awesome-game-security

If you find that some links are not working, you can simply replace the username with gmh5225. 
Or you can send an issue for me.

Show respect to all the projects below, perfect works of art 🫡

NeverC & NeverD — Your Compiler & Decoder for the AI Era

As AI agents increasingly write, analyze, and rewrite low-level code, generic toolchains become a bottleneck. Security researchers need semantics they can trust — deterministic compilation on the way in, and faithful decompilation on the way out. In the age of AI, everyone needs their own compiler and their own decoder.

• NeverC — The AI-friendly C23 compiler for security research. Pure C23, integrated linker, DynCode pipeline, cross-platform PE/ELF/Mach-O generation, compile-time string encryption, and a plugin API spanning 130+ compiler phases — designed so LLM-generated code compiles correctly more often than C++ alternatives.
• NeverD — The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (libneverd) built for CLI tools, integrators, and AI agents.

Compile with NeverC, analyze and decompile with NeverD — an AI-friendly LLVM toolchain you control, built for security research.

How to contribute?

• https://github.com/HyunCafe/contribute-practice
• https://docs.github.com/en/get-started/quickstart/contributing-to-projects

Skills for AI Agents

This repository provides skills that can be used with AI agents and coding assistants such as Cursor, OpenClaw, Claude Code, Codex CLI, and other compatible tools. Install skills to get specialized knowledge about game security topics.

View on learn-skills.dev

Installation:

npx skills add https://github.com/gmh5225/awesome-game-security --skill <skill-name>

Available Skills:

Compiled wiki: agents can also browse wiki/ (see wiki/AGENTS.md) — a maintained knowledge layer over skills, README categories, and descriptions.

Example:

# Install anti-cheat systems skill
npx skills add https://github.com/gmh5225/awesome-game-security --skill anti-cheat-systems

# Install multiple skills
npx skills add https://github.com/gmh5225/awesome-game-security --skill windows-kernel-security
npx skills add https://github.com/gmh5225/awesome-game-security --skill reverse-engineering-tools

Contents

• Game Engine
• Mathematics
• Renderer
• 3D Graphics
• AI
• Image Codec
• Wavefront Obj
• Task Scheduler
• Game Network
• PhysX SDK
• Game Develop
• Game Assets
• Game Hot Patch
• Game Testing
• Game Tools
• Game Manager
• Game CI
• DirectX
• OpenGL
• Vulkan
• Cheat
• Anti Cheat
• Some Tricks
• Windows Security Features
• WSL
• WSA
• Windows Emulator
• Linux Emulator
• Android Emulator
• IOS Emulator
• Game Boy
• GameCube/Wii
• Nintendo 3DS
• Nintendo Switch
• Xbox
• PlayStation

Game Engine

Guide

• https://github.com/QianMo/Game-Programmer-Study-Notes
• https://github.com/raysan5/custom_game_engines [A comprehensive list of custom game engines]
• https://github.com/stevinz/awesome-game-engine-dev [Awesome Game Engine Development]
• https://github.com/Gforcex/OpenGraphic [Graphic Engine & Game Engine lists]
• https://github.com/bobeff/open-source-engines [A list of open source game engines]
• https://github.com/ThisisGame/cpp-game-engine-book
• https://github.com/netwarm007/GameEngineFromScratch
• https://forums.unrealengine.com [Unreal]
• https://docs.unrealengine.com [Unreal]
• https://www.unrealengine.com/resources [Unreal]
• https://github.com/donaldwuid/unreal_source_explained [Unreal]
• https://github.com/mikeroyal/Unreal-Engine-Guide [Unreal]
• https://github.com/Allar/ue5-style-guide [Unreal]
• https://github.com/revan1611/UE-Interview-Cheat-Sheet [Unreal]
• https://github.com/tomlooman/ue4-tutorials [Unreal]
• https://github.com/JaredP94/Unreal-Development-Guides-and-Tips [Unreal]
• https://github.com/ikrima/gamedevguide [Unreal Engine / game development programming guide]
• https://github.com/lettier/3d-game-shaders-for-beginners [Shader]

Source

• https://github.com/EpicGames/UnrealEngine
• https://github.com/Unity-Technologies/UnityCsReference [C# reference]
• https://github.com/cocos2d/cocos2d-x
• https://github.com/cocos/cocos-engine
• https://github.com/cocos/cocos4
• https://github.com/gmh5225/GameEngine-CRYENGINE
• https://github.com/panda3d/panda3d
• https://github.com/ValveSoftware/source-sdk-2013
• https://github.com/gmh5225/source-sdk-orangebox
• https://github.com/UTINKA/source-engine.2003
• https://github.com/gmh5225/SourceEngine2007
• https://github.com/nillerusr/source-engine
• https://github.com/gmh5225/GoldSourceRebuild [GoldSource engine rebuild]
• https://github.com/K0bin/SourceRenderer [Rust toy engine/renderer with Valve Source format loaders (bsp/mdl/vpk/vtf) and Vulkan/Metal/WebGPU backends]
• https://github.com/adriengivry/Overload
• https://github.com/gmh5225/GameEngine-MapleEngine
• https://github.com/inanevin/LinaEngine
• https://github.com/storm-devs/storm-engine
• https://github.com/minetest/minetest

Game Engine Plugins:Unreal

• Plugin for UE4 to user Rider for Unreal Engine as code editor
• Design-agnostic node system for scripting game’s flow in Unreal Engine
• Sample Unreal Engine 5.0.1 C++ Project That Incorporates Dear ImGui
• A set of tools and utilities for use with Unreal Engine projects using ImGui
• A simple Unreal Engine subsystem to provide a more accurate server world time to clients
• UE4 UI Texture Validator Plugin
• Unreal Engine .NET 6 integration
• Houdini Engine Plugin for Unreal Engine
• A small tutorial repository on capturing images with semantic annotation from UnrealEngine to disk
• UE4 plugin for live2d model
• An Unreal Engine code plugin that adds a custom asset type and editor to the engine
• Unreal Engine 4 Plugin for Lua APIs implementation
• Debug Menu for UnrealEngine4
• https://github.com/Ghostleadie/CheatManagerMenu [UE 5.8 plugin that auto-builds an in-game cheat menu by reflecting UCheatManager and registered cheat extensions]
• 'Dear Imgui' remote access library and application
• Customizable performance metric charts and STAT commands control panel
• Unreal Engine plugin providing a set of Hermes endpoints
• Unreal Engine 4 Plugin for Lua APIs implementation

Game Engine Plugins:Unity

• A markdown viewer for unity
• An integrated solution for authoring / importing / simulating / rendering strand-based hair in Unity
• A maintained collection of useful & free unity scripts / library's / plugins and extensions
• ChatGPT integration with Unity Editor
• Code editor integration for supporting Cursor as code editor for unity
• https://github.com/Besty0728/Unity-Skills [AI automation skills specifically designed for Unity]
• https://github.com/yucchiy/UniCli [CLI to control Unity Editor from terminal — compile, test, build, inspect GameObjects; 80+ commands, AI-agent ready (Claude Code plugin, Agent Skills)]

Game Engine Plugins:Godot

• https://github.com/GDPatch/GDPatch [Cross-platform cross-version Godot 4.x mod loader with script patching, Lua hooks, and runtime mod loading without modifying game files]
• https://github.com/libriscv/godot-sandbox [Sandboxing that enables safe modding for Godot games]
• https://github.com/gtibo/Godot-Plush-Character [3D Plush Character for Godot 4.x]
• https://github.com/allenwp/godot-resource-remaps [Godot editor export plugin for remapping resources by feature tags]

Game Engine Plugins:Lumix

• https://github.com/nem0/lumixengine_maps [Map downloader]

Game Engine Detector

• https://github.com/walzer/game-engine-detector [Mobile Game]

Mathematics

• https://github.com/nfrechette/rtm
• https://github.com/microsoft/DirectXMath
• https://github.com/Kazade/kazmath
• https://github.com/milakov/int_fastdiv
• https://github.com/freemint/fdlibm
• https://github.com/Jaysmito101/cgl
• https://github.com/orange-cpp/omath [C++23 constexpr math/physics framework for game, mod, and cheat development]

Renderer

• https://github.com/bkaradzic/bgfx [Rendering library]
• https://github.com/DiligentGraphics/DiligentEngine [Rendering library]
• https://github.com/kanition/pbrtbook [Physically Based Rendering: From Theory To Implementation]
• https://github.com/keith2018/SoftGLRender
• https://github.com/DQLin/VolumetricReSTIRRelease
• https://github.com/HackerPoet/NonEuclidean
• A graphics engine designed to run on a single thread on CPU
• https://github.com/paroj/gltut [OpenGL Render]
• https://github.com/ashawkey/raytracing [RayTracer]
• https://github.com/sultim-t/xash-rt [Xash3D FWGS with a real-time path tracing]
• https://github.com/crosire/reshade [A generic post-processing injector for games and video software]
• https://github.com/harukumo/HorizonEngine [3D rendering engine]
• https://github.com/Patryk27/strolle [Real-time rendering engine]
• https://github.com/ssloy/tinyraytracer [A brief computer graphics / rendering course]
• https://github.com/freetype/freetype [Render fonts]
• https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
• https://github.com/EmbarkStudios/kajiya [Experimental real-time global illumination renderer]
• https://github.com/tgfrerer/island [Experimental hot-reloading Vulkan renderer/engine (C/C++) for Linux and Windows]

