shiversoftdev

FortniteEndpointsDocumentation. Fortnite & Epic Games Unofficial API Documentation

BedrockOXREnabler. Attempts to enable using OpenXR runtimes other than Windows Mixed Reality on Minecraft Bedrock 1.21.73 and older

gfll-dll. "Games for Linux - LIVE" - patcher DLL to get Games for Windows - LIVE functional under Wine on Linux/macOS

XDRPC. XDRPC / JRPC2 Source

davesave. HMX Forge (RB4/DCS/Amp16/FME) save game decryptor/encryptor

my-ImHex-patterns. Various patterns for the ImHex hex editor, for file formats I've reverse engineered.

cutify. A Rust library for colorizing console output with cute gradients

Quark. Creative Prompt Companion to help art block and creative ruts. Written in Golang

hrtng. IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

XPRSplashTool. Tool for compressing and decompressing XPRS files found in Windows Mobile and Windows Phone 7 ROMs.

amd-brand-string-edit. UEFI utility to spoof the brand string of modern AMD processors via Machine State Registers.

BrutalBranch. A retail Xbox 360 kernel patcher payload

wm7tools. C

bskyUnGeoBlock. Web extension to disable geographic restrictions (moderation, age verification) on Bluesky's web app.

GMSIdentify. A project/database of sorts to make identifying which GMS version a given GameMaker (VM) game was built with easier.

DELTARUNNER. A custom version of the GMS LTS runner for running DELTARUNE on Linux natively.

udis86. Disassembler Library for x86 and x86-64

gmhasher. [Unfinished] Trying to hash GM game data files a different way.

GDWeave. Mod loader & runtime script patching for Godot

ghacHook. Hooks to GHArcade to improve its lifespan and usability in 2025 and beyond.

MDK-Lib. MDK review for the upcoming next generation SDK

UEDumper. The most powerful Unreal Engine Dumper and Editor for UE 4.19 - 5.3

Reatkact. A React renderer for FINAL FANTASY XIV

fox32os. multitasking operating system for fox32

Game-Boy-chips-decapping-project. A database of microscopic images of decapped chips from Game Boy cartridges. MBC1, MBC2, MBC3, MBC30, MBC5, MBC7, MAC-GBD and some custom repro mappers are presented here.

we-r-of-milo. Unthreaded Holmes server implementation for Milo.

cve-rs. Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀

blurnow. Yeh ur games is a firt now

Self-Remapping-Code. This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.

BnetTokenator. Really simple tool to put a Battle.net auth token into the registry for launching games.

Unscrambler. Packet deobfuscation for FFXIV

t6-wiinternal. [UNFINISHED] A basic internal GSC injector Aroma plugin for T6/BO2 on the Wii U.

t7-osxternal. A basic T7 external GSC injector for macOS / OS X.

brkida. C++ macro for x64 programs that breaks ida hex-rays decompiler tool.

GoD2NXE. Converts GoD format downloaded Xbox 360 games into NXE installed game format.

7.css. A JS-independent, tree-shakeable CSS framework for building faithful recreations of the Windows 7 UI.

nsmbw-project. C++

RB3Enhanced. Open-source plugin for Rock Band 3 providing many enhancements, fixes, and extra features.

x360-research. my research and reverse engineering notes/utilities relating to the Xbox 360

FestivalInstrumentMapper. Maps most existing Rock Band / Guitar Hero instruments as Xbox One instruments for Fortnite Festival.

DaTArrest. Exploit for Rock Band Blitz's DTA scripting engine.

TemporalStasis. FFXIV network proxy library

Xbox360BadUpdate. Software only hypervisor exploit for Xbox 360

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

FreeMyXe. Xbox 360 executable designed to apply freedom-unlocking patches based on xeBuild to the kernel and hypervisor.

Xbox360BadUpdate. Software only hypervisor exploit for Xbox 360

NoFlashTimebomb. Really small DLL to patch Flash Player r387+'s OCX/DLL at runtime to remove the timebomb.

NGPlayerNET. An unofficial replacement for the "Newgrounds Player" desktop program.

process-redir-mapper. Manually maps a DLL & replaces a target process's entry point.

IdaThemer. 🎨 Seamlessly convert your favorite Visual Studio Code themes to IDA Pro themes.

entii-for-workcubes. PowerPC Windows NT ported to Nintendo GameCube/Wii/Wii U

vistaspctl. Basic utility to tell SpLdr to start and stop SpSys on Vista (and 7.)

liblifx. A work-in-progress library for interacting with LIFX smart lights in C.

splatpost-libusbd. A pixel printer for Splatoon 3's drawing/posting feature, using the libusbd library.

p2-rtx. Portal 2 - RTX Remix Compatibility Mod

t5-rtx. CoD Black Ops - Nvidia rtx-remix compatibility mod

multi-steamuser-poc. proof of concept running several individual/user steam accounts within the same process

eac_xtract. C#

maciNTosh. PowerPC Windows NT ported to Power Macintosh systems

HookGuard. Hooking Windows' exception dispatcher to protect process's PML4

fennecos. FennecOS - a small 32-bit x86 operating system

GoDefender. Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

SteamNetfilterProxy. "decrypting" proxy for the pre-December 2015 Steam "netfilter" protocol

ExceptionHandlerPayload. Kernel payload to automatically quit to XMB if a Playstation 3 user-land thread crashed CEX/DEX/HEN

condenstation. PRX plugin to re-enable connecting to Steam for the PS3 on Portal 2

MemoryModule. Library to load a DLL from memory.

hidden_syscall_monitoring. monitors hidden syscalls called from call of duty anticheat

al-khaser. Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

CWHook. Proof of concept circumventing arxan's integrity checks.

