FuzzySecurity

Capcom-Rootkit

PowerShell2018–2026

FuzzySecurity / Capcom-Rootkit

Capcom-Rootkit

Capcom Rootkit POC

Testing & Quality

Explore on GitHub Read Hacker News discussions

2Distinct people

6Mentions

0Explicit recommenders

226GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

Capcom Rootkit POC

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 12:54:37 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year6 dated mentions

Observed mentions: 2018-06-29 19:25:21 UTC to 2026-03-15 03:15:17 UTC.

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
2018	2018-01-01 00:00:00 UTC	2019-01-01 00:00:00 UTC	1	1
2019	2019-01-01 00:00:00 UTC	2020-01-01 00:00:00 UTC	0	0
2020	2020-01-01 00:00:00 UTC	2021-01-01 00:00:00 UTC	0	0
2021	2021-01-01 00:00:00 UTC	2022-01-01 00:00:00 UTC	0	0
2022	2022-01-01 00:00:00 UTC	2023-01-01 00:00:00 UTC	0	0
2023	2023-01-01 00:00:00 UTC	2024-01-01 00:00:00 UTC	1	1
2024	2024-01-01 00:00:00 UTC	2025-01-01 00:00:00 UTC	0	0
2025	2025-01-01 00:00:00 UTC	2026-01-01 00:00:00 UTC	3	3
2026 (partial)	2026-01-01 00:00:00 UTC	2027-01-01 00:00:00 UTC	1	1

What Hacker News says

6 sources

matheusmoreira·Mar 15, 2026

Never forget the risks of trusting game companies with this sort of access to your machine. https://www.vice.com/en/article/fs-labs-flight-simulator-pas... Company decides to "catch pirates" as though it was police. Ships a browser stealer to consumers and exfiltrates data via unencrypted channels. https://old.reddit.com/r/Asmongold/comments/1cibw9r/valorant... https://www.unknowncheats.me/forum/anti-cheat-bypass/634974-... Covertly screenshots your screen and sends the image to their servers. https://www.theregister.com/2016/09/23/capcom_street_fighter... https://twitter.com/TheWack0lian/status/779397840762245124 https://fuzzysecurity.com/tutorials/28.html https://github.com/FuzzySecurity/Capcom-Rootkit Yes, a literal privilege escalation as a service "anticheat" driver. Trusting these companies is insane. Every video game you install is

Read the rest

untrusted proprietary software that assumes you are a potential cheater and criminal. They are pretty much guaranteed to act adversarially to you. Video games should be sandboxed and virtualized to the fullest possible extent so that they can access nothing on the real system and ideally not even be able to touch each other. We really don't need kernel level anticheat complaining about virtualization.

In How kernel anti-cheats work

matheusmoreira·Nov 27, 2025

Hope that never changes. Linux has enough problems without invasive kernel mode anticheat malware trying to install itself on our systems. It was bad enough that we had to put up with nvidia's proprietary nonsense if we wanted hardware acceleration. Things have finally started to improve. They have finally started open sourcing things. Now that things are finally getting better this anticheat nonsense shows up. You gotta be kidding me. Nobody needs a bunch of game companies feeling entitled to full access to our computers. You'd have to be nuts to let game companies run ring zero code on your system. You want their nonsense absolutely contained and isolated, not deep in your kernel. Here's a thought: they don't own our computers, we do. We own the CPU. We own the RAM. We own the motherboard. If we want to edit their game's memory while it

Read the rest

s running, it's our god given right as the owners of the machine the game is running on. Any attempt to stop us from doing so is an affront to our freedom. The mere attempt to do so with "anticheating" kernel malware is offensive. The audacity. Cheating at video games is an exercise in computer freedom. I realize I'm defending scoundrels here and it doesn't matter in the slightest. Our computing freedom is orders of magnitude more important than video games. I want them to suck it up and accept it. That is the price of freedom. If they want to be on Linux, it should be on our terms. Don't care about this ideological stuff? Here's the sort of risk you're accepting when you opt into this bullshit: https://www.vice.com/en/article/fs-labs-flight-simulator-pas... Corporation thinks its the FBI and starts shipping a browser stealer to users to "catch pirates". Bonus points for exfiltrating the data on an unencrypted channel! https://old.reddit.com/r/Asmongold/comments/1cibw9r/valorant... https://www.unknowncheats.me/forum/anti-cheat-bypass/634974-... Screenshots your screen and exfiltrates it to their servers. https://www.theregister.com/2016/09/23/capcom_street_fighter... https://twitter.com/TheWack0lian/status/779397840762245124 https://fuzzysecurity.com/tutorials/28.html https://github.com/FuzzySecurity/Capcom-Rootkit A literal privilege escalation as a service "anticheat" driver! Game companies give negative amounts of shit. If you trust them you're out of your mind.