3D Graphics

• https://github.com/gmh5225/nv-graphics-mesa
• https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
• https://github.com/mrdoob/three.js [JavaScript 3D Library]
• https://github.com/playcanvas/supersplat [3D Gaussian Splat Editor]

AI

• https://github.com/ls361664056/GameAI-paper-list [zh]
• https://github.com/lightningpixel/modly [Local image-to-3D mesh desktop app; open-source AI on GPU; Windows/Linux; extensible generators]
• https://github.com/neilsonnn/image-blaster [Claude skillset: single image to 3D meshes (.glb/.obj), Gaussian splat environment (.spz), and SFX; World Labs + FAL; Unity/Unreal/Godot/Blender]
• https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D pipeline: GPT Image 2.0 concept → TRELLIS.2 GLB; QA gate, review HTML, web/Unity/Unreal export; mock & remote GPU runners]
• https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]

Image Codec

• https://github.com/nothings/stb
• https://github.com/libjpeg-turbo/libjpeg-turbo
• https://github.com/erkkah/tigr
• https://github.com/tsoding/olive.c
• https://github.com/kylejckson/PaintFE [Rust raster image editor — layers, wgpu GPU filters, Rhai scripting, CLI batch, GIF/APNG, single portable binary]

Wavefront Obj

• https://github.com/tinyobjloader/tinyobjloader
• https://github.com/Twinklebear/tobj [Rust]

Task Scheduler

• https://github.com/SergeyMakeev/TaskScheduler

Game Network

Guide

• https://github.com/MFatihMAR/Game-Networking-Resources
• https://partner.steamgames.com/doc/api/ISteamNetworkingMessages#functions_sendrecv [Steam]
• https://github.com/mcxiaoke/mqtt [mqtt]

Source

• https://github.com/cloudwu/skynet
• https://github.com/ketoo/NoahGameFrame [Server Engine]
• https://github.com/chronoxor/CppServer
• https://github.com/Qihoo360/evpp
• https://github.com/ValveSoftware/GameNetworkingSockets [Steam]
• https://github.com/skywind3000/kcp [KCP]
• https://github.com/Unit-X/kcp-cpp [KCP]
• https://github.com/TLeonardUK/ds3os [Dark Souls 3]
• https://github.com/TLeonardUK/ds2os [Dark Souls 2]
• https://github.com/geekrainian/killingfloor-bot-client [Killing Floor UE2.5 headless client with protocol docs, Steam auth RE, and Ghidra scripts]
• https://github.com/Bratah123/Spirit-PTCGO [Pokemon TCG Online private server emulator]
• https://github.com/rathena/rathena [MMORPG]
• https://github.com/TrinityCore/TrinityCore [Server for WOW]
• https://github.com/uNetworking/uWebSockets [WebSockets]
• https://github.com/socketio/socket.io [Nodejs]
• https://github.com/mqttjs/MQTT.js [mqtt nodejs]
• https://github.com/eclipse/paho.mqtt.cpp [mqtt cpp]
• https://github.com/topfreegames/pitaya [Server framework]
• https://github.com/azerothcore/azerothcore-wotlk [Server for WOW]

JWT / Auth Token

• https://github.com/ticarpi/jwt_tool [JWT toolkit — validate, forge, scan, tamper; CVE tests (alg=none, RS/HS256, key injection, etc.), fuzzing, dict attack]

Location / Geocoding

• https://github.com/traccar/traccar-geocoder [Self-hosted reverse geocoding from OpenStreetMap; Traccar stack; Rust server + C++ PBF indexer, Docker]

PhysX SDK

• https://github.com/NVIDIAGameWorks/PhysX
• https://github.com/NVIDIAGameWorks/PhysX-3.4
• https://github.com/bulletphysics/bullet3

Game Develop

Guide

• https://github.com/Calinou/awesome-gamedev
• https://github.com/notpresident35/learn-awesome-gamedev
• https://github.com/yrgo/awesome-educational-games
• https://github.com/bobeff/open-source-games [A list of open source games]
• https://github.com/michelpereira/awesome-open-source-games [Collection of Games]
• https://github.com/raizam/gamedev_libraries [A collection of open source c/c++ libraries for gamedev]
• https://github.com/gheja/game-design-documents [Game design documents]
• https://github.com/Kavex/GameDev-Resources [Game Development resources]
• https://github.com/crazyshader/GameDev [Unity]
• https://github.com/RyanNielson/awesome-unity [Unity]
• https://github.com/QianMo/Unity-Design-Pattern [Unity Design]
• https://github.com/michal-z/zig-gamedev [Building game development ecosystem for ziglang]
• https://github.com/OTFCG/Awesome-Game-Analysis [Video game tech analysis resources]
• https://github.com/killop/anything_about_game [Game Development resources]
• https://github.com/TastSong/GameProgrammerStudyNotes [Game Development notes]
• https://github.com/gmh5225/gtav-sourcecode-build-guide [GTA V Source Code Build Tutorial]

Source

• https://github.com/PiMoNFeeD/csgo-src [Leaked CSGO]
• https://github.com/perilouswithadollarsign/cstrike15_src [Leaked CSGO With CI]
• https://github.com/gmh5225/Far-Cry-1-Source-Full [Leaked Far Cry 1]
• https://github.com/gmh5225/FarCry [Leaked Far Cry 1]
• https://github.com/SwagSoftware/Kisak-Strike [Open Source CSGO]
• https://github.com/SwagSoftware/KisakCOD [COD4 Open Source Reimplementation]
• https://github.com/SwagSoftware/KisakBlack [COD:Black Ops Open Source Reimplementation]
• https://github.com/gmh5225/csso-src [CSGO Mod]
• https://github.com/thomaseichhorn/cs16-client [Rewrote CS1.6]
• https://github.com/s1lentq/ReGameDLL_CS [Reversed CS1.6]
• https://github.com/Velaron/cs16-client [Reversed CS1.6]
• https://github.com/Source2ZE/CS2Fixes [CS2 mod]
• https://github.com/gmh5225/Game-GTA-re3 [Reversed GTA III, Vice City]
• https://github.com/gmh5225/reGTA [Reverse Engineered GTA III and GTA VC]
• https://github.com/gta-reversed/gta-reversed-modern [Reimplementation of GTA:SA 1.0 US]
• https://github.com/ThirteenAG/GTAIV.EFLC.FusionFix [GTA IV: Complete Edition fixes and modern-feature patch (graphics, FPS, QoL, scripting, widescreen)]
• https://github.com/gmh5225/Grand-Theft-Auto-Modding-Source [Code snippets for Vice City]

MCP server

• https://github.com/TensorBlock/awesome-mcp-servers [Awesome MCP]
• https://github.com/ahujasid/blender-mcp [Blender Model Context Protocol Integration]
• https://github.com/chongdashu/unreal-mcp [MCP for Unreal Engine]
• https://github.com/kvick-games/UnrealMCP [MCP for Unreal Engine]
• https://github.com/VedantRGosavi/UE5-MCP [MCP for Unreal Engine 5]
• https://github.com/justinpbarnett/unity-mcp [MCP for unity]
• https://github.com/wondeks/unity-mcp [MCP for unity]
• https://github.com/gmh5225/mcpup [MCP for unity]
• https://github.com/IvanMurzak/GameDev-MCP-Server [Engine-agnostic MCP server shared by Unity-MCP, Godot-MCP, and Unreal-MCP]
• https://github.com/n24q02m/better-godot-mcp [Composite MCP server for Godot Engine AI-assisted game development]
• https://github.com/gmh5225/vibe-blocks-mcp [MCP for Roblox Studio]
• https://github.com/LaurieWired/GhidraMCP [MCP for Ghidra]
• https://github.com/jtang613/GhidrAssistMCP [MCP for Ghidra]
• https://github.com/mrphrazer/ghidra-headless-mcp [ghidra-headless-mcp — headless Ghidra over MCP]
• https://github.com/mrexodia/ida-pro-mcp [MCP for IDA pro]
• https://github.com/bkerler/ida_rpc [IDA Pro JSON-RPC daemon for LLM/agent-assisted RE: decompile, xrefs, types, patches; headless & GUI; ghidra-rpc-compatible CLI]
• https://github.com/cellebrite-labs/ida-bridge [Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]

MCP server security

• https://github.com/johnhalloran321/mcpSafetyScanner [MCPSafetyScanner - Automated MCP safety auditing and remediation using Agents]
• https://github.com/appsecco/vulnerable-mcp-servers-lab [A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers]

