kotamon-dev-cheese - Educational Unity IL2CPP reverse-engineering and d

项目说明

Kotamon De

!
!Unity
!Platform
!Runtime

An educational re and defensi project for KOTAMON. It demonstrates how exposed client-side state can be inspected and modified—and documents what a production game should or keep authoritative.

> The repository does not contain the game, its resources, or instructions for bypassing third-party anti-cheat systems.

Features

Launcher

The release launcher embeds the tested BepInEx 6 IL2CPP runtime, Unity 6000.4.1 base libraries, compatible generated interop assemblies, and the plugin DLL. A separate BepInEx installation is not required.

Install

1. Download KotamonDe.exe from the latest release.
2. Close KOTAMON completely.
3. Run the launcher and select the folder containing the game's executable.
4. Click УСТАНОВИТЬ / ОБНОВИТЬ, then ЗАПУСТИТЬ ИГРУ.

The launcher the selected game folder, backs up replaced loader files, and records whether it owns the installed BepInEx runtime.

Uninstall

Click ДЕИНСТАЛЛЯЦИЯ and confirm the operation. If the launcher installed BepInEx, it removes that runtime as well. If BepInEx existed beforehand, the launcher preserves it and restores backed-up loader files.

Default controls

| Key | Function |
|---|---|
| Insert | Open/close menu |
| F1 | Noclip |
| F2 | WorldSpeed |
| F3 | ESP |
| F4 | Auto Cleanup |
| F5 | Always Full Bag |
| F6 | Max Card Collection |
| F7 | All Cassettes |

Every key can be rebound from the in-game menu.

Technical notes

The plugin is loaded internally by BepInEx and uses generated IL2CPP interop assemblies to call the game's normal controllers. No process injector is used.

Recent KOTAMON builds expose card fragments as world pickups. Auto Cleanup uses the native JunkZoneController._partPickups registry and explicit item markers to protect and collect recognised fragments through the normal PlayerPickupController.Pick(..., true) route. Its destructive pass is restricted to confirmed EJunkType.Common objects using the engine's ui_empty data, so unidentified objects are retained for manual collection.

The Unity 6 build also required two compatibility adjustments:

The corresponding transformations are documented in the included PowerShell scripts.

The build scripts stage compiler inputs in a temporary path, so the full game directory name—including its commas—works without confusing Roslyn's reference parser.

Build from source

Requirements:

Build and install the plugin into a local game copy:

Compile without installing:

Build the self-contained launcher:

The launcher is written to release/KotamonDe.exe. Build outputs are intentionally excluded from Git history; release binaries are published as GitHub Release assets.

Repository layout

| Path | Purpose |
|---|---|
| KotamonDe.cs | BepInEx IL2CPP plugin |
| Launcher/Program.cs | Windows Forms installer/launcher |
| build.ps1 | Plugin build script |
| build-exe.ps1 | Self-contained launcher packager |
| BepInEx.Kotamon.cfg | Tested Unity 6/BepInEx configuration |
| patch-*.ps1 | Reproducible Unity 6 compatibility transformations |
| SECURITY_NOTES.md | Defensi and mitigations |
| THIRD_PARTY_NOTICES.txt | BepInEx attribution and modification notice |

Third-party software

The launcher bundles a modified BepInEx 6 IL2CPP runtime. BepInEx is distributed under LGPL-2.1; attribution, source links, and the compatibility transformation scripts are included in this repository and in the installed payload. See THIRD_PARTY_NOTICES.txt.

项目信息

开发语言：C#

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Educational Unity IL2CPP reverse-engineering and defensive security toolkit for game KOTAMON.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。