BO3ErrorCodeJS. Simple single page website to decode a Black Ops 3 connection error code.

EricLauncher. Barebones launcher for Epic Games Store games.

FNFestivaltoRB.

thisisnormalsoftware. C

copy-dialog-lunar-lander. Play lunar lander in you windows file copy dialog

IoletsgoBIOS-website-template. A basic HTML/CSS Website template heavily inspired off of PhoenixBIOS interfaces

XDVDForenSic. data "recovery" tool for messed up XDVDFS (Xbox/XGD/"XISO") media

WiiSigVerifySharp. Small .NET library to parse and verify signatures and certificates as used in the Wii.

DolphinInterfaceCode. Interface with /dev/dolphin from BrainSlug / other Wii game mods

jazelle-wii. Natively running JVM bytecode on the Wii's Starlet

Microsoft-Activation-Scripts. Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

GfWLUtility. Multipurpose utility for managing Games for Windows - LIVE installs and content.

WinDivert. WinDivert: Windows Packet Divert

P16PacketDecryptor. decrypts p16 packets for preservation purposes

Ps3GhidraScripts. Various scripts for ghidra for parsing ps3 binarys

SPRXPatcher. A modern PlayStation 3 ELF patcher to load SPRX files

UWPDumper. DLL and Injector for dumping UWP applications at run-time to bypass encrypted file system protection.

dbgrs. A windows debugger written in Rust, for educational purposes

pythonnet. Python for .NET is a package that gives Python programmers nearly seamless integration with the .NET Common Language Runtime (CLR) and provides a powerful application scripting tool for .NET developers.

IDA-Python-Deobfuscate. IDA Python deobfuscation script targeted towards Arxan.

fix-arxan. Arxan binary fixer using unpacked dump

BO3MacFix. Fixes Black Ops 3 on Mac so custom maps from the Steam Workshop can be played and online can work.

WaWMapExporter. yeah it exports world at war maps to a .map file with data such as brushes, terrain and models

obfusheader.h. Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

Bo3OnScreenRainDrops. On-Screen Rain Drops for Call of Duty: Black Ops III

ReverseKit. x64 Dynamic Reverse Engineering Toolkit

IDA_Plugin_AntiDebugSeeker. Automatically identify and extract potential anti-debugging techniques used by malware.

Akira-obfuscator. Another LLVM-obfuscator based on LLVM-17. A fork of Arkari

llvm-msvc-ex. Forked LLVM focused on MSVC Compatibility. This version is designed for windows users

llvm-msvc. LLVM fork with explicit compatibility with MSVC 2022 features.

t4-rtx. CoD5 / World at War - Nvidia rtx-remix compatibility mod

rtx-remix. Combined repo for the RTX-Remix runtime and toolkit

STL. MSVC's implementation of the C++ Standard Library.

BetterBlenderCOD. A Blender (3.0+) plugin for importing/exporting XModels and XAnims

BO3-Shader-Research. Information about and examples of HLSL shaders, techsets and materials for Call of Duty Black Ops 3

fix-ape. Call of Duty: Black Ops 3 - Mod Tools Fixes

zlib. A massively spiffy yet delicately unobtrusive compression library.

BlackLotus. BlackLotus UEFI Windows Bootkit

CoDLuaDecompiler. Call of Duty Lua (HavokScript & LuaJit) Decompiler

Detect-It-Easy. Program for determining types of files for Windows, Linux and MacOS.

OpenAssetTools. Open Source Modding Tools for old Call Of Duty games

PyCoD. A Python library for reading/writing Call of Duty's *_EXPORT files.

bspsrc. A Source engine map decompiler

corvid. Source Engine level converter for Call of Duty.

cube2sphere. Python script to map 6 cube (cubemap, skybox) faces into an equirectangular (cylindrical projection, skysphere) map.

luieditor. C++

open-iw5. Experimental MW3 singleplayer & multiplayer client

microavx. An AVX Lifter for the Hex-Rays Decompiler

x64-zt. C++

zonetool. zonetool, a fastfile linker for various Call of Duty titles.

iw3xo-radiant. iw3xo-radiant // a radiant modification for Call of Duty 4

iw3xo-dev. iw3xo - a call of duty 4 modification - rtx remix compatibility

CoD-BSP-Decompiler. CoD BSP Decompiler

Greyhound. A fork of Wraith Archon, the Call of Duty Asset Extractor

goomba. gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions

Kernelmode-manual-mapping-through-IAT. Manual mapping without creating any threads, with rw only access

xorstr. heavily vectorized c++17 compile time string encryption.