AI Agents

• https://github.com/0xeb/windbg-copilot [WinDbg Copilot - Agentic Debugging extension]
• https://github.com/originsec/pocsmith [Autonomous Windows POC developer from patchwatch diff reports; Claude agent + MCP (Hyper-V, kd, Ghidra) to write, build, and verify PoCs on pre-patch VMs]
• https://github.com/leigest519/OpenGame [Open agentic coding for web games end-to-end from prompts; Game Skill (template + debug); GameCoder-27B; OpenGame-Bench; qwen-code-based CLI]
• https://github.com/0x0funky/agent-sprite-forge [Codex skills for game-ready 2D sprites, layered maps, and engine-ready prototypes (Godot/Unity)]
• https://github.com/dreiachse-cyber/image-cockpit-for-codex-workflows [Local cockpit for Codex imagegen workflows — pixel art, region-based editing, animation frames and sprite sheets via codex-handoff inbox/outbox; no direct OpenAI API calls]
• https://github.com/htdt/godogen [Autonomous game development for Godot, Bevy, and Babylon.js with Claude Code and Codex; plans, generates assets, screenshot-guided self-repair]
• https://github.com/MRCalderon3D/everything-game-dev-code [Multi-engine AI agent scaffold for Unity/Unreal/Godot/HTML with Claude, Codex, Cursor, OpenCode, and Kiro harnesses]
• https://github.com/gamedev-skills/awesome-gamedev-agent-skills [66 version-pinned game-dev Agent Skills plus router for Godot/Unity/Unreal and other engines across Cursor/Claude/Codex]

Game Assets

• https://github.com/Miziziziz/Retro3DGraphicsCollection
• https://github.com/KyleBing/retro-game-console-icons [Retro game console icons in multiple PNG sizes; TrimUI/Miyoo themes]
• https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
• https://github.com/HitmanHimself/GOWTool [God of War 2018]
• https://github.com/KhronosGroup/glTF [Runtime 3D Asset Delivery]
• https://github.com/syoyo/tinygltf [Header only C++11 tiny glTF 2.0 library]
• https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D asset pipeline: spec → GLB; QA gate, review HTML, web/Unity/Unreal export packages; manifest provenance]
• https://github.com/atenfyr/UAssetGUI [Viewing and modifying UE4 game assets]
• https://github.com/UETools/UETools [Accessing, reading and deserializing UE4 assets]
• https://github.com/atenfyr/UAssetAPI [A low-level .NET library for reading and writing Unreal Engine game assets]
• https://github.com/r6e/paksmith [Rust cross-platform Unreal Engine pak/UAsset explorer and extractor (pak v3–v11, textures/meshes/audio export)]

Game Hot Patch

• https://github.com/Tencent/xLua
• https://github.com/Tencent/InjectFix
• https://github.com/focus-creative-games/hybridclr

Game Testing

• https://github.com/UnityTech/GamesTestAutomationExample [The collecting ideas on how to do Test Automation in Games]
• https://github.com/nowsprinting/UnityAutomatedQAExamples [Unity Automated QA Guidebook]
• https://github.com/AirtestProject/Airtest [UI Automation Framework]
• https://github.com/dendibakh/perf-ninja [Performance Analysis]
• https://github.com/CookiePLMonster/UptimeFaker [Detecting High PC Uptime]
• https://github.com/GameTechDev/PresentMon [Graphics Performance]
• https://github.com/gatling/gatling [Server Testing]
• https://github.com/aristocratos/btop [Performance Monitor]
• https://github.com/Celtoys/Remotery [A realtime CPU/GPU profiler]
• https://github.com/Volkanite/Push [Monitor GPU/CPU/RAM performance]
• https://github.com/google/orbit [C/C++ Performance Profiler]
• https://github.com/wolfpld/tracy [C++ frame profiler]
• https://github.com/bombomby/optick [C++ Profiler For Games]
• https://github.com/RomanceTheHeart/Automation_Examples [Automating certain tasks in the Unreal editor]
• https://github.com/DaedalicEntertainment/ue4-test-automation [Facilitates setting up integration test suits with Unreal Engine 4 Gauntlet]
• https://github.com/DenuvoSoftwareSolutions/Onlooker [Tool to collect and visualize memory usage of a process tree]
• [CPU scope based profiling library]

Game Tools

• Play your favorite games in a borderless window; no more time consuming alt-tabs
• https://github.com/bad-antics/rce-shield [RCE hardening toolkit for PC gamers]
• https://github.com/Genymobile/scrcpy [Display and control your Android device]
• https://github.com/ryanjon2040/Unreal-Binary-Builder [Build UE Source]
• https://github.com/ryanjon2040/UnrealNetworkProfiler [Network Profiler for UE]
• Command line tool for getting the download URL for the latest or specific version of Unity
• https://github.com/recastnavigation/recastnavigation [Navigation-mesh Toolset for Games]
• https://github.com/TensorWorks/UE-Clang-Format [UE Clang-Format configuration]
• https://github.com/inflation/goldberg_emulator [Steam emulator]
• https://github.com/PixiEditor/PixiEditor [PixiEditor is a Universal Editor for all your 2D needs]

Game Manager

• https://github.com/JosefNemec/Playnite

Game CI

• https://github.com/game-ci
• https://github.com/nikaera/Unity-GameCI-Sample [Unity]
• https://github.com/EpicGames/lore [Epic Games open source VCS for games: content-addressed chunk storage, sparse workspaces, tamper-evident history, large binary assets; Rust; UEFN]

DirectX

Guide

• https://github.com/planetchili/hw3d [C++ 3D DirectX Tutorial]
• https://github.com/jpvanoosten/LearningDirectX12 [DX12]
• https://github.com/PAMinerva/LearnDirectX [DX12]
• https://github.com/MKXJun/DirectX11-With-Windows-SDK [DX11 zh]
• https://github.com/yottaawesome/intro-to-dx11-revisited [Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 11]
• https://github.com/d3dcoder/d3d12book [DX12]
• https://github.com/yottaawesome/intro-to-dx12-2nd-edition-revisited [Modernized C++ revisited source for Frank Luna's Introduction to 3D Game Programming with DirectX 12 (2nd ed.)]
• https://github.com/pkurth/D3D12Renderer [DX12]

Hook

• https://github.com/rdbo/DX11-BaseHook [DX11 Imgui]
• https://github.com/DrNseven/D3D12-Hook-ImGui [DX12 Imgui]
• https://github.com/frostbone25/ShaderInjector [D3D12 shader injector for FF7 Rebirth PC — intercepts rendering API calls to inject/replace pixel shaders at runtime; minhook + ImGui; adaptable to other D3D12 titles]
• https://github.com/Qervas/segcap [D3D12 hooking tool extracting per-pixel object-ID segmentation masks from shipping UE4/UE5 games without engine source or modification]
• https://github.com/baobao1044/GameLagReducer [Launcher + native DLL that hooks D3D11/OpenGL/Vulkan to capture and flatten/replace shaders at runtime for FPS]
• https://github.com/niemand-sec/DirectX11Hook [DX11 Imgui]
• https://github.com/guided-hacking/GH_D3D11_Hook [DX11]
• https://github.com/justinstenning/Direct3DHook [Direct3D 9/10/11 API hooks for screen capture and in-game overlays]
• https://github.com/techiew/DirectXHook [DirectX 11/12 Present hook with a simple in-game overlay framework]
• https://github.com/nefarius/HydraHook [DirectX 9–12 API-hooking and overlay rendering framework for games]
• https://github.com/aufkrawall/capture-engine [Windows game capture with injected D3D9–D12, Vulkan, OpenGL, and DXVK hooks, custom overlays, and frame pacing]
• https://github.com/gogo9211/Discord-Overlay-Hook [DX11]
• https://github.com/ocornut/imgui/commit/923bd2fd217c1dc1e75fa92b0284d3817904988b [DX11/12 ResizeBuffers]
• https://github.com/marlkiller/d3dhook_imgui [d3d opengl hook imgui x86/x64]

Tools

• https://github.com/visotw/3d9 [Fixing broken stereoscopic effects in DX11 games]

Emulation

• https://github.com/code-tom-code/Software_D3D9 [DX9]

Compatibility

• https://github.com/CnCNet/cnc-ddraw [Old Game]
• https://github.com/openeggbert/free-direct [DirectX 3 (DirectDraw/DirectSound) subset reimplemented on SDL3 for running legacy 2D games]
• https://github.com/elishacloud/dxwrapper [DirectX DLL wrapper for older games on Win10/11; Dd7to9/d3d8to9, DDrawCompat, ASI loader]
• https://github.com/REDPOWAR/D2GI [DirectDraw7/D3D7 to D3D9 wrapper for Hard Truck 2 (King of the Road) — modern resolutions, MSAA, anisotropic filtering, graphics fixes, widescreen hooks]
• https://github.com/aleko2144/KoTR_Modern_Patch [King of the Road / Hard Truck 2 ASI patch — collision, camera, physics, AI traffic, trailer and UI fixes; complements D2GI; ModUtils + Ultimate ASI Loader]
• https://github.com/xoxor4d/gta4-rtx [GTA IV RTX Remix compatibility mod — adapts Complete Edition for NVIDIA RTX Remix path-traced remaster pipeline; complements FusionFix]
• https://github.com/microsoft/D3D9On12 [The Direct3D9-On-12 mapping layer]
• https://github.com/Daniel-Lobo/WineHooks [Compatibility and enhancement framework for classic PC games]
• https://github.com/samuelgr/Xidi [DirectInput interface for XInput controllers]

