https://github.com/serjam/mwclap
• https://github.com/ckateowm/modernwarfare2-cpp-external [C++ MW2 injected DLL with D3D12 Present hook (Kiero), ESP, and aimbot]
• https://github.com/NMan1/external-warzone-cheat
• https://github.com/NMan1/warzone-internal
• https://github.com/gmh5225/Call-Of-Duty-Warzone-Hack-Esp-Slient-Aimbot-Internal-Unlock-ALL
• https://github.com/gmh5225/Call-Of-Duty-Vanguard-Hack-Esp-AImbot-Unlock-All
• https://github.com/gmh5225/Warzone-internal-Cheat
• https://github.com/SpiroHappy/Warzone-MW-Internal
• https://github.com/gmh5225/-Modern-Warfare-Warzone-Cheat

Game:CODM

• https://github.com/Poko-Apps/CodMDumper [il2cpp dump]
• https://github.com/gmh5225/CODM-ESP-Aimbot-Mod-Menu [ESP]
• https://github.com/hi-bi-hs-13/Codm-Cheat [Research archive: VMProtect unpacking, license-protocol reversal, and anti-cheat bypass analysis of a commercial CODM loader]

Game:Battlefield 1

• https://github.com/gmh5225/BF1-ESP-AND-AIMBOT
• https://github.com/younasiqw/BattleField-1-Internal

Game:Battlefield 4

• https://github.com/gmh5225/BF4-Internal-overlay

Game:Battlefield 2042

• https://github.com/Skengdo/battlefield-2042-internal-sdk

Game:Apex Legends

• https://github.com/dhanax26/Apex-Legends-Offset-Dumper [Offset]
• https://github.com/ofDataa/offsets [Offset]
• https://github.com/dword64/Apex-Legends-SDK-Remaster
• https://github.com/hooksteroid/ApexD3D_External
• https://github.com/NMan1/apex-legends-cheat
• https://github.com/gmh5225/Apex-SIMPLE-AIMBOT-GLOW-APEX
• https://github.com/TheCruZ/Direct-EFI-Apex-Cheat
• https://github.com/Astronaut00/apex-external
• https://github.com/YMY1666527646/Phoenix-Valorant-Cheat
• https://github.com/CasualX/apexbot
• https://github.com/CasualX/apexdream [External Apex Legends cheat in Rust (aim assist, triggerbot, ESP); embeddable API]
• https://github.com/TheCruZ/Apex_Legends_Driver_Cheat
• https://github.com/Keyzp1337/Fortnite
• https://github.com/Zurek0x/NuremX [AI]
• https://github.com/hadevn/apex_full_cheat
• https://github.com/gmh5225/Apex-ApexCheeseTest
• https://github.com/RavenOfTime/Apex-Legends-Esp
• https://github.com/gmh5225/Apex-ApexCheat
• https://github.com/gmh5225/Apex_ESP_Old_Project
• https://github.com/cheatingwitdacode/apex-cheating
• https://github.com/LWSS/Ape-ex-Abominations [QEMU]
• https://github.com/Y33Tcoder/EzApexDMAAimbot [KVM]
• https://github.com/gmh5225/Apex-CHEAT-FIXED
• https://github.com/gmh5225/apex_legends_sdk
• https://github.com/ekknod/apex_linux [linux]
• https://github.com/XRadius/project-tanya [linux]
• https://github.com/gmh5225/ayypex [linux]
• https://github.com/KaylinOwO/Project-Branthium
• https://github.com/gmh5225/Apex-Legends-External-Esp-Aimbot-Skinchanger
• https://github.com/Neurosisccc/Apex-ItemGlow [Item glow]
• https://github.com/BaconToaster/UC-Apex-Remastered
• https://github.com/NekoRem/apex-external [External]
• https://github.com/M1fisto/nullptr-apex-external [External]
• https://github.com/3nolan5/R5Apex-UserMode [External]
• https://github.com/NaiJii/Apex-Mizu-Base [Internal]
• https://github.com/boowampp/ApexDmaCheatUpdated [DMA]
• https://github.com/bootmgfw/apex-external-cheat [External Apex Legends cheat with driver-backed memory access and DX11 ImGui overlay]

