Brinly

samloader-rs. Download firmware for Samsung devices

pbtk. A toolset for reverse engineering and fuzzing Protobuf-based apps

diaphora-binja. Diaphora, the most advanced Free and Open Source program diffing tool. with bninja support

transsion-ota-prober. Pulls OTA links for some Transsion devices (Infinix, Tecno, Itel).

claude-code-local. Run Claude Code 100% on-device with local AI on Apple Silicon. MLX-native Anthropic-API server, 65 tok/s Qwen 3.5 122B, Llama 3.3 70B, Gemma 4 31B. Private, offline, airgap-ready. Built for NDA / legal / healthcare workflows.

bloaty. Bloaty: a size profiler for binaries

wiiMac. A Mac OS X bootloader for the Nintendo Wii.

Firmware_extractor. Extract given archive to images

art-kernel-toolkit. C

ANE. Training neural networks on Apple Neural Engine via reverse-engineered private APIs

blaze. Blaze: a VT420 emulator

i8051. An emulator for the Intel 8051 (MCS-51) CPU written in Rust

payload_dumper. Android OTA payload dumper

39C3-build-a-fake-phone-find-real-bugs. The companion repository for the 39C3 talk: Build a Fake Phone, Find Real Bugs: Qualcomm GPU Emulation and Fuzzing with LibAFL QEMU

pizero_bikecomputer. An open-source bike computer with GPS and ANT+ capabilities, based on the Raspberry Pi Zero (W, WH, 2 W) or the Compute Module Zero. It also includes offline maps and navigation.

DeviceMenu. macOS menu bar app for interacting with iOS devices

mms. Modern Memory Safety in C/C++

banjo. Android Dex disassembler and Binary Ninja plugin

hexagon_fuzz. A fuzzing framework for Hexagon baseband firmware using QEMU system emulation.

disko. a minimalist disk usage analyzer for macOS

ghidra-hexagon-sleigh. A version-agnostic ghidra plugin for de-compiling Qualcomm Hexagon QDSP6

edl-ng. A modern, user-friendly tool for interacting with Qualcomm devices in Emergency Download (EDL) mode.

Aviary. A document uploader that automatically downloads and sends PDFs to your reMarkable cloud through a web interface or API. Supports PDF conversion, compression, and organized file management.

qdl.js. a library for interfacing with Qualcomm devices in QDL mode

Malimite. iOS and macOS Decompiler

Trigon. Deterministic kernel exploit based on CVE-2023-32434.

payload-dumper-go. an android OTA payload dumper written in Go

gallimaufry. Command Line Parsing Library for USB PCAP Files

spotify-player. A Spotify player in the terminal with full feature parity

LabSync. An IDA plugin that can be used to partially synchronize IDBs between different users reversing the same binaries

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

ida2py. An intuitive query API for IDA Pro

sljit. Platform independent low-level JIT compiler

immich. High performance self-hosted photo and video management solution.

templates. Hex Fiend templates, generally Apple related

VMG1312-B10A. Open source buildroot for VMG1312-B10A from ZyXeL

ghidra. Ghidra is a software reverse engineering (SRE) framework

instax-link-web. Vue

soundiizparse. Goes through Soundiiz's default results CSV and outputs the songs found and not found by Soundiiz into a *.txt file.

ipsw. iOS/macOS Research Swiss Army Knife

svdmap. Binary Ninja plugin to map in SVD peripherals and other information

i3pystatus. A complete replacement for i3status

bahn.guru. CURRENTLY ARCHIVED BECAUSE OF OUTDATED UPSTREAM API. FOR DETAILS SEE https://github.com/juliuste/bahn.guru/issues/63 | Deutsche Bahn ticket price calendar.

STRIDE. simple type recognition in decompiled executables

satellite-messenger. A free satellite messenger for iPhone 14

nyxstone. Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com

RopView. A BinaryNinja plugin for contextual gadget analysis and semantic/hueristic based querying.

Kyoo. A portable and vast media library solution.

aea1. AEA metadata dumper

papers_and_slides.

excelCPU. 16-bit CPU for Excel, and related files

FindMyHistory. Track your Apple devices and look up their past location, battery levels, and more

roondisplay. Display using Raspberry Pi with Roon API

IOKernelRW. Insecurity as an IOService

sdm845-drivers. For development only! Not for end users

qualcomm_baseband_scripts. Collection of scripts for reversing Qualcomm Hexagon baseband / modem firmware

wa-tunnel. Tunneling Internet traffic over Whatsapp

kfd. kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

xnu. C

FairFree. jailbreak any ipa and run on apple silicon M1/M2 macOS without decrypted.

binder-trace. Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder".