Overlay

• https://github.com/SeanPesce/Direct3D9-Overlay
• https://github.com/dantebuilds/swapchain-bottleneck [Architecture analysis of DXGI swapchain/MPO overlay injection, Present-hook collisions, TDR cascades, and anti-cheat whitelist friction]

OpenGL

Guide

• https://github.com/JoeyDeVries/LearnOpenGL

Source

• https://github.com/brackeen/glfm [Write OpenGL ES code in C/C++]

Hook

• https://github.com/bruhmoment21/UniversalHookX

Vulkan

Guide

• https://github.com/googlesamples/android-vulkan-tutorials

API

• https://github.com/liblava/liblava [Modern and easy-to-use library for Vulkan]
• https://github.com/corporateshark/lightweightvk
• https://github.com/BeRo1985/pasvulkan [Object Pascal Vulkan header generator, OOP API wrapper, and Vulkan-based engine framework]

Hook

• https://github.com/Rebzzel/kiero [X86/64 Windows]
• https://github.com/kirchesz/kiero2 [kiero v2 — locate Vulkan/D3D/OpenGL API method addresses at runtime; BYO hooking; Win/Linux/macOS]
• https://github.com/ales-drnz/vocem-overlay [Linux in-game overlay via Vulkan implicit layer and OpenGL interposer]
• https://github.com/bruhmoment21/UniversalHookX [X86/64 Windows]
• https://github.com/gmh5225/Vulkan-Hook [X86/64 Windows]
• https://github.com/Sh0ckFR/Universal-Dear-ImGui-Hook
• https://github.com/Halen84/ImGuiRDR2Hook

Cheat

Guide

• https://github.com/dsasmblr/game-hacking
• https://github.com/dsasmblr/hacking-online-games
• https://github.com/jbro129/android-modding [A collection of repositories related to Android game modding]
• https://github.com/kovidomi/game-reversing
• https://github.com/TheZong/Game-Hacking
• https://github.com/mytechnotalent/Reverse-Engineering
• https://github.com/wtsxDev/reverse-engineering
• https://github.com/mytechnotalent/Hacking-Windows
• https://github.com/mytechnotalent/hacking-rust [Free step-by-step Rust reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
• https://github.com/mytechnotalent/go-hacking [Free step-by-step Golang reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
• https://github.com/mytechnotalent/embedded-hacking [Free embedded reverse-engineering course (RP2350/Pico 2) with GDB, Ghidra, OpenOCD, and hands-on firmware hacking labs]
• https://github.com/kotae4/intro-to-gamehacking
• https://github.com/ridpath/gamehacking-cheatsheet [Game-hacking cheatsheet covering memory RE, injection, and anti-cheat topics]
• https://blog.can.ac/author/can1357
• https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
• https://secret.club
• https://back.engineering

Debugging

• https://github.com/stars/gmh5225/lists/debugger [List]
• https://github.com/cheat-engine/cheat-engine
• https://github.com/L-Spiro/MhsX [64-bit from-scratch MHS successor: memory searcher/debugger with expression scans, regex/string search, floating-point studio, hex editor, and scripting]
• https://github.com/NulledNah/cheat-engine-undetectable [Modified Cheat Engine with user-mode evasion, direct syscalls, and BYOVD kernel bridge for AC research]
• https://github.com/Squalr/Squalr-Sharp [C# game memory editor with scanning, pointers, and assembly injection]
• https://github.com/HeathHowren/Pointer-Lab [Windows x64 user-mode memory scanner and debugger with pointer chains, disassembly, patching, and ImGui UI]
• https://github.com/TASEmulators/BizHawk [Multi-system C# emulator with memory inspection, rerecording, and per-core debugging tools for retro game analysis]
• https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
• https://github.com/JasonGoemaat/CheatEngineMonoHelper [CE Mono Helper]
• https://github.com/gmh5225/frida-ceserver [CE Server For IOS]
• https://github.com/gmh5225/ceserver-ios [Porting ceserver to iOS.Dynamic analysis]
• https://github.com/0xiuks/ceserver-ios [An iOS port of Cheat Engine's ceserver]
• https://github.com/gmh5225/cheat-engine-ceserver-pcileech [CE Server For Pcileech]
• https://github.com/user23333/veh [CE Plugin For Manualmap VEH Dll]
• https://github.com/x64dbg/x64dbg [A debugger for Windows x86/64]

Packet Sniffer&Filter

• https://github.com/WPO-Foundation/win-shaper
• https://github.com/wiresock/ndisapi
• https://github.com/gmh5225/Akebi-PacketSniffer
• https://github.com/basil00/Divert [Packet Divert]
• https://github.com/fksvs/inject
• https://github.com/hercul3s/Packet-Sniffer [Packet Logger/Decryptor]
• https://github.com/airvzxf/sniparinject [Python Scapy game packet sniffer/parser with YAML action maps]

Packet Capture&Parse

• https://github.com/seladb/PcapPlusPlus [Pcap]
• https://github.com/nmap/npcap

SpeedHack

• https://github.com/absoIute/Speedhack
• https://github.com/Letomaniy/Speed-Hack
• https://github.com/IamSanjid/ce_speed_hack

RE Tools

• https://dogbolt.org
• https://github.com/msd0pe-1/cve-maker [Tool to find CVEs and Exploits]
• https://github.com/0liverFlow/CVE2PoC [Aggregate public PoCs/exploits for a CVE ID — GitHub, ExploitDB, Nuclei, Metasploit; CVSS/EPSS/CISA KEV; Docker labs, bug bounty write-ups, CVE↔CPE mapping; JSON/HTML reports]
• https://github.com/Zierax/Grafana-Final-Scanner [Grafana scanner with public CVE checks, version fingerprinting, and config analysis for easier Grafana security testing]
• https://github.com/mentebinaria/retoolkit [Reverse Engineer's Toolkit]
• https://github.com/lilyco-42/rev-tools-setup [One-click Windows RE toolchain installer (Scoop) with Cheat Engine MCP setup and AI agent pitfalls guide]
• https://github.com/rollingrock/bethesda-modding-starter [Bootstrap for Bethesda script-extender plugin dev plus Ghidra/x64dbg MCP reverse-engineering toolchain]
• https://github.com/ling71671/open-reverselab [Agent-native RE lab with knowledge base, 100+ MCP tools, and APK/PE/game-cheating analysis workflows]
• https://github.com/stevemk14ebr/RETools
• https://github.com/smallworld-re/smallworld [Environment for streamlined binary harnessing for dynamic analysis]
• https://github.com/BataBo/ACEPatcher [.NET Patcher]
• https://github.com/waryas/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
• https://github.com/Qfrost911/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
• https://github.com/VollRagm/PTView [Browse Page Tables on Windows]
• https://github.com/iBotPeaches/Apktool [Apk]

Mixed boolean-arithmetic

• https://github.com/bliutech/mbased [Practical Simplifications of Mixed Boolean-Arithmetic Obfuscation]
• https://github.com/SynthesisLab/MBA [High-performance Mixed Boolean-Arithmetic (MBA) expression synthesis tool]
• https://github.com/astean1001/ProMBA [MBA deobfuscator via Program Synthesis and Term Rewriting]
• https://github.com/fvrmatteo/DrillAndJoin [C++17 Drill & Join exact Boolean synthesis; SMT-guided 64-bit opaque-predicate and MBA-style simplification via Bitwuzla]
• https://github.com/DenuvoSoftwareSolutions/GAMBA [Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA]
• https://github.com/mizt0/mixed-boolean-transform [Mixed boolean arithmetic x+y transform]
• https://github.com/nhpcc502/MBA-Obfuscator [Non-linear Mixed Boolean-Arithmetic Expressions]
• https://github.com/z1ko/mutaben [A simple mixed-boolean-arithmetic (MBA) generator witten in python]
• https://github.com/LostOxygen/gnn_deobfuscation [Mixed boolean arithmetic deobfuscation using graph neural networks]
• https://github.com/MBA-research/mba-wasm [Mixed Boolean-Arithmetic in Rust for WebAssembly]
• https://github.com/trailofbits/CoBRA [Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation]
• https://github.com/thalium/rumba [Cracking MBAs - An MBA simplification library]
• https://github.com/LLVMParty/smt-server [A small SMT solving server and wire-format toolkit for bit-vector and Boolean formulas]
• https://github.com/stp/stp [Simple Theorem Prover, an efficient SMT solver for bitvectors]
• [A circuit-based Boolean satisfiability (SAT) solver based on DAG logic networks instead of CNF]

