CETUS

Overview

Check out the slides for Hacking WebAssembly Games with Binary Instrumentation at Defcon 27.

Cetus is a browser extension (Tested on Chrome and Firefox) for hacking WebAssembly games. Cetus implements a number of features familiar to Cheat Engine users

• Memory searching
• Watchpoints (Implemented via binary instrumentation using WAIL)
• Memory freezing
• Code disassembly
• Code patching

The name Cetus comes from the Latin word for "sea monster"

Examples

Read the Tutorial

Check out some CTF Writeups

Or watch this video

Installation

Official packages are coming post-Defcon (Assuming Google/Mozilla allow them). For now Cetus can be installed as a developer extension.

Download the latest release or:

git clone --recursive https://github.com/Qwokka/Cetus

Chrome

• Download the latest release
  • Make sure you download the package release, not the Source Code release unless you know what you're doing.
• Unpack zip file
• Follow these instructions

Firefox

• Download the latest release
  • Make sure you download the package release, not the Source Code release unless you know what you're doing.
• Unpack zip file
• Follow these instructions

Credits

Jack Baker: Development

Tigran Tumasov: UI, UX, CSS, front end design

Bradlee Keith Setliff: WAIL and Cetus logo designs

wasm-cheat-engine: Inspiration, a little bit of derivative code

Major Contributors

@nailgg (Real-Time Memory Viewer)

License

Cetus is licensed under Apache License 2.0

stacktrace.js is licensed under the MIT License

prism.js is licensed under the MIT License

bliss.js is licensed under the MIT License

wasm-cheat-engine is licensed under the MIT License