In S&box is now an open source game engine

matheusmoreira·Jan 18, 2025

In the absence of further information, I would totally choose to believe the story. Corporations cannot be trusted. Proprietary software is bad enough but proprietary drivers is on a whole new level. You really have no idea what those things are doing unless you reverse engineer them. Here are example of corporations essentially pwning your computer with their "justified and trustworthy" software: https://www.vice.com/en/article/fs-labs-flight-simulator-pas... Shipped a browser stealer to users and exfiltrated on an unencrypted channel the usernames and passwords of users they deemed to be "pirates". https://old.reddit.com/r/Asmongold/comments/1cibw9r/valorant... https://www.unknowncheats.me/forum/anti-cheat-bypass/634974-... Screenshots your computer screen and exfiltrates the picture to their servers. https://www.theregister.com/2016/09

Read the rest

/23/capcom_street_fighter... https://twitter.com/TheWack0lian/status/779397840762245124 https://fuzzysecurity.com/tutorials/28.html https://github.com/FuzzySecurity/Capcom-Rootkit The driver literally provided privilege escalation as a service for any user space executable. As far as I'm concerned anyone who trusts these corporations with kernel level access to their computers is out of their minds. I don't trust firmware but at least it's contained in some isolated device.

In Investigating an “evil” RJ45 dongle

matheusmoreira·Jan 8, 2025

This is great but we must still be careful. Games have come to Linux but so has a lot of the suckiness associated with them. The video games industry wants to own your computer. They don't want you to copy their games or cheat. Taking over your machine is the only way they can possibly hope to accomplish that. Therefore they think nothing of shipping literal rootkits directly to you. This is software whose only distinction from malware is a terms of service buried somewhere that you probably clicked through without reading and technically accepted. There's also the fact they are proprietary software. There's no telling what they are doing. Sometimes there's literal malware in these things. I'm not kidding about this. https://www.vice.com/en/article/fs-labs-flight-simulator-pas... https://www.theregister.com/2016/09/23/capcom_street_fighte

Read the rest

r... https://twitter.com/TheWack0lian/status/779397840762245124 https://fuzzysecurity.com/tutorials/28.html https://github.com/FuzzySecurity/Capcom-Rootkit I seriously doubt there's any effective way to sandbox them either, they probably need extensive permissions to even work. I wouldn't want to run these things in my personal computer. For these reasons, you might want to set up a completely separate virtualized Linux system just for this purpose. IOMMU and VFIO technologies allow you to map a discrete graphics card to the virtual machine which enables hardware accelerated graphics at near native performance. You might want to consider a dedicated gaming machine. To me it feels like a waste since the hardware is great and should also be used for other things.

In Bye-bye Windows gaming? SteamOS officially expands past the Steam Deck

matheusmoreira·Apr 15, 2023

Anti-cheat software is designed to own your machine, take away your control and monitor you. They are indistinguishable from malware. Valve should be taken to task for not only allowing this malicious software in their platform but also for actively distributing it to users. Thank you for citing this. I favorited it as yet another example to cite whenever the topic comes up. Seems to be a trend with japanese companies. Check out the wonderful consequences of allowing these corporations access to your computer: https://github.com/FuzzySecurity/Capcom-Rootkit https://fuzzysecurity.com/tutorials/28.html

In Valve Restricts Accounts of 2500 Users Who Marked a Negative Game Review Useful

Zophike1·Jun 29, 2018

> Was there any instance of this? Are there disincentives against this? (I guess the entity offering the bounty could say, only software released before this day is available. Though malicious contributors can very certainly guess that there will be other future bug bounties too.) I believe sometime ago there was new surrounding backdoored crypto also on the low-level side of things there was a secret rootkit in Street Fighter that allowed for an EOP https://github.com/FuzzySecurity/Capcom-Rootkit https://www.blackhat.com/docs/eu-17/materials/eu-17-Filiol-B...

In Rewards of Up to $500K Offered for FreeBSD, OpenBSD, NetBSD, Linux Zero-Days