Fix VMP

• https://github.com/gmh5225/VMProtect
• https://github.com/wallds/NoVmpy
• https://github.com/can1357/NoVmp [Static VMProtect x64 3.x devirtualizer powered by VTIL]
• https://github.com/JonathanSalwan/VMProtect-devirtualization [Experimental VMProtect 3.x pure-function deobfuscation via symbolic execution and LLVM]
• https://github.com/gmh5225/VMP-Vmp3_64bit_disasm-prerelease-
• https://github.com/gmh5225/Vmp3_utils
• https://github.com/mike1k/VMPImportFixer [Resolves VMProtect 3.x import protection via emulation (x86/x64)]
• https://github.com/archercreat/titan
• https://github.com/NaC-L/Mergen
• https://github.com/fjqisba/VmpHelper
• https://github.com/xtremegamer1/vmdevirt-vtil
• https://github.com/oureveryday/VMPUnpacker/tree/master [Unpacker]
• https://github.com/void-stack/VMUnprotect.Dumper [Dynamically untamper/unpack VMProtect-protected .NET assemblies]
• https://github.com/void-stack/VMUnprotect [Dynamically log/manipulate VMProtect-virtualized .NET methods via Harmony]
• https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
• https://github.com/notsnakesilent/VMPStatic [A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images]
• https://github.com/milk-analyzer/vmpunpack [Generic x64 VMProtect/packer unpacker that drives samples through patched sogen emulation to OEP, dumps memory, and rebuilds PEs for IDA/Ghidra]

Fix Themida

• https://github.com/sodareverse/TDE
• https://github.com/ergrelet/themida-unmutate
• https://github.com/ergrelet/unlicense [Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x]
• https://github.com/Hendi48/Magicmida [Themida auto-unpacker for 32/64-bit apps with dump and section restore helpers]
• https://github.com/guoxing2024/magicmida-rs [Rust reimplementation of Magicmida Themida unpacker with IAT rebuild and OEP discovery]
• https://github.com/bobalkkagi/bobalkkagi [Themida 3.x unpacking/unwrapping via API-hook emulation (Tiger red64)]
• https://github.com/stuxnet147/Themida-Research [Themida 3.x research]
• https://github.com/Marisa-Chan/GhidrOrean [Ghidra Python reimplementation of Deathway's Orean's Unvirtualizer — Oreans VM (Themida/Code Virtualizer) CISC/TIGER/RISC/FISH]

Fix OLLVM

• https://github.com/w00tzenheimer/d810-ng [D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
• https://bbs.pediy.com/thread-272414.htm
• https://github.com/obpo-project/obpo-plugin
• https://github.com/IIIImmmyyy/AntiOllvm [AntiOllvm Fla with Fake Runtime]
• https://github.com/Mrack/DeObfBR [libtprt.so]
• https://github.com/zhuzhu-Top/deobf [libtprt.so]
• https://github.com/cdong1012/ollvm-unflattener [unflattener]
• https://github.com/JbvrgtonYT/ollvm-unflattener [unflattener]
• https://github.com/guheng-re/unflat [unflattener]

Dynamic Binary Instrumentation

• https://github.com/hzqst/unicorn_pe
• https://github.com/AdvDebug/Brovan [User-mode x86_64 binary emulator for PE, ELF, memory dumps, and unrecognized file formats; C#, Unicorn, interactive debugger shell]
• https://github.com/momo5502/sogen [Windows User Space Emulator]
• https://github.com/mojtabafalleh/emulator [Windows User Space Emulator]
• https://github.com/binsnake/KUBERA [A x86 environment emulator for Windows user and kernel binaries]
• https://github.com/HexRaysSA/rax [Self-checking CPU emulator: x86-64/AArch64/Hexagon/RISC-V; instruction-level diff vs KVM/QEMU oracles; boots Linux, SDE trace, GDB stub for IDA, SMIR JIT; Rust, MIT]
• https://github.com/ZehMatt/zyemu [x86-64 user mode emulation using Zydis]
• https://github.com/Nitr0-G/PeVisor [PE]
• https://github.com/googleprojectzero/TinyInst
• https://revers.engineering/applied-re-crude-te-for-control-flow-tracing/ [Applied RE: Crude Trap-and-Emulate for control-flow tracing on Windows x64 user mode]
• https://github.com/revsic/cpp-veh-dbi
• https://github.com/ZehMatt/CovCane
• https://github.com/bitdefender/river
• https://github.com/beehive-lab/mambo [ARM]
• https://github.com/GJDuck/e9patch [E9Patch is a powerful static binary rewriting tool for x86_64 Linux ELF binaries]
• https://github.com/DynamoRIO/drmemory
• https://github.com/aroxby/dynre-x86

Launcher Abuser

• https://github.com/Ricardonacif/launcher-abuser

PatchGuard-related

• https://github.com/armasm/EasyAntiPatchGuard
• https://github.com/9176324/Shark
• https://github.com/gmh5225/Patchguard-2023 [Shark]
• https://github.com/hfiref0x/UPGDSED [File]
• https://github.com/Mattiwatti/EfiGuard [EFI]
• https://github.com/zzhouhe/PG1903 [Demo NX]
• https://gist.github.com/gmh5225/0a0c8e3a2d718e2d6f9b6a07d5e0f80a [PG CTX]
• https://github.com/gmh5225/QuickPGTrigger [Stress Testing]
• https://github.com/tandasat/Sushi [Monitoring PG]
• https://github.com/gmh5225/Disabling-Hyper-V [Disable Hyper-V]
• https://github.com/AdamOron/PatchGuardBypass
• https://github.com/zer0condition/Demystifying-PatchGuard
• https://github.com/4l3x777/dse_pg_bypass [DSE & PG bypass via BYOVD attack]
• https://github.com/gmh5225/VulnerablePatchGuardExploit [A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime]
• https://github.com/emlinhax/tableflipper [partially disable patchguard up to win11 21H2]
• https://github.com/AmitMoshel1/PatchGuardEncryptorDriver [Self-implemented PatchGuard]
• https://r0keb.github.io/posts/PatchGuard-Internals [PatchGuard Internals]
• https://github.com/NeoMaster831/kurasagi [Windows 11 24H2 Runtime PatchGuard Bypass]

Driver Signature enforcement

• https://github.com/gmh5225/dse_hook
• https://github.com/gmh5225/Dse-Patcher-2
• https://github.com/gmh5225/DisableDSE
• https://github.com/wesmar/KernelResearchKit [Windows 11 kernel research framework — boot-time DSE bypass on 25H2 by surgically patching SeCiCallbacks via native subsystem to load unsigned drivers; anti-loop protection and dual-path architecture]
• https://github.com/wesmar/BootBypass [Advanced native-mode utility for bypassing DSE and HVCI — smart SeCiCallbacks patching and independent Memory Integrity management via subsystem:native for early-phase security research and driver development]
• https://github.com/wesmar/kvc [Unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on HVCI/VBS-enabled Windows]

Windows Kernel Explorer

• https://github.com/NullArray/WinKernel-Resources [Guide]
• https://github.com/supermanc88/Document/tree/master/Windows%20Driver%20Development [Guide]
• https://windiff.vercel.app [Diff]
• https://github.com/ergrelet/windiff [Web/CLI tool to browse and diff Windows PE symbols, types, and syscalls across OS versions]
• https://github.com/cristeigabriela/bb [Benowin Blanc — parse Windows SDK/PHNT via libclang; struct layouts, enums, constants like dt without WinDbg; CLI + TUI, JSON export]
• https://github.com/cristeigabriela/bb-viewer [Web explorer for bb output: browse Windows SDK/PHNT functions, types, typedefs, constants, and type graphs; user/kernel, amd64/x86/arm/arm64]
• https://github.com/gmh5225/ntoskrnl_file_collection [Various versions of ntoskrnl files]
• https://github.com/gmh5225/win32k_file_collection [Various versions of win32k files]
• https://github.com/gmh5225/win32k_file_collection2 [Various versions of win32k files]
• https://github.com/jiubanlo/WinNT5_src_20201004 [Leaked Windows XP Source]
• https://github.com/yyl-20020115/OpenArk [Tool]
• https://github.com/BeneficialCode/WinArk [Tool]
• https://github.com/zodiacon/ObjectExplorer [GUI explorer for Windows kernel objects, handles, object types, and Object Manager namespace]
• https://github.com/kernullist/kn-diff-pool [Windows kernel Big Pool snapshot/diff tool with kernel driver and Go TUI]
• https://github.com/kernullist/kn-live-dbg [Windows kernel live debugging — driver exposes memory primitives, user-mode TUI handles symbols, types, and UX (LiveKD-style)]