Game:Fortnite

• https://github.com/kem0x/FortKit [Dump]
• https://github.com/ofDataa/offsets [Offset]
• https://github.com/Trydos/fortnite-offsets [Offset]
• https://github.com/masterpastaa/AutoOffsets [Offset]
• https://github.com/Zetolac/FortniteOffsetsAndSigs [Offset]
• https://github.com/Android1337/Fortnite-Offsets [Offset]
• https://github.com/gmh5225/FortniteSigsUpdatedEveryUpdate [Offset]
• https://github.com/gmh5225/Fortnite-SigsUpdatedEveryUpdate [Offset]
• https://github.com/gmh5225/fortnite-W2S-offset-Fortnite [Offset]
• https://github.com/gmh5225/fortnite-offsets [Offset]
• https://github.com/gmh5225/Fortnite-Offset-dumper [Offset & Dump]
• https://github.com/gmh5225/fortnite-virtual-offsets [Virtual Table Offsets]
• https://github.com/gmh5225/fortnite-sigs [Signature]
• https://github.com/F0NDO/fortnite-sigs [Signature]
• https://github.com/gmh5225/fortnite-exploits [Exploits]
• https://github.com/ReallReaper/Fortnite-Offsets-Sigs-and-more [Offset]
• https://github.com/Makk5/FortConsole
• https://github.com/gmh5225/Fortnite-Leak5
• https://github.com/Zetolac/FortniteExternalW2S
• https://github.com/gmh5225/Fortnite-Internal-Cheat-Fixed-and-Updated
• https://github.com/gmh5225/Fortnite-EFI-External [EFI]
• https://github.com/gmh5225/Fortnite-External-Cheat-WinSense-Leak
• https://github.com/jooola00/fortnite-cheat-source-internal
• https://github.com/YMY1666527646/Fortnite-Hack-Esp-Exploits-With-Menu
• https://github.com/YMY1666527646/nigusFN
• https://github.com/CheaterRehab/GodFather-Fortnite-Cheat-Cracked
• https://github.com/Keyzp1337/Fortnite
• https://github.com/vk-nom/Basic-Fortnite-Cheat-Source-Internal
• https://github.com/gmh5225/Fortnite-UD-External
• https://github.com/gmh5225/Fortnite-Esp-Aimbot-Exploits-Hwid-Spoofer-Cleaner-Hack-Cheat
• https://github.com/Waihbe/Fortnite-Cheat-LEAK
• https://github.com/zinx-YT/Fortnite-Fltokens-and-offsets
• https://github.com/gmh5225/VOLTO-EXTERNAL-SPOWAR-UD-EAC-BE-FORTNITE-EXTERNAL-CHEAT
• https://github.com/gmh5225/Serenity.gg-FN-and-Loader
• https://github.com/Waihbe/Fortnite-External-Cheat-Leak
• https://github.com/AlfredIU/Spoofer [HWID]
• https://github.com/pastor-ritz/ritz-amazing-fortnite-internal
• https://github.com/gmh5225/Fortnite-Masterpasta-ihack-Source-Leak
• https://github.com/gmh5225/Fortnite-Evo.cc-Source-External-Cheat
• https://github.com/KeyzpOnTheFluxxx/Fortnite-External
• https://github.com/gmh5225/Apple-Lite-Fortnite-Cheat
• https://github.com/gmh5225/Fortnite-External-Cheat-Source-Code
• https://github.com/0dayatday0/BattleFN-cheat-analysis
• https://github.com/gmh5225/fortnite-internal-updated-ritz [Internal]
• https://github.com/JeanToBinks/Fortnite-Cheato-UD-EAC-BE
• https://github.com/gmh5225/BE-Forcer-Fortnite [BE forcer for fortnite]
• https://github.com/gmh5225/Fortnite-External [External]
• https://github.com/percpopper/Fortnite-CameraCachePOV
• https://github.com/percpopper/Fortnite-FNameEntry
• https://github.com/ritz-1337/fortnite-external-evo.gj [External]
• https://github.com/simply-codes/Fortnite-External-P2C [External]
• https://github.com/Zetolac/FortniteExternalExploits [External Exploits]
• https://github.com/xetzzy/Fortnite-External-Source [External]
• https://github.com/gmh5225/fortnite-triadz [External]
• https://github.com/gmh5225/Fortnite-External-5 [External]
• https://github.com/DontCry361x/ritz-amazing-fortnite-internal-updated [internal]
• https://github.com/NurdAlert/flirtnite [External]
• https://github.com/gmh5225/Fortnite-3.5 [Internal]
• https://github.com/gmh5225/ZeroGui-Fortnite-Internal [Internal]
• https://github.com/gmh5225/Fortnite-VoyagerTF [Voyager]
• https://github.com/gmh5225/Fortnite-External-4 [External]
• https://github.com/Saxmason/Interic-Fortnite-External-Cheat [Fortnite external cheat source with aimbot, ESP, and ImGui overlay]
• https://github.com/Saxmason/Subzero-Fortnite-Cheat [Fortnite external cheat source with aimbot, overlay, and driver comms]
• https://github.com/raivoansa/fortnite-external-base-source [Fortnite external base with IOCTL RPM, CR3 bypass stub, offsets, and ImGui DX11 overlay]
• https://github.com/bootmgfw/fortnite-external-cheat-base [External Fortnite cheat base with kernel driver comms, DirectX 11 overlay, and ImGui menu]
• https://github.com/lauralex/fn-dma-cheat [DMA]