IdaClu. IdaClu is a version agnostic IDA Pro plugin for grouping similar functions. Pick an existing grouping algorithm or create your own.

lumina-binja-improved. IDA's Lumina feature, reimplemented for Binary Ninja, with new error handeling!

SonyHeadphonesClient. A {Windows, macOS, Linux} client recreating the functionality of the Sony Headphones app

ksuite. My BinaryNinja toolkit I use for iOS centric RE || Prerelease!

android-kernel-exploitation. Android Kernel Exploitation

binrec-tob. BinRec: Dynamic Binary Lifting and Recompilation

MediaInfo. MacOS Finder Extension to show information about media files (images, video and audio), PDF and Office files on the contextual menu.

ofrak. OFRAK: unpack, modify, and repack binaries.

QCSuper. QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

qemu-t8030. iPhone 11 emulated on QEMU

protobuf-finder. IDA Pro plugin for reconstructing original .proto files from binary.

workflow_objc. Binary Ninja plugin & workflow to help analyze Objective-C code

scudo_research. Scudo useful files

proc_mem_ida_loader. A /proc/mem IDA loader to snapshot a running process

ghidra-plugin-hexagon. Hexagon decompiler for Ghidra

airplay2-receiver. AirPlay 2 Receiver - Python implementation

usb-device-security. Collection of USB device(slave) related vulnerabilties

ObjectiveNinja. Binary Ninja plugin & workflow to help analyze Objective-C code

FirmWire. FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

lucid. An Interactive Hex-Rays Microcode Explorer

pixelbook-fedora. How to install Fedora on a Pixelbook with reasonable results

NtRays. Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.

iomfb-exploit. Exploit for CVE-2021-30807

fontbuilder. C++

aSiagaming. My Chrome and Safari exploit code + write-up repo

LazyIDA. Make your IDA Lazy!

titanm. This repository contains the tools we used in our research on the Google Titan M chip

MuditaOS. Mobile operating system based on FreeRTOS™ optimized for E Ink displays - developed for Mudita Pure minimalist phone

minimp3. Minimalistic MP3 decoder single header library

qc_image_unpacker. Qualcomm image unpacker

heap_history_viewer. A program to draw rectangles from heap traces.

weggli. weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

apple_u1. JavaScript

checkm30.

iris. Rust

git-split-diffs. Syntax highlighted side-by-side diffs in your terminal

applegpu. Apple G13 GPU architecture docs and tools

exploits. C

bad64. Binja Arm64 Disassembler

preloader-m1. Preloader for Linux on M1

m1n1. A bootloader and experimentation playground for Apple Silicon

idapython. A collection of IDAPython modules made with 💚 by Duo Labs

lumen. A private Lumina server for IDA Pro

lumina_server. Local server for IDA Lumina feature

arch-arm64. Aarch64 architecture plugin

AFLplusplus. The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

symgrate2-binja-plugin. A plugin for Binary Ninja to query the Symgrate2 database.

GrinningSoul. A userland iOS emulator for MacOS

ripr. Package Binary Code as a Python class using Binary Ninja and Unicorn Engine

arch-arm64. Aarch64 architecture plugin

IDBs. Analyses in IDA/Hex-Rays

ghidra_kernelcache. a Ghidra framework for iOS kernelcache reverse engineering

xray. Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions

abyss. abyss - augmentation of Hexrays decompiler output

owl. An open Apple Wireless Direct Link (AWDL) implementation written in C

VulnFanatic. A Binary Ninja plugin for vulnerability research.

DeepBinDiff. Official repository for DeepBinDiff

rbasefind. A firmware base address search tool.

isoalloc. A general purpose memory allocator that implements an isolation security strategy to mitigate memory safety issues while maintaining good performance

adb_shell. A Python implementation of ADB with shell and FileSync functionality.

VVVVVV. The source code to VVVVVV! http://thelettervsixtim.es/

xmm7360-pci. PCI driver for Fibocom L850-GL modem based on Intel XMM7360 modem

bandwhich. Terminal bandwidth utilization tool

xmm7360_usb. Kernel module for Fibocom L850-GL / Intel XMM7360 LTE modem

acorn. untethered+unsandboxed code execution in iOS 11

samsung-trustzone-research. Reverse-engineering tools and exploits for Samsung's implementation of TrustZone

xmm7360-usb-modeswitch. Tools for the Fibocom L850-GL / Intel XMM7360 LTE modem

genmc. Hex-Rays Microcode Viewer

qemu-hexagon. QEMU with support for