Scylla. Imports Reconstructor

Spartacus. Spartacus DLL/COM Hijacking Toolkit

hooking. Resources About Hooking. For All Platforms. Currently 300+ Tools And 600+ Posts.

Bo3InGameSettings. An in-game settings menu for Bo3 that opens when the game starts.

windows-syscalls. Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

Shiny.Calculator. A REPL calculator and an x86 asm emulator for developers

llvm-msvc. This project migrated to https://github.com/backengineering/llvm-msvc

ExecASLR-ekoparty. C

obfuscator.

ADVobfuscator. Obfuscation library based on C++20 and metaprogramming

pe-bear. Portable Executable reversing tool with a friendly GUI

EAC_Emu. A simple EasyAntiCheat x64 emulator.

EACReversing. Reversing EasyAntiCheat.

openal-soft. OpenAL Soft is a software implementation of the OpenAL 3D audio API.

ENet-CSharp. A improved fork of ENet, a tried and true networking library. C, C++, C# compatible.

instrumentation_callbacks. A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.

SDA. SDA is a rich cross-platform tool for reverse engineering that focused firstly on analysis of computer games. I'm trying to create a mix of the Ghidra, Cheat Engine and x64dbg. My tool will combine static and dynamic analysis of programs. Now SDA is being developed.

awesome-game-security. awesome game security [Welcome to PR]

Koalageddon. Legit DLC Unlocker for Steam, Epic, Origin, EA Desktop & Uplay (R1)

microsoft-warbird. Reimplementation of Microsoft's Warbird obuscator

warbird-obfuscator. Integration of Microsoft Warbird with the MSVC compiler

loki. Hardening code obfuscation against automated attacks

syntia. Program synthesis based deobfuscation framework for the USENIX 2017 paper "Syntia: Synthesizing the Semantics of Obfuscated Code"

flare-emu. Python

perses. X86 Mutation Engine with Portable Executable compatibility.

BO2-Cold-War-Mod. GSC

awesome-malware-development. Curated resources for malware dev, reverse engineering, and defensive security research.

crtsys. C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL

Digital-Forensics-Guide. Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

angr. A powerful and user-friendly binary analysis platform!

DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

AntimalwareBlight. Execute PowerShell code at the antimalware-light protection level.

HyperDbg. State-of-the-art native debugging tools

movfuscator. The single instruction C compiler

pe_to_shellcode. Converts PE into a shellcode

ept-hook-detection. 🪝 Various EPT hook detection approaches

Apex_Legends_Driver_Cheat. C++

Battleye-VAC-EAC-Kernel-Bypass. Kernel mode bypass for BattlEye, EAC

TFs-Zombie-Options. A mod for black ops 3

frida. Clone this repo to build Frida

Awesome-Advanced-Windows-Exploitation-References. List of Awesome Advanced Windows Exploitation References

HackSysExtremeVulnerableDriver. HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Triton. Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

OSEP-Tools. C#

TRunPE. A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original entrypoint.

UPGDSED. Universal PatchGuard and Driver Signature Enforcement Disable

VMAttack. VMAttack PlugIn for IDA Pro

NtRays. Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

ForkPlayground. An implementation and proof-of-concept of Process Forking.

CloneProcess. Clone running process with ZwCreateProcess

NtSymbol. Resolve DOS MZ executable symbols at runtime

infosec-resources. A list of helpful cybersecurity / infosec resources

xntsv. XNTSV program for detailed viewing of system structures for Windows.

how2heap. A repository for learning various heap exploitation techniques.

ObpCreateSymbolicLinkName_EoP. C++

unDefender. Killing your preferred antimalware by abusing native symbolic links and NT paths.

desktop. Revolt Desktop App

CVE-2020-15368. CVE-2020-15368, aka "How to exploit a vulnerable driver"

memestream. Code from my "game modding" livestreams! Follow along and learn

PR0CESS. some gadgets about windows process and ready to use :)

tiny_tracer. A Pin Tool for tracing API calls etc

Process-Magics. This is a collection of interesting codes about Windows Process creation.

metasploit-framework. Metasploit Framework

donut. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

ForgeCert. "Golden" certificates

solana-arbitrage-bot. solana arbitrage bot which optimize maximum profit with multi hop spam method, dynamic trade amount. Using geyser grpc and shred steam instead of jupiter aggregator for high performance. solana arbitrage bot solana arbitrage bot solana arbitrage bot solana arbitrage bot solana arbitrage bot solana arbitrage bot solana arbitrage bot solana

Injectors. 💉 DLL/Shellcode injection techniques

memflow. physical memory introspection framework

Harmony. A library for patching, replacing and decorating .NET and Mono methods during runtime

ImGui-DirectX-11-Kiero-Hook. Universal ImGui implementation through DirectX 11 Hook (kiero). Better version: https://github.com/rdbo/DX11-BaseHook

AttackSurfaceAnalyzer. Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

transacted_hollowing. Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

iced. Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua

ColdHide_V2. A mini anti-anti debug hooking library for Windows.