Frida Game Hacking MCP

A Model Context Protocol (MCP) server that provides Cheat Engine-like capabilities for game hacking through Frida. Enables AI assistants and automation tools to perform memory scanning, value modification, pattern matching, function hooking, and code injection.

Features

Memory Operations (Cheat Engine Style)

• Value Scanning: Find values in memory by type (int8-64, float, double, string)
• Scan Refinement: Narrow results with scan_next, scan_changed, scan_unchanged
• Pattern Scanning: Array of Bytes (AoB) with wildcard support (??)
• Memory Read/Write: Read and modify memory with type awareness

Function Hooking & Code Injection

• Intercept Functions: Hook with onEnter/onLeave JavaScript callbacks
• Replace Functions: Make functions return custom values
• Module Hooking: Hook by module!function name
• Symbol Resolution: Resolve exports to addresses

Process Management

• Process Enumeration: List and filter running processes
• Attach/Detach: Connect to running processes
• Spawn & Resume: Start processes suspended for early hooking

Debugging

• Breakpoints: Software breakpoints via hooks
• Register Access: Read CPU registers at breakpoints
• Module Analysis: List modules, exports, imports

Window Interaction (Windows)

• Screenshot Capture: Take screenshots of game windows
• Keyboard Input: Send keystrokes to game windows
• Window Management: List, focus, and interact with windows

Installation

# Install from PyPI (coming soon)
pip install frida-game-hacking-mcp

# Or install from source
git clone https://github.com/0xhackerfren/frida-game-hacking-mcp.git
cd frida-game-hacking-mcp
pip install -e .

Requirements

• Python 3.10+
• Frida 16.0+
• pywin32, pillow (Windows, for screenshot features)

pip install frida frida-tools mcp pillow
# On Windows, also install:
pip install pywin32

Quick Start

Run the MCP Server

# Run directly
python -m frida_game_hacking_mcp

# Or use the entry point
frida-game-hacking-mcp

Configure with Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "frida-game-hacking": {
      "command": "python",
      "args": ["-m", "frida_game_hacking_mcp"]
    }
  }
}

Configure with Other MCP Clients

The server uses stdio transport by default. Connect using:

• Command: python -m frida_game_hacking_mcp
• Transport: stdio

Usage Examples

Cheat Engine Workflow: Find and Modify Health

1. List processes and find your game
   > list_processes("game")
   
2. Attach to the game
   > attach("game.exe")
   
3. Initial scan for current health value (e.g., 100)
   > scan_value(100, "int32")
   Found: 58,869 addresses
   
4. Take damage in game (health now 95)
   > scan_next(95)
   Narrowed to: 1,419 addresses
   
5. Repeat until you find the address
   > scan_next(90)
   Narrowed to: 3 addresses
   
6. Get results and modify
   > get_scan_results()
   > write_memory("0x12345678", "E7030000")  # 999 in little-endian

Array of Bytes Pattern Scanning

# Find code pattern (works across game updates)
> attach("game.exe")
> scan_pattern("89 47 44 ?? ?? 5B 7A", "r-x")
Found: 2 matches

# ?? = wildcard bytes
# "r-x" = executable memory regions

Function Hooking

# Hook a function and log calls
> hook_function("0x401234",
    on_enter="console.log('Args:', args[0], args[1]);",
    on_leave="console.log('Return:', retval);")

# Make a function always return success
> replace_function("0x401234", 1)

# Hook by module and function name
> intercept_module_function("game.dll", "CheckLicense",
    on_leave="retval.replace(1);")

Early Hooking (Spawn Suspended)

# Start process suspended
> spawn("C:/Games/game.exe")

# Set up hooks before code runs
> hook_function("0x401234", on_enter="...")

# Resume execution
> resume()

Available Tools (42 Total)

Process Management (6)

Memory Operations (10)

Module Information (5)

Function Hooking (6)

Debugging (4)