Linux Kernel Explorer

• https://github.com/MatheuZSecurity/Rootkit [Collection of codes focused on Linux rootkits]
• https://github.com/MatheuZSecurity/ksentinel [Kernel integrity monitor for detecting syscall hooking]
• https://github.com/djolertrk/kLLDB [LLDB based debugger for Linux Kernel]
• https://github.com/sad0p/venom [Linux Kernel Rookit Hooking Mechanism]

Magisk

• https://github.com/PShocker/Zygisk-MagiskHide
• https://github.com/longpoxin/hideroot
• https://github.com/canyie/Riru-MomoHider
• https://github.com/newbit1/rootAVD [root AVD]
• https://github.com/Fox2Code/FoxMagiskModuleManager [A module manager for Magisk]
• https://github.com/MMRLApp/WebUI-X-Portable [Portable Android app providing the MMRL WebUI X interface for browsing, installing, and managing Magisk/APatch/KernelSU modules]
• https://github.com/Dr-TSNG/ZygiskOnKernelSU [Run Zygisk on KernelSU]
• https://github.com/svoboda18/magiskboot [Boot Image Modification Tool]
• https://github.com/xiaoxindada/magiskboot_ndk_on_linux [Boot Image Modification Tool]
• https://github.com/ookiineko/magiskboot_build [Boot Image Modification Tool]
• https://github.com/gmh5225/magiskboot-linux [Use GitHub Actions to build magiskboot]
• https://github.com/the-dise/EasyPixel [Magisk module that disguises a device under Google Pixel]
• https://github.com/mrx7014/SpoofingCollection [Magisk and LSPosed module collection for spoofing Android device fingerprints (manufacturer, model, build props)]
• https://github.com/gmh5225/MagiskHide [Portable MagiskHide]
• https://github.com/lico-n/ZygiskFrida [Injects frida gadget using zygisk]
• https://github.com/Admirepowered/Zygisk_mod [Standalone implementation of Zygisk]

Xposed

• https://github.com/NPC2000/AppPealing-new [An Xposed module that disables Inka AppSealing, a popular anti-cheat and anti-root solution]
• https://github.com/mabbcoll13/xposed-module-kit [Xposed/LSPosed module scaffold with hook templates and root-detection bypass example]
• https://github.com/Jordan231111/lsposed-universal-template [LSPosed/LSPatch module template with Unity/Unreal/Godot engine detection, native pattern scan and memory helpers, and runtime overlay toggles]
• https://github.com/wchunlin1006/LocusMimic [LSPosed/Xposed Android GPS spoof module with map picker, saved locations, and app/system/mock-provider modes]
• https://github.com/salvogiangri/KnoxPatch [LSPosed module to restore Samsung Knox-gated apps and features on rooted Galaxy devices]

Frida

• https://github.com/hackcatml/frida-watchpoint-tutorial [Frida's setHardwareWatchpoint tutorial]
• https://github.com/ChiChou/grapefruit [Runtime mobile instrumentation toolkit for iOS/Android, web UI]
• https://github.com/firerpa/lamda [Android full-stack device control with built-in Frida, MITM, UI automation, and reverse-engineering APIs]
• https://github.com/Kakaxh1/RootRaven [Self-hosted Android/iOS pentest dashboard with Frida hooking, SSL pinning bypass, APK decompilation, and Burp proxy setup]
• https://github.com/index-login/MobileRE-Skill [AI-agent mobile reverse-engineering skill set with layered Frida hooks and a six-stage anti-detection pipeline]
• https://github.com/ChiChou/vscode-frida [Unofficial Frida extension for VSCode]
• https://github.com/ChiChou/bagbak [iOS Frida app decrypt / dump to IPA; extensions; jailbreak; bagbak@5 needs frida@17; deprecated]
• https://github.com/CrackerCat/strongR-frida-android
• https://github.com/gmh5225/frida-ue4dump [UE4]
• https://github.com/jcalabres/hook-updater [Update Frida hooks automatically]
• https://github.com/gmh5225/frida-boot [A binary instrumentation workshop, with Frida, for beginners]
• https://github.com/smartdone/Frida-Scripts [Some scripts]
• https://github.com/0xdea/frida-scripts [Some scripts]
• https://github.com/SeeFlowerX/frida-smali-trace [Smali trace]
• https://github.com/Ylarod/Florida [anti-detection version of frida-server]
• [Trace classes/functions/and modify the return values]

Hook ART(android)

• https://github.com/PAGalaxyLab/YAHFA
• https://github.com/canyie/pine

Hook syscall(android)

• https://github.com/iofomo/abyss [Android system call hook]

Android Terminal Emulator

• https://github.com/termux/termux-app
• https://github.com/DP-Hridayan/aShellYou [Material You Android ADB/root/shell utility (Shizuku, OTG, wireless debugging)]
• https://github.com/gmh5225/neotty
• https://github.com/jackpal/Android-Terminal-Emulator
• https://github.com/NeoTerrm/NeoTerm

Android File Explorer

• https://github.com/nzcv/note [Guide-zh]
• https://github.com/iBotPeaches/Apktool [A tool for reverse engineering Android apk files]
• https://github.com/AndnixSH/APKToolGUI [GUI for apktool, signapk, zipalign and baksmali utilities]
• https://github.com/pxb1988/dex2jar
• https://github.com/skylot/jadx [Dex to Java decompiler]
• https://github.com/neocanable/garlic [Fast APK/DEX/JAR Java decompiler (C)]
• https://github.com/LuckyPray/DexKit-Android [dex deobfuscator]
• https://github.com/LSPosed/DexBuilder [Generate dex file by c++]
• https://github.com/rednaga/APKiD [PEiD for Android]
• https://github.com/APKLab/APKLab [Android Reverse-Engineering Workbench for VS Code]
• https://github.com/pgp/XFiles [File explorer for (rooted) Android]
• https://github.com/gmh5225/AdbFileManager [File manager using ADB protocol]
• https://github.com/MuntashirAkon/AppManager [A full-featured package manager and viewer]
• https://github.com/pgp/XFiles [A general-purpose file explorer for (rooted) Android]
• https://github.com/Raival-e/File-Explorer [An Android file explorer]
• https://github.com/SysAdminDoc/FileExplorer [Full-featured rooted Android file manager (Kotlin/Compose) with dual-pane tabs, SAF, USB OTG, APK analyzer, and root module browser]
• https://github.com/obfusk/apksigcopier [apksigcopier - copy/extract/patch android apk signatures & compare apks]

Android Memory Explorer

• https://github.com/misc0110/PTEditor [PT Editor]
• https://github.com/joaomlneto/procmap
• https://github.com/kp7742/MemDumper [Dump]
• https://github.com/LLeavesG/eBPFDexDumper [DexDumper based eBPF on Android Platform]
• https://github.com/mrcang09/Android-Mem-Edit
• https://github.com/ExploitTheLoop/writemem
• https://github.com/abcz316/rwProcMem33 [Linux read & write process memory module]
• https://github.com/ri-char/rwMem [The fork version of rwProcMem33]
• https://github.com/IAIK/armageddon [Cache attacks on ARM]
• https://github.com/tamirzb/CVE-2021-1961 [CVE RW]
• https://github.com/MJx0/KittyMemory [Runtime code patching]
• https://github.com/gmh5225/KittyMemory-IOS [Runtime code patching for IOS]
• https://github.com/vrolife/mypower [Memory scanner]
• https://github.com/gmh5225/memory_server [Memory scanner & analyzer with REST API]
• https://github.com/KuhakuPixel/AceTheGame [Game Hacking Tools]
• https://github.com/dbcyyds/MemDbg [Android CE-style memory debugger with Vulkan+ImGui overlay, root engine, pointer scan, and Lua 5.4]
• https://github.com/gmh5225/Android-MemoryTool [RPM]
• https://github.com/Anonym0usWork1221/C-Android-Memory-Tool [RPM]

Android Application CVE

• https://github.com/shakevsky/keybuster [Samsung Keymaster TA — AES-GCM IV reuse (CVE-2021-25444) and downgrade (CVE-2021-25490) PoC; hardware key extraction on Galaxy S8–S21; TrustZone research client]
• https://github.com/nahid0x1/CVE-2024-0044 [a vulnerability affecting Android version 12 & 13]

