Repository navigation
Anti Cheat
Layered game protection across kernel drivers, privileged services, in-game modules, and backend telemetry. Modern systems monitor handles, image loads, memory integrity, driver trust, virtualization abuse, DMA, and suspicious input.
- Easy Anti-Cheat — service + driver + game-facing integrity (Fortnite, Apex, Rust)
-
BattlEye — handle protection, process/memory scanning (PUBG, R6, DayZ); research ref BlindEye drops BE report-path pool allocs via hooked
ExAllocatePool* - Vanguard — boot-start driver, early driver allowlisting (Valorant, LoL)
- FACEIT AC, VAC (user-mode signatures), GameGuard, XIGNCODE3, ACE
- vac3_inhibitor — C++ VAC3 exploration (hooking / memory analysis)
Detection: memory hashing / manual-map detection; process handle stripping; Kernel Callbacks; Segment Heap–aware pool scanning; behavioral/ML aimbot signals; screenshot + heartbeat.
Architecture: user-mode scanners → kernel callbacks/VAD → optional hypervisor EPT protection → server-side replay/stats.
Threats defended against: injected code, BYOVD, hypervisor abuse (stress/test refs such as vt-debuuger), DMA (PCIe fingerprinting + IOMMU + TPM attestation), AI visual cheats with hardware input.
Platform trust: DSE, PatchGuard, HVCI/VBS, Secure Boot.
Obfuscation tooling: shredder-rs — x86_64 polymorphic instruction shredding for AC / obfuscation-engine research.
Kernel Callbacks · BYOVD · HVCI · DMA · IOMMU · Present Hook · vac3_inhibitor · vt-debuuger · shredder-rs · BlindEye
Anti Cheat (~565 links): guides, packers, engine protection, Detection:* (hook, DMA, injection, ESP, root, …), Ring0/Ring3 callbacks, forensics. Cross-links Windows Security Features.
awesome-game-security · gs.awesome.rip · Wiki mirrors the in-repo knowledge layer under wiki/