Frida Game Hacking MCP

🚀 Frida Game Hacking MCP

A Model Context Protocol (MCP) server that offers Cheat Engine-like capabilities for game hacking via Frida. It allows AI assistants and automation tools to conduct memory scanning, value modification, pattern matching, function hooking, and code injection.

✨ Features

Memory Operations (Cheat Engine Style)

• Value Scanning: Search for values in memory by type (int8 - 64, float, double, string).
• Scan Refinement: Narrow down results using scan_next, scan_changed, scan_unchanged.
• Pattern Scanning: Array of Bytes (AoB) with wildcard support (??).
• Memory Read/Write: Read and modify memory with type awareness.

Function Hooking & Code Injection

• Intercept Functions: Hook using onEnter/onLeave JavaScript callbacks.
• Replace Functions: Make functions return custom values.
• Module Hooking: Hook by module!function name.
• Symbol Resolution: Resolve exports to addresses.

Process Management

• Process Enumeration: List and filter running processes.
• Attach/Detach: Connect to or disconnect from running processes.
• Spawn & Resume: Start processes in a suspended state for early hooking.

Debugging

• Breakpoints: Set software breakpoints through hooks.
• Register Access: Read CPU registers at breakpoints.
• Module Analysis: List modules, exports, and imports.

Window Interaction (Windows)

• Screenshot Capture: Take screenshots of game windows.
• Keyboard Input: Send keystrokes to game windows.
• Window Management: List, focus, and interact with windows.

📦 Installation

# Install from PyPI (coming soon)
pip install frida-game-hacking-mcp

# Or install from source
git clone https://github.com/0xhackerfren/frida-game-hacking-mcp.git
cd frida-game-hacking-mcp
pip install -e .

Requirements

• Python 3.10+
• Frida 16.0+
• pywin32, pillow (Windows, for screenshot features)

pip install frida frida-tools mcp pillow
# On Windows, also install:
pip install pywin32

🚀 Quick Start

Run the MCP Server

# Run directly
python -m frida_game_hacking_mcp

# Or use the entry point
frida-game-hacking-mcp

Configure with Claude Desktop

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "frida-game-hacking": {
      "command": "python",
      "args": ["-m", "frida_game_hacking_mcp"]
    }
  }
}

Configure with Other MCP Clients

The server uses stdio transport by default. Connect using:

• Command: python -m frida_game_hacking_mcp
• Transport: stdio

💻 Usage Examples

Cheat Engine Workflow: Find and Modify Health

1. List processes and find your game
   > list_processes("game")
   
2. Attach to the game
   > attach("game.exe")
   
3. Initial scan for current health value (e.g., 100)
   > scan_value(100, "int32")
   Found: 58,869 addresses
   
4. Take damage in game (health now 95)
   > scan_next(95)
   Narrowed to: 1,419 addresses
   
5. Repeat until you find the address
   > scan_next(90)
   Narrowed to: 3 addresses
   
6. Get results and modify
   > get_scan_results()
   > write_memory("0x12345678", "E7030000")  # 999 in little-endian

Array of Bytes Pattern Scanning

# Find code pattern (works across game updates)
> attach("game.exe")
> scan_pattern("89 47 44 ?? ?? 5B 7A", "r-x")
Found: 2 matches

# ?? = wildcard bytes
# "r-x" = executable memory regions

Function Hooking

# Hook a function and log calls
> hook_function("0x401234",
    on_enter="console.log('Args:', args[0], args[1]);",
    on_leave="console.log('Return:', retval);")

# Make a function always return success
> replace_function("0x401234", 1)

# Hook by module and function name
> intercept_module_function("game.dll", "CheckLicense",
    on_leave="retval.replace(1);")

Early Hooking (Spawn Suspended)

# Start process suspended
> spawn("C:/Games/game.exe")

# Set up hooks before code runs
> hook_function("0x401234", on_enter="...")

# Resume execution
> resume()

📚 Documentation

Available Tools (42 Total)

Process Management (6)

Memory Operations (10)

Module Information (5)

Function Hooking (6)

Debugging (4)

Script Management (3)

Window Interaction (5) - Windows Only

Standard MCP (3)

Value Types

Scan Regions

Platform Support

• Windows: Native support
• Linux: Native support
• macOS: Native support
• Android: Via frida-server
• iOS: Via frida-server (jailbroken)

Use Cases

• Game Hacking: Memory editing, value modification, trainer development
• Security Research: Vulnerability analysis, exploit development
• Reverse Engineering: Runtime analysis, API hooking
• Software Testing: Fault injection, behavior modification
• Malware Analysis: Dynamic analysis in sandboxed environments

⚠️ Security Notice

This tool is intended for:

• Educational purposes
• Security research on software you own or have permission to test
• Game modding in single-player/offline contexts

Do not use for:

• Cheating in online multiplayer games
• Circumventing software protections illegally
• Any malicious purposes

🤝 Contributing

Contributions are welcome! Please follow these steps:

1. Fork the repository.
2. Create a feature branch.
3. Submit a pull request.

📄 License

This project is under the MIT License - see LICENSE for details.

🙏 Credits

• Built on Frida by Ole Andre Vadla Ravnas.
• MCP protocol by Anthropic.
• Inspired by Cheat Engine by Dark Byte.

🔗 Links

• Frida Documentation
• MCP Specification
• Report Issues

Built for AI-assisted game hacking and security research.