Android Kernel CVE

• https://github.com/ScottyBauer/Android_Kernel_CVE_POCs [List]
• https://github.com/tangsilian/android-vuln [List]
• https://github.com/jiayy/android_vuln_poc-exp [List]
• https://github.com/jsirichai/CVE-2019-2215 [Root for Pixel 2/XL]
• https://github.com/bluefrostsecurity/CVE-2020-0041 [Root for Pixel 3]
• https://github.com/j4nn/CVE-2020-0041 [Root for Pixel 3]
• https://github.com/polygraphene/DirtyPipe-Android [Root for Pixel 6]
• https://github.com/tiann/DirtyPipeRoot [Root for Pixel 6]
• https://github.com/Markakd/bad_io_uring [Root for Pixel 6]
• https://github.com/0x36/Pixel_GPU_Exploit [Root for Pixel7/8 Pro with Android 14]
• https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver [Root for Samsung]
• https://github.com/0xbinder/android-kernel-exploitation-lab [CVE-2019-2215]
• https://github.com/zhuowei/cheese [CVE-2025-21479]
• https://github.com/farazsth98/poc-CVE-2025-38352 [CVE-2025-38352]
• https://github.com/villager1314/CVE-2026-64560-Analysis [CVE-2026-64560 — posix-cpu-timers non-leader exec() race UAF; Linux/Android trigger PoC + patch analysis]
• https://github.com/x-spy/CVE-2026-43499-popsicle [CVE-2026-43499]
• https://github.com/Colorful-glassblock/duchamp-root [CVE-2026-43499]

Android Bootloader Bypass

• https://github.com/MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass [Xiaomi HyperOS BootLoader Bypass]
• https://github.com/atlas4381/qualcomm_avb_exploit_poc [Unlocking qualcomm bootloader]

Android Key Attestation

• https://github.com/quarkslab/android-hardware-attestation-demo [End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]

IoT / Smart devices

• https://github.com/TaszkSecLabs/xiaomi-c400-pwn [Xiaomi Smart Camera exploits and jailbreak]
• https://github.com/keowu/sjcam [SJCAM SJ4000 Air (Allwinner V3) firmware reverse engineering, parsers, custom CFW (Lelouch), and CVE-2026-52656 PoC]

Android ROM

• https://xdaforums.com [Guide]
• https://github.com/Akipe/awesome-android-aosp [Guide]
• https://github.com/musabcel/android_rom_list [List]
• https://github.com/vm03/payload_dumper [Android OTA payload dumper]
• https://developer.android.com/studio/run/win-usb [Google USB Driver]
• http://www.miui.com/unlock/download.html [Unlocker for xiaomi]
• https://miuiver.com/miflash [MiFlash]
• https://xiaomifirmwareupdater.com [Xiaomi Firmware Updater]
• https://sourceforge.net/projects/recovery-for-xiaomi-devices/files [TWRP for xiaomi]
• https://github.com/cfig/Android_boot_image_editor [Android ROM tool]
• https://github.com/badabing2005/PixelFlasher [Android ROM tool for Pixel]
• https://github.com/Zenlua/Tool-Tree [Android ROM/APK unpack-repack toolkit for root and non-root ARM64 devices]
• https://github.com/Ctapchuk/android_bootable_recovery-OFRP [OrangeFox Recovery]

Android Device Trees

• https://github.com/MiCode/kernel_devicetree [xiaomi device trees]
• https://github.com/cupid-development/ [xiaomi device trees]
• https://github.com/PixelOS-AOSP/official_devices [PixelOS device trees]
• https://github.com/ymdzq/OFRP-device_xiaomi_mondrian [OFRP for Redmi K60 (mondrian)]
• https://github.com/flakeforever/device_xiaomi_mondrian [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]

Android Kernel Source

• https://source.android.com/docs/setup/build/building-kernels [Docs]
• https://android.googlesource.com/kernel/manifest/+refs [manifest]
• https://android.googlesource.com/kernel/manifest [manifest]
• https://android.googlesource.com/kernel/common [GKI]
• https://github.com/aosp-mirror/kernel_common [GKI]
• https://github.com/PixelOS-AOSP/manifest [An AOSP based ROM aiming to provide the best of Pixel]
• https://www.android-x86.org [X86]
• https://blissos.org [X86]
• https://github.com/MiCode/Xiaomi_Kernel_OpenSource [xiaomi kernel]
• https://github.com/xiaomi-sm8450-kernel [xiaomi kernel]
• https://github.com/Danda420/kernel_xiaomi_sm8250 [xiaomi kernel for POCO F3/F4]
• https://github.com/LowTension/android_kernel_xiaomi_sm8475 [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
• https://github.com/GrapheneOS-Archive/kernel_msm-coral [Pixel 4/4XL/4a]
• https://github.com/msnx/KernelSU-Pixel4XL [KernelSU for Google Pixel4XL]
• https://github.com/universal5433/android_kernel_samsung_universal5433 [samsung 15433]
• https://github.com/SM7325-AE/android_kernel_motorola_dubai [Moto Edge 30]
• https://github.com/mylove90/pc_ginkgo [Redmi Note 8/8T with KernelSU]

Android Root

• https://github.com/fynks/awesome-android-root [Awesome Android Root]
• https://github.com/topjohnwu/Magisk
• https://github.com/tiann/KernelSU
• https://github.com/rathorekrishna401-NeuroVoid/ApexSU [Hardened KernelSU fork with Rust userspace, stealth hardening, and reduced attack surface for Android 12+]
• https://github.com/gmh5225/KernelSU-4.4 [Adapted for Linux Kernel 4.4 + Google GCC 4.9]
• https://github.com/BuSung-dev/Root-My-Galaxy [One-click KernelSU installer for supported Samsung Galaxy firmware via CVE-2026-43499]
• https://github.com/bmax121/APatch
• https://github.com/lzghzr/APatch_kpm [APatch modules]
• https://github.com/abcz316/SKRoot-linuxKernelRoot
• https://github.com/0x36/Pixel_GPU_Exploit
• https://github.com/0xCD4/SSL-bypass [Root Detection & SSL Bypass Script]
• https://github.com/quarkslab/android-hardware-attestation-demo [Bypass backend hardware Key Attestation on rooted/unlocked-bootloader devices by Frida-relaying the backend challenge to a clean attestation oracle — genuine TEE/StrongBox chain, no forgery]
• https://github.com/eltavine/Duck-Detector-Refactoring [DuckDetector refactor: Android local device-integrity inspector for root tampering, runtime hooking, mount anomalies, attestation trust, and virtualization evidence]
• https://github.com/systemnb/RootSocketKit [Root privilege IPC via Unix Socket — Magisk/KernelSU/APatch compatible JNI client, reinforcement-proof, low-latency root ops (OpenProcess, ReadMemory)]
• https://github.com/AtawurRahmanTanvir/NEXUS [Root-required Kotlin/Compose Android utility for device identity spoofing, environment sanitization, kernel memory purge, and telemetry/log cleanup]

Android Kernel driver development

• https://github.com/gmh5225/AndroidDriveSignity [Bypass driver signature verification in Android kernel(ARMv8.3)]
• https://github.com/gmh5225/android-kernel-driver-template [A GKI Android kernel driver(AArch64) template]
• https://github.com/dabao1955/kernel_build_action [a action to build kernel automatically]
• https://github.com/systemnb/compile_android_driver [kade — lyenv-based Android kernel driver automation for GKI/non-GKI builds via kadeflow.yaml, ABI patching, and GitHub Actions]
• https://github.com/TheWildJames/kernel_build_scripts [kernel build scripts]
• https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]
• https://github.com/fuqiuluo/ovo [Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping]
• https://github.com/qq703048949/event_replay [Android touch-event replay toolkit: Magisk module + command socket + gesture trace analyze/generate; supports left/right/up/down/click]

Android Kernel Explorer

• https://docs.kernel.org [Linux Kernel documentation]
• https://armv8-ref.codingbelief.com/en [ARM Architecture Reference Manual for ARMv8-A]
• https://github.com/yhnu/op7t [DIY Kernel]
• https://github.com/yabinc/simpleperf_demo [Perf]
• https://github.com/gmh5225/android_ebpf [EBPF]
• https://github.com/PShocker/Android_bpf_sys [EBPF]
• https://github.com/SeeFlowerX/stackplz [EBPF]
• https://github.com/Sh11no/eDBG [eBPF-based lightweight debugger for Android]
• https://github.com/cloudfuzz/android-kernel-exploitation [Android Kernel Exploitation]
• https://github.com/Snoopy-Sec/Localroot-ALL-CVE [Root CVE]
• https://github.com/xmmword/dpatch [Syscall Dispatcher Patching PoC]
• https://github.com/aquasecurity/tracee [Linux Runtime Security and Forensics using eBPF]
• https://github.com/quarkslab/peetch [eBPF toolkit: dump (sniff traffic with PID/process), tls (OpenSSL key/master-secret extraction), proxy (intercept and decrypt TLS); PCAPng + Scapy; OpenSSL, IPv4, TLS 1.2]
• https://github.com/AndroidReverser-Test/Kernel-Trace [A kpm kernel module based on uprobe, capable of simultaneously hooking a large number of user address space functions]
• https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth breakpoint/hook via R^X page split, bypass self-read integrity check]
• https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]

