KOS Terminal
MULTITOOL TERMINAL
RE:ZERO-INSPIRED MULTITOOL TERMINAL
One shell for OSINT, game tooling and Return by Death checkpoints.
KOS Terminal is a multitool. OSINT reconnaissance, a custom loader, a memory dumper, an avatar studio and a machine-bound key system, sharing one native core, one script engine and one Discord bot.
THE TOOLKIT
KOS Terminal is a multitool: OSINT, game tooling, loader, dumper, avatar studio and key system in one shell. Every module shares the same native core, the same script engine and the same savepoints.
Domain and IP reconnaissance through the native engine.
rbd_dns_enumerate() · rbd_port_scan()
Read-only lookups on the platforms you ask about.
users.roblox.com · api.vrchat.cloud · discord.com/api
The analyst toolbox that never needs a network.
rbd_sha256_file() · regex indicator pass
Return by Death as a checkpoint system.
%LOCALAPPDATA%\KOSTerminal\loopsLoopStore.Save() · ReturnByDeath()
A custom loader that stages the client and talks to it live.
named-pipe control channel · session-token staging
A thin client module, the other half of the loader handshake.
KOSClient handshake · pipe script runner
Pulls a running process out of memory and rebuilds the PE image.
.dumped.dlldump modules · rebuild PE · exports · imports
Finds your Unity and VRC SDK installs and scaffolds the project.
.unitypackage and .fbx filesUnity Hub · VRCSDK3 · avatar cache
Short license keys, signed offline and linked to a Discord account.
KOS[xxxxxxxxxxcc] — letters a–z and digits 1–9/link binds a key to the Discord account that claimed itKOS[xxxxxxxxxxcc] · offline checksum · Discord linked
Its own editor, attach button and execute button inside the Roblox tab.
studio bridge plugin · in-process client attach
The Discord console is locked to server owners.
owner role · passcode · audit channels
Generate the client in the language you want, then ship it through our own loader.
source → KOS Loader payload → inject
Pulls an avatar bundle down and turns it into a readable Unity file.
.vrca bundleavtr → .vrca → UnityFS → explorer
Reads Unity bundles and packages without opening the editor.
.unitypackage archives and pulls the assets outUnityFS parser · .unitypackage reader
Keeps your shader files in one place and ships them to the game.
.shader files and reads name, properties and keywordsshader library · material recipe · client push
The Avalonia desktop app for Linux, same keys and same bot.
terminal-ui · Avalonia · linux-x64
INSIDE THE APP
A dark WPF shell with the loop counter in the header, a live log and the native core reporting in.
THE MECHANIC
Snapshot the state, take the gamble, rewind if it goes wrong.
Notes, findings, loop number and death count serialize into the vault. Name the savepoint before the risky part.
Hit Return by Death. The death is written to the vault, the counter climbs and the UI glitches red.
or type the word “death” anywhere on this page
The world snaps back to the newest savepoint: findings restored, notes restored, deaths preserved.
THE STACK
A flat C ABI separates the two layers. The shell never re-implements the network code, and the bot calls the same exports.
[DllImport("RbdCore.dll", CharSet = CharSet.Ansi,
CallingConvention = CallingConvention.Cdecl)]
static extern int rbd_dns_enumerate(
string domain, string subdomains,
StringBuilder outBuf, int cap);for (int t = 0; t < workers; ++t)
pool.emplace_back([&] {
for (;;) {
const int i = next.fetch_add(1);
if (i >= count) break;
fn(i);
}
});COMPANION
A dependency-free .NET bot talks to the Discord gateway, calls the same native engine, and fronts the loader HWID registry and the key system. Slash commands register on startup.
/scry domainResolve, enumerate subdomains, fetch headers/ip addressReverse DNS, geo and WHOIS summary/hash textMD5 · SHA-1 · SHA-256 (native)/roblox userPublic profile and created date/vrchat userPublic user lookup (read-only)/discord idSnowflake to account creation time/hwid-registerLogs this machine's HWID into the registry/hwid-listRegistry census (latest entries and banned state)/hwid-check idStatus of a single HWID/hwid-ban id [reason]Bans an HWID from the loader/hwid-unban idLifts a ban/hwid-statusTotals (registered / banned)/keygen [days] [hwid] Mints a license key/keycheck Validates a key: expiry, tier, HWID binding/keysLists issued keys/link Binds a key to your Discord account/link-codePairing code for the desktop app# build the native core first
powershell -File native/build.ps1
# set the bot token (never commit it)
$env:DISCORD_BOT_TOKEN = "your-token"
# starts, registers commands, listens
dotnet run --project bot/ReCon.Bot.csprojInvite the bot with the applications.commands scope. It needs no message content intent. Owner roles gate the admin commands, new HWIDs land in the registry channel and every ban is written to the audit channel.
GET IT RUNNING
Windows 10/11, .NET 10 SDK and a C++ toolchain (MSVC or VS Build Tools). The build script finds MSVC through vswhere.
powershell -File native/build.ps1Produces RbdCore.dll, links Winsock2 and WinHTTP.dotnet build app/ReCon.csproj -c ReleaseCopies the DLL next to KOSTerminal.exe, ready to run.dotnet publish terminal-ui\KosTerminal.Desktop.csproj -r linux-x64 --self-contained trueAvalonia build with the same key system, script engine and loop vault.dotnet run --project bot/ReCon.Bot.csprojNeeds DISCORD_BOT_TOKEN in the environment.powershell -File tools\deploy-site.ps1Uploads the site folder to Cloudflare Pages and prints the DNS records for kosrecon.com.CREDITS
The people behind KOS Terminal.