LOURCODE

WebKit. Home of the WebKit project, the browser engine used by Safari, Mail, App Store and many other applications on macOS, iOS and Linux.

ida-multi-mcp. Multi-instance IDA Pro MCP server — analyze multiple binaries simultaneously through a single MCP endpoint.

Mole. 🐹 Clean, uninstall, analyze, optimize, and monitor your Mac from the terminal.

iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201. CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).

WeKnora. Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.

XcodeAnyTroll. Run app from Xcode, without any code signature, but with any entitlements. Based on TrollStore.

patchfuzz. PatchFuzz: Fuzzing for JavaScript Engine Incomplete Security Patches

Pishi. Pishi is a code coverage tool like kcov for macOS.

aws-bare-metal-kvm-demo. Shell

bsddrivers. FreeBSD Device Drivers

PassiveFuzzFrameworkOSX. This framework is for fuzzing OSX kernel vulnerability based on passive inline hook mechanism in kernel mode.

KextFuzz. Code of KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations (USENIX Security'23)

sample-images. Sample image files for ImageGlass

Xtrace. Trace Objective-C method calls by class or instance

p0tools. Project Zero Docs and Tools

Driver-Security-Analyzer. Driver Security Analyzer

PDFMathTranslate. [EMNLP 2025 Demo] PDF scientific paper translation with preserved formats - 基于 AI 完整保留排版的 PDF 文档全文双语翻译，支持 Google/DeepL/Ollama/OpenAI 等服务，提供 CLI/GUI/MCP/Docker/Zotero

Inferno. Apple Silicon device emulator.

systembag.kb. Collection of tools to decrypt and parse systembag.kb file

XcodeRootDebug. Allow Xcode to start a custom debugserver with root privileges to debug iOS apps.

security-pcc. Private Cloud Compute (PCC)

winafl-harness. harness for fuzzing with winafl. both public and my own which i have released.

NauthNRPC. Python

dualra1n. Dualboot ios 15 and 14 iDevices to 15-13.6

SEPROMPanicDecrypt. SEPROM Panic Decrypt Tool written in python

Keka. The macOS & iOS file archiver

InspectiveC. objc_msgSend hook for debugging/inspection purposes.

a7-sep-bug. a7 sep bug

papers_and_slides.

memctl. An iOS kernel introspection tool.

iphone-dataprotection. Some useful tools for a iOS Forensics.

autodecrypt. Tool to decrypt 64 bits iOS firmware images (iBoot/LLB/iBSS/iBEC).

iOS-Internals-and-Security-Testing. iOS is Apple's proprietary operating system that runs on the iPhone, iPod Touch and iPad. A lot of components are specific to iOS. Here are key features of the iOS hardware and software security architecture and guide how to test your applications.

kemon. An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

pdfium-binaries. 📰 Binary distribution of PDFium

frp. A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

rathole. A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

bore. 🕳 bore is a simple CLI tool for making tunnels to localhost

NN-SVG. Publication-ready NN-architecture schematics.

HyperPill. C++

Mac_Vuln.

apple-knowledge. A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

xnu-qemu-arm64. C

ktrw. An iOS kernel debugger based on a KTRR bypass for A11 iPhones; works with LLDB and IDA Pro.

sephelper. IDA loader to help with SEPROM reverse engineering.

iBoot64helper. IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering

KeychainAccess. Simple Swift wrapper for Keychain that works on iOS, watchOS, tvOS and macOS.

ida_kcpp. An IDAPython module for enhancing c++ support on top of ida_kernelcache

ida_kernelcache. An IDA Toolkit for analyzing iOS kernelcaches.

tamarin-firmware. C

CVE-2024-38063. poc for CVE-2024-38063 (RCE in tcpip.sys)

CVE-2024-6387. Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)

cve-2024-6387-poc. a signal handler race condition in OpenSSH's server (sshd)

CVE-2024-22274-RCE. PoC - Authenticated Remote Code Execution in VMware vCenter Server (Exploit)

buzzer. Go

marp-vscode. Marp for VS Code: Create slide deck written in Marp Markdown on VS Code

CVE-2023-24871. pocs & exploit for CVE-2023-24871 (rce + lpe)

ioctlance. A tool that is used to hunt vulnerabilities in x64 WDM drivers

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

quals-2024. Source code for the DEF CON 32 CTF Qualifiers.

decomp2dbg. A plugin to introduce interactive symbols into your debugger from your decompiler

ARC-Browser-Address-Bar-Spoofing-PoC. CVE-2024-25733 | ARC Browser Address Bar Spoofing PoC - iOS/iPadOS

tracer. Signature-based Static Analysis for Detecting Recurring Vulnerabilities

ghidriff. Python Command-Line Ghidra Binary Diffing Engine

binkit. Binary Reverse Engineering Data Science Kit

starred. Create and maintain your own Awesome-style list from GitHub stars!

idawasm. IDA Pro loader and processor modules for WebAssembly

COMRaceConditionSeeker. Python

FullPowers. Recover the default privilege set of a LOCAL/NETWORK SERVICE account

docs. various docs (that are interesting, or not, depending on the point of view...)

deauth. deauth 어택입니다.

SyscallTables. Windows NT Syscall tables

awesome-vm-escape. share some useful archives about vm and qemu escape exploit.

CVE-2023-27326. VM Escape for Parallels Desktop <18.1.1

MTMR. 🌟 [My TouchBar My rules]. The Touch Bar Customisation App for your MacBook Pro

ghidra-python-vscode-skeleton. Ghidra Headless Python Script VScode Skeleton

kAFL. A fuzzer for full VM kernel/driver targets

unmask_jemalloc. De Mysteriis Dom jemalloc

OSX-KVM. Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

FishFuzz. AFL/AFL++ version FishFuzz

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

public-writeup. CTF write-ups by Plaid Parliament of Pwning

macOSSandboxInitializationBypass. App sandbox escapes for macOS

trigger-webhook-from-notion. Add a button that can trigger a POST webhook in Notion.so's table.

morethan-log. 😎 A static blog using notion database

sophomore. Java

hackthebox-writeups. Writeups for HacktheBox 'boot2root' machines

ctfd-auth-discord-bot. ctfd 인증 디스코드 봇

exploits. Exploits I've written at some point.

CTFdScraper. Simple scraper for automating challenges gathering from a CTFd platform

bruteforce. Brute forcing scripts for bad CTF problems

LOURC0D3.github.io. https://lourcode.kr

GhidraLog4Shell. Java

how2heap. A repository for learning various heap exploitation techniques.

PoC-CVE-2021-41773. Python

LOURC0D3.

Fuzzing101. An step by step fuzzing tutorial. A GitHub Security Lab initiative

log4jpwn. log4j rce test environment and poc

log4j-shell-poc. A Proof-Of-Concept for the CVE-2021-44228 vulnerability.