LAB 1Free · available now
Capture & Dissect
Frame layout, the 10-message catalogue, HELLO / WELCOME / MOVE / SNAPSHOT formats, and your first Wireshark dissector in Lua.
UDP · 1,976 packets captured · no source · no docs
Game Protocol Reverse Engineering Lab Pack
Derive an undocumented UDP game protocol from raw packets — then build your own client.
Five hands-on labs on a real (toy) multiplayer game: capture → dissect → checksum → deobfuscate → Ghidra/Frida → reimplement. No source, no docs — just wires.
$ lab 1 free · $29 early bird, $59 at launch · full refund if the pack doesn't ship
Most reverse-engineering courses point you at malware or crackmes. Nobody teaches reading an undocumented game protocol off the wire.
DRIFTLIGHT is a tiny multiplayer arena game written for one purpose — to be reverse engineered. You get the stripped server and client binaries and a recorded session (1,976 packets). No protocol documentation exists.
You will create it.
Frame layout, the 10-message catalogue, HELLO / WELCOME / MOVE / SNAPSHOT formats, and your first Wireshark dissector in Lua.
Recover the frame trailer's CRC parameters from black-box data, validate frames in your dissector, forge a valid packet by hand.
Prove the chat obfuscation from three ciphertexts of one sentence, find the session key hiding in the handshake, decrypt everything.
The stripped client in Ghidra until the frame builder matches your wire map; Frida hooks on the send path; the session key, live.
Reimplement the client from scratch in Python and play against the real server. Author's full spec and source included.
The full pack — Labs 2–5 plus everything in Lab 1 — ships lab by lab over ~4 weeks from pre-order open. Lab 1 is free now, so you can judge the material before paying anything.
If the pack doesn't ship, every pre-order is refunded in full, automatically.
Lab by lab over ~4 weeks from pre-order open. Lab 1 is available now, free. If the pack is cancelled, every pre-order is refunded in full.
Basic networking (what UDP is), any hex viewer, Wireshark. Programming starts gently (Lua) and ends at a real Python client.
The binaries are Linux ELF — any free VM (or WSL) runs them. A native Windows build is on the roadmap.
Pre-orders: automatic if unshipped. After delivery: 14 days, no questions.
DRIFTLIGHT is our own game, built as a legal, safe target for learning real protocol reverse-engineering techniques. It is not a course about hacking games you don't own.