Game:Bloodhunt

• https://github.com/ZZZ-Monster/bloodhunt_External
• https://github.com/PhysX1337/BloodHunt-v1.1
• https://github.com/gmh5225/blood-hunt

Game:Super People

• https://github.com/EBalloon/Super-People-sdk
• https://github.com/gmh5225/Super-People-Esp-Aimbot-Magic-Hack
• https://github.com/gmh5225/superpeople-client

Game:Splitgate

• https://github.com/percpopper/Splitgate-Internal

Game:PUBG

• https://github.com/gmh5225/pubg-dumper [Dump]
• https://github.com/gmh5225/pubg_dump_offset [Offset]
• https://github.com/gmh5225/pubg-external-cheat
• https://github.com/ajkhoury/pubg_internal
• https://github.com/iCollin/pubg-internal
• https://github.com/K-cazb/pubg-public
• https://github.com/dot1991/lilypublic
• https://github.com/gmh5225/PUBG_Internal
• https://github.com/gmh5225/PUBG-DX
• https://github.com/gmh5225/PUBGSTAR
• https://github.com/a0yark/Pubg-demo [External]
• https://github.com/Valthrun/Valthrun_PUBG [External read-only kernel-based gameplay enhancer in Rust; requires Zenith driver; radar/ESP/health/distance]

Game:PUBG Lite

• https://github.com/gmh5225/Pubg-Lite-ESP

Game:PUBGM

• https://github.com/gmh5225/pubgm_sdk_and_offsets [Offset]
• https://github.com/atulkunal999/pubg_mobile_memory_hacking
• https://github.com/Mood-Coding/pubgm_shitty_source
• https://github.com/gmh5225/PUBGM-PUBGPatcher
• https://github.com/gmh5225/PUBGM1.6-DeadGame
• https://github.com/mut1234/BYPASS-PUBG-MOBILE-IMGUI
• https://github.com/gmh5225/LastIslandOfSurvival-iOSCheat-Source
• https://github.com/halloweeks/pubg-mobile-pak-extract [pak extracting tool]
• https://github.com/gmh5225/pubg_mobile_memory_hacking_examples
• https://github.com/Super-Cssdiv/ChinaPubg
• https://github.com/gmh5225/pubg

