game security, hypervisors
& anti-cheat evasion.
Master the low-level systems engineering behind modern game security: bare-metal VT-x hypervisors, EPT shadow page-splitting hooks, handleless CR3 memory reads, RDTSC timing spoofing, and UEFI DXE bootkits.
Game Security Academy
Hands-on engineering tracks: building bare-metal VT-x hypervisors, direct CR3 page table walking, EDK II UEFI bootkits, and defeating anti-cheat timing checks.
browse curriculum →Vulnerable Drivers & BYOVD
Real-time database of 400+ vulnerable signed kernel drivers (LOLDrivers & Microsoft Blocklist), HVCI bypass tags, and ready-to-deploy WDAC policy blocklists.
browse driver index →Systems Whitepapers
Deep-dive research notes on Windows internals, hypervisor behavior, microarchitectural timing fuzziness, and kernel exploitation mechanics.
read publications ↓Academy Free Preview Modules
PCIe Bus Architecture, TLP Mechanics & FPGA Boards
How PCIe Direct Memory Access (DMA) cards (CaptainDMA, Squirrel, LeetDMA) read and write physical RAM over the PCIe bus without executing code on the target machine.
Track 6Reversing Unreal Engine & Unity: GNames, GObjects & Decryption
Reverse-engineering Unreal Engine (UE4/UE5) and Unity (IL2CPP) data structures, dumping GNames, GObjects, and GWorld, and defeating compile-time SDK encryption.
Track 1Object Manager Callbacks, Process Handle Stripping & Memory Primitives
Deconstructing ObRegisterCallbacks mechanics, inspecting how access masks mutate across handle operations, evaluating kernel memory primitives (attach vs copy vs manual walk), and writing disciplined IOCTLs.
Research & Systems Writing
- Your Hypervisor Is Glowing How a single hardcoded constant lets the glowies detect every hypervisor that copies it without measuring.