Android Kernel Driver

• https://github.com/rogxo/kernel_hack
• https://github.com/Jiang-Night/Kernel_driver_hack
• https://github.com/systemnb/android-kernel-hacking-toolkit [Android aarch64 LKM toolkit — filecopy, hideproc, propedit, syscall_hijack; CFI bypass, kprobes, mmuhack for sys_call_table]
• https://github.com/WeiJiLab/kernel-hook-framework [Kernel inline hook framework]
• https://github.com/Poko-Apps/MemKernel [RPM]
• https://github.com/libtersafe/KPM-MemReader [KPM kernel module, cross-process memory read via ioctl hook; KernelPatch/APatch]
• https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth probe/hook, R^X page split so read sees original code while exec uses shadow; KernelPatch/APatch]
• https://github.com/Dispa1r/Integrated_kernel_module [Android ARM64 kernel module (lsdriver + wxshadow) + Zygisk injector for game RE — PTE-remap/AT S1E0R memory R/W, W^X shadow-page stealth breakpoints, HW/PTE/single-step breakpoints, do_el0_svc syscall monitor, virtual touch/gyro/GNSS; ptrace-less ELF-linker injection]

Android Network Explorer

• https://github.com/emanuele-f/PCAPdroid
• https://github.com/zhizhuodemao/android_proxy_mcp [Android Proxy MCP — MCP-based HTTP/HTTPS capture & analysis for AI]

Cellular / SIM

• https://github.com/tomasz-lisowski/swsim [Pure-software USIM/UICC SIM card simulator — full APDU/SIM logic without physical hardware; PC/SC via swICC reader; pairs with SIMtrace2/cardem for phone testing; GSM/LTE auth, MILENAGE, private LTE/IoT and cellular security research]

Android memory loading

• https://github.com/icculus/mojoelf
• https://github.com/lockedbyte/so_loader

IOS jailbreak

• https://github.com/KpwnZ/Def1nit3lyN0tAJa1lbr3akTool [iOS 15.7 and iOS 16.5]
• https://github.com/opa334/Dopamine [iOS 15 and 16]
• https://github.com/roothide/Dopamine2-roothide [iOS 15 and 16]
• https://github.com/felix-pb/kfd [iOS 15 and 16]
• https://github.com/0x36/weightBufs [ANE kernel r/w exploit for iOS 15 and macOS 12]
• https://github.com/jjolano/shadow
• https://github.com/gmh5225/IOS-jailbreak--Fugu15
• https://github.com/Kc57/iHide
• https://github.com/palera1n/palera1n
• https://github.com/checkra1n
• https://github.com/opa334/TrollStore [jailed app]
• https://github.com/paradiseduo/IPAPatch [Patch iOS Apps without Jailbreak]
• https://github.com/Nirad-Maharaj/Disable-Call-Recording-BookRestore- [iOS file-exploit based tool to disable call-recording notifications without jailbreak]
• https://github.com/34306/mdc0 [CVE-2025-24203]
• https://github.com/jailbreakdotparty/dirtyZero [CVE-2025-24203]
• https://github.com/wh1te4ever/darksword-kexploit-fun [DarkSword kernel r/w exploit playground; iOS/iPadOS 17.0-26.0.1 except A19/M5; sandbox escape, process control/crash, SSV root FS overwrite, UID/GID/sticky bits, disable ASLR via launchd P_DISABLE_ASLR]
• https://github.com/wh1te4ever/xnu_1day_practice [XNU 1-day exploit practice collection — PoCs for CVE-2019 through CVE-2025 (e.g. 30883, 24153, 24257, 43510, 43520) plus Coruna/PEGruber research]

IOS Network / Location

• https://github.com/Yu9191/wloc [Spoof Apple WiFi/cell network location (gs-loc WLOC) — MITM protobuf patch via Surge/Quantumult X/Loon/Stash/Shadowrocket; online picker + Shortcuts; GCJ-02→WGS84; no jailbreak; indoor/WiFi positioning only]
• https://github.com/mekos2772/ios-location-spoofer [iOS network location spoofer without jailbreak — MITM Apple map lookup responses; patch WiFi BSSID + CellTower coords; Surge/Shadowrocket/Loon/Stash/QX modules; motion state spoof; location-picker web UI]

IOS Memory Explorer

• https://github.com/hackcatml/kfd-explorer [iOS kernel memory explorer]
• https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
• https://github.com/jsherman212/xnuspy [an iOS kernel function hooking framework for checkra1n'able devices]
• https://gist.github.com/gmh5225/95151b245267a27b3cdbea949632c680 [DirtyZero Exp]
• https://github.com/MxIris-Reverse-Engineering/RuntimeViewer [Objective-C Runtime Viewer for macOS and iOS]

IOS File Explorer

• https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
• https://github.com/LaurieWired/Malimite [Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles]
• https://github.com/azw413/Glass [IPA/Mach-O: fat slice selection, Info.plist, Frameworks disassembly, CFG, xref; AArch64 native RE in the same bundle workflow as Android]

IOS App Packaging

• https://github.com/addrianyy/ios_packager [Package and sign iOS applications]
• https://github.com/xscope0/xkvm-ios-injector [Go CLI toolbox to inject, extract, and convert iOS tweak packages for sideloaded IPAs]

Virtual Environments

• https://github.com/FBlackBox/BlackBox [Android]
• https://github.com/ServenScorpion/VirtualApp [Android]
• https://github.com/mandiant/flare-vm
• https://github.com/hzqst/VmwareHardenedLoader
• https://github.com/d4rksystem/VMwareCloak
• https://github.com/utmapp/UTM [Virtual machines for iOS and macOS]

Decompiler

• IDA Pro
• Binary Ninja
• https://github.com/radareorg
• https://github.com/radareorg/iaito [Official radare2 GUI (Qt5/6), focused on reverse engineering workflow]
• https://github.com/gmh5225/ghidra
• https://github.com/adam-040/Enigma [C++ reimplementation of Ghidra analytical core (SoftwareModeling + Utility): no JVM, SLEIGH + native Capstone pipelines, embeddable for AI/agents]
• https://github.com/gmh5225/retdec
• https://github.com/Sidenai/hyperion-disassembler [Native multi-arch disassembler & decompiler — PE/ELF/Mach-O/.NET, x86/x64/ARM64/MIPS/PPC, RTTI recovery, SSA decompiler, Lua scripting, packer detection]
• https://github.com/kernelstub/Retract [Static binary analysis workbench: PE/ELF/Mach-O, x86/x64 disasm, CFG, pseudocode, browser UI via --serve; malware triage and RE]
• https://github.com/AkashaCorporation/HikariSystem-HexCore [VS Code-based native RE IDE: Capstone/Unicorn/Remill/Helix decompilation pipeline, PE/ELF emulation, YARA/IOC/entropy, headless .hexcore_job.json automation, and agent integration]
• https://github.com/kernelstub/Cognitor [Patch Tuesday semantic diff CLI for Windows build snapshots; driver IOCTL lab, defensive patch review, disclosure workflows]
• https://github.com/azw413/Glass [Rust, GPL-3.0] Mobile-first GPU disassembler (gpui) for APK/DEX/smali and AArch64 ELF/Mach-O (Android/iOS); CFG, xref, bin/insn search, annotations, in-place patch export; CLI + MCP; free IDA alternative]
• https://github.com/Col-E/Recaf [Java]
• https://github.com/gmh5225/bytecode-viewer [Java]
• https://github.com/gmh5225/deobfuscator [Java]

IDA themes

• https://github.com/gmh5225/dp701 [Dark theme for IDA Pro]
• https://github.com/gmh5225/ida-dark-plus [Dark+ Theme]
• https://github.com/gmh5225/long_night
• https://github.com/gmh5225/IdaThemer

IDA Plugins

• https://github.com/gmh5225/ida-plugins [List of IDA Plugins]
• https://github.com/gmh5225/idaplugins-list [List of IDA Plugins]
• https://github.com/fr0gger/awesome-ida-x64-olly-plugin [Curated list of IDA, x64dbg, Ghidra, GDB, and OllyDbg plugins]
• https://github.com/gmh5225/idawilli [IDA Pro resources, scripts, and configurations]
• https://github.com/gmh5225/idasdk-collection/tree/master [IDA SDK]
• https://github.com/gmh5225/ida-sdk [IDA SDK]
• https://github.com/gmh5225/IDASkins [Skins]
• https://github.com/gmh5225/ida-nord-theme [Skins]
• https://github.com/giladreich/ida_migrator [Migrate Database]
• https://github.com/gmh5225/NtRays [Windows Kernel Enhance]
• https://github.com/gmh5225/ida_bitfields [Windows Kernel Enhance]
• https://github.com/gmh5225/DriverBuddyReloaded [Windows Kernel Analysis]
• https://github.com/gmh5225/IDA2Obj [COFF Relink]
• https://github.com/synacktiv/dotNIET [Import .NET Symbol]
• https://github.com/aliyunav/Finger [Recognizing Function By Cloud]
• https://github.com/gmh5225/FindFunc [Recognizing Function By Pattern]
• https://github.com/kirovgrad/Renamaida [IDA Pro plugin to build JSON instruction signatures from debug libraries and rename unknown library functions via Jaro-Winkler matching]

Read more