Game:Sausage Man

• https://github.com/gmh5225/AndroidCheatTemplate

Game:The finals

• https://github.com/gmh5225/the-finals-interior-cheat

Game:EFT

• https://github.com/patrickcjk/TOG [Offsets Generator]
• https://github.com/fcancelog/EftStreamedCheat
• https://github.com/Nou4r/pKernelInterface-EFT
• https://github.com/sailro/EscapeFromTarkov-Trainer
• https://github.com/gmh5225/Nathans-Tarkov-Radar-Public [Vmread + Radar]
• https://github.com/frankie-11/eft-external
• https://github.com/Splitx12/eft
• https://github.com/gmh5225/eft-internal
• https://github.com/gmh5225/EFT-Veil-EFT
• https://github.com/Qemu-Gang/Escape-from-TuxKov [QEMU]
• https://github.com/gmh5225/Comm-ImMiraclela
• https://github.com/krispybyte/Simple-EFT-Base
• https://github.com/bootmgfw/eft-tarkov-internal-cheat [Internal Escape from Tarkov cheat with ESP, direct syscalls, pattern scanning, and injector]
• https://github.com/bytemyass/EFTLeecher [DMA]
• https://github.com/gmh5225/eft-dma-radar-1 [DMA Radar]
• https://github.com/paul01784/MeatyEFTRelease [Open-source DMA EFT radar and companion toolkit (C++/ImGui, fuser support, leechcore/vmm)]
• https://github.com/gmh5225/EFT-MonoEFT
• https://github.com/ZhaoKunqi/simple-eft-superman-training-bot
• https://github.com/gmh5225/EFT-NewTarkovCheatProject

Game:Duckov

• https://github.com/a0yark/Duckov_marketmod [Duckov Market Mod]

Game:Arena Breakout Infinite

• https://github.com/cra0/UE426_ABInfinite-Win64-Shipping [SDK]
• https://github.com/Ke4ton/hardware_bypass [GPU check bypass]

Game:R6

• https://github.com/NMan1/Rainbow-Six-Cheat
• https://github.com/NMan1/OverflowR6V2
• https://github.com/NMan1/Internal-Rainbow-Six-Cheat-V3
• https://github.com/beans42/epic-r6-v9
• https://github.com/Kix48/R6Updater
• https://github.com/hooksteroid/R6Table_Internal
• https://github.com/JGonz1337/r6-internal
• https://github.com/gmh5225/External-R6S-Cheat
• https://github.com/vctr74/R6-Internal-V3
• https://github.com/gmh5225/R6S-internal-Cheat
• https://github.com/gmh5225/Rainbow-Six-Siege-Rs6-External-Esp-Aimbot-Hack-Cheat
• https://github.com/gmh5225/Rainbow-6-Siege-Cheat
• https://github.com/rushzzz-max/r6-external [External]
• https://github.com/ArtemisDevGroup/Artemis [Internal]
• https://github.com/gmh5225/R6-Cheat-Dumper [External]
• https://github.com/gmh5225/R6S-External-V2 [External]
• https://github.com/igromanru/R6-Chams-public [Chams]

Game:Overwatch

• https://github.com/blackhades00/PareidoliaTriggerbot [Triggerbot]
• https://github.com/gmh5225/overwatch-iat-fixer [Overwatch IAT Fixer]
• https://github.com/Midi12/ow_unpack
• https://github.com/gmh5225/OW-Aeternum
• https://github.com/dword64/Ow-FOV [FOV]

Game:Overwatch2

• https://github.com/gmh5225/Overwatch2-colorbot-Cheats
• https://github.com/gmh5225/Overwatch-2-Cheat-Aimbot-Esp
• https://github.com/gmh5225/meowsense
• https://github.com/gmh5225/Ow-Outlines [Shows Players through walls]
• https://github.com/ZEROWyt/Overwatch-2-TOPE-EXTERNAL-CHEAT
• https://github.com/gmh5225/OW2-wardenrekter [Emulate OW2 AC]

Game:Paladins

• https://github.com/gmh5225/Paladins-internal-Cheat

Game:DayZ

• https://github.com/zhitkur/DayZzz
• https://github.com/gmh5225/External-Dayz-Cheat
• https://github.com/gmh5225/DayZ-Cheat
• https://github.com/cmachale14-eng/DayZESP [External DayZ ESP with DX11 ImGui overlay and iqvw64e.sys BYOVD kernel memory reads for BattlEye-protected process access]
• https://github.com/JonathanEke/DayZ-Server-Battleye-Remover [Disable battleye]