Cetus empowers users to analyze and modify WebAssembly (Wasm) games directly within their browser. It implements functionality reminiscent of Cheat Engine, addressing the challenge of reverse-engineering sandboxed Wasm applications. The extension leverages binary instrumentation via WAIL to achieve its core features, enabling low-level manipulation of game state.
Cetus provides a user-friendly interface for inspecting and manipulating web application memory. It incorporates watchpoints implemented through binary instrumentation, allowing for dynamic analysis of game behavior. The extension is designed for ease of use by developers and security researchers interested in WebAssembly game hacking.
- Memory Scanning: Enables searching for specific memory addresses and values within the WebAssembly game's memory space.
- Watchpoints: Allows setting breakpoints to trigger actions when memory locations are accessed or modified.
- Memory Freezing: Provides the ability to freeze memory regions to prevent their values from changing.
- Code Disassembly: Facilitates the disassembly of Wasm code for reverse engineering and analysis.
- Code Patching: Enables modifying Wasm code in memory to alter game behavior.
- Cross-Platform: Compatible with Chrome and Firefox browsers.
- Developer-Friendly: Designed for easy integration into debugging workflows.
Cetus is an active project with recent commits and ongoing development. It has a growing community and is actively maintained. Documentation is improving, and the project is steadily gaining traction within the WebAssembly security and reverse engineering communities. Release packages are anticipated post-Defcon.
Cetus benefits security researchers, game developers, and anyone interested in understanding the inner workings of WebAssembly games. It provides valuable tools for analyzing game behavior, identifying vulnerabilities, and modifying game mechanics. Unlike manual debugging methods, Cetus provides an automated and efficient way to interact with WebAssembly game memory.