Andy Nguyen

zapret-discord-youtube. Batchfile

Fortigate. Extract Useful info from SSL VPN Directory Traversal Vulnerability (FG-IR-18-384)

hallo. Hallo: Hierarchical Audio-Driven Visual Synthesis for Portrait Image Animation

PPPwn_cpp. C++ rewrite of PPPwn (PlayStation 4 PPPoE RCE)

CVE. A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

vitaGL. openGL wrapper for PSVITA.

gfuzz. Directed fuzzing framework for gVisor.

how-to-secure-anything. How to systematically secure anything: a repository about security engineering

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

mira-project. mira rewrite in cxx

ps4libdoc. PS4 library documentation.

java-security-manager-bypass. Java

loljava. Demonstration of the Java System.arraycopy type confusion vulnerability

Disable-Security-Manager. Disables the Java Security Manager

PVR_PSP2. Driver layer GPU libraries and tests for PSP2

Linux-kernel-EoP-exp. Linux kernel EoP exp

PSMGLES-Sample. C

PSMGLES. PSM Supplemented Mini GL ES

vita_gl_test. C

librw-vita. Port of librw for PSVITA.

librw. A re-implementation of the RenderWare Graphics engine

Awesome-PlayStation-Vita. List of awesome stuff for PlayStation Vita

cncjs-pendant-ps3. Dual Shock / PS3 Bluetooth Remote Pendant for CNCjs

BG-App-PSV. C

fuzzer-test-suite. Set of tests for fuzzing engines

packetdrill. The official Google release of packetdrill

ThreatHunting. This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.

Mirai-Source-Code. Leaked Mirai Source Code for Research/IoC Development Purposes

sploits. C++

fuzzing-benchmarks. The collection of programs for evaluating fuzzing techniques

afl-ios. Unofficial American Fuzzy Lop repo

afl-patches. Patches to afl to fix bugs or add enhancements

awesome-fuzzing. A curated list of awesome Fuzzing(or Fuzz Testing) for software security

SemanticCrashBucketing. Semantic Crash Bucketing

unshift-racy. Webkit JavascriptCore Array unshift function had a race condition, it leads to RCE.

Chromium-941743. Chrome v8 1Day Exploit by István Kurucsai

PS4-6.20-WebKit-Code-Execution-Exploit. A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

exploitdb-bin-sploits. The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb-bin-sploits

GhidraVitaLoader. VitaLoader script for Ghidra

ghidra-allegrex. Ghidra processor module adding support for the Allegrex CPU (PSP)

Publications. Slides, exploits and PoCs :)

vita-linux-loader. Linux Loader for the PlayStation Vita

vmware-exploitation. A collection of links related to VMware escape exploits

fasthax. 3DS Kernel Exploit <= 11.2

awesome-browser-exploit. awesome list of browser exploitation tutorials

linux-kernel-exploitation. A collection of links related to Linux kernel security and exploitation

ROPgadget. This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

Exploit-Writeups. A collection where my current and future writeups for exploits/CTF will go

uxss-db. 🔪Browser logic vulnerabilities :skull_and_crossbones:

js-vuln-db. A collection of JavaScript engine CVEs with PoCs

libarchive. Multi-format archive and compression library

Begin-Latex-in-minutes. 📜 Brief Intro to LaTeX for beginners that helps you use LaTeX with ease.