SutekiMods!

How to share and use cheats

Use a cheat

  1. Find a cheat on the Games page or by searching for the game's exe name.
  2. Read the script, then click Download .js.
  3. In Suteki Cheat Engine, open Cheats and click Import. You can also drop the file into the scripts folder (Cheats, then Open folder).
  4. Start the game and enable the cheat. The app attaches to the exe named in @process.

Share a cheat

  1. Get a working cheat in the app, then use "Save as script" on the Cheats page (or ask the agent).
  2. Open the script in the app and click Share…. You can share without an account, or log in first so the cheat is linked to your account (confirm your email to enable sharing).
  3. You can also log in or create an account on the site and upload the .js file. Signed-in uploads can be updated or deleted from your account page.

Prefer module-relative addresses (Game.exe+0x1234) or pointer paths ([Game.exe+0x10]+0x30) over raw addresses: raw addresses usually change after a restart.

File format

A cheat is a plain JavaScript file with a ==SugoiScript== header. To be shared here it needs @name, @process, and a function enable(). @description, @author and @version are optional. @game (optional) sets a readable game title on this website and is ignored by the app.

example.js16 lines
// ==SugoiScript==
// @name        Infinite HP
// @process     Game.exe
// @description Keeps the player's HP at 999.
// @author      your-name
// @version     1.0
// ==/SugoiScript==

function enable() {
  freeze("HP", "[Game.exe+0x10F4A8]+0x30", "int32", 999);
}

function disable() {
  // freeze()/watch() entries and patch() writes are undone automatically.
}

HTTP API

Everything the website does is available as JSON, so the app or your own tools can use it.

GET /api/cheats?q=&game=&sort=popular|new|updated&page=Search cheats. game accepts an exe name such as Game.exe.
GET /api/cheats/:slugMetadata and script content.
GET /api/cheats/:slug/rawThe .js file as text. Add ?download=1 to get it as an attachment.
GET /api/gamesGames that have cheats.
POST /api/auth/loginLog in from the app. Body: JSON { username, password } (username or email). Returns a session token for the Authorization header.
GET /api/auth/meCurrent account for Authorization: Bearer <token>.
POST /api/auth/logoutRevoke the bearer session token.
POST /api/cheatsUpload. Body: JSON { content, gameTitle?, author? }, multipart with a file field, or the raw script. Returns slug and manageToken. Optional Authorization: Bearer <session token> links the upload to your account.
PUT /api/cheats/:slugReplace the file. Header Authorization: Bearer <manageToken> or an account session token for your own cheat.
DELETE /api/cheats/:slugDelete. Header Authorization: Bearer <manageToken> or an account session token for your own cheat.

Browser requests are authorized by the login cookie. The app logs in through /api/auth/login and uses the returned token as Authorization: Bearer <token>. Keep the manageToken as a fallback for updates without an account.

curl -X POST http://localhost:3000/api/cheats \
  -H "Content-Type: text/javascript" --data-binary @my-cheat.js