A few months ago while reversing EasyAntiCheat, We discovered a vulnerability inside the service's initialization. It allows any user to maliciously inject unsigned code inside the game's address space.
Full writeup can be found here:
https://t.co/oJWV3S1om8
@irql_@_xeroxz
For over a year, EasyAntiCheat's virtual machine code to asses kernel driver integrity was vulnerable to attacks abusing call hierarchy (the hierarchy of which functions are executed during integrity)
Full write-up here: https://t.co/qjFruMuu6R
@layle_ctf@waleedassar You can also use dbk64.sys to load dbvm, cheat engine's hypervisor (its stored in your ce folder), to make use of its hypervisor debugging capabilities in C/C++ code. Luckily Dark Byte was nice enough to leave examples of code for doing so: https://t.co/eSSFoLR8sL