TowerOfFlaws

Proof of concept demonstrating arbitrary process protection and termination vulnerabilities in Tower of Fantasy's anti-cheat driver (GameDriverX64.sys).

For the full technical writeup, see the blog post.

Demo

Demo.mp4

Building

Requires CMake 3.20+ and a C++20 compiler (MSVC recommended).

cd Exploit
cmake -B out -S .
cmake --build out --config Release

Usage

1. Load the driver (GameDriverX64.sys must be registered as a service)
2. Open notepad.exe
3. Run TowerOfFlaws.exe
4. Press DELETE to terminate the protected notepad process

Disclaimer

This is a security research proof of concept. Use responsibly and only on systems you own or have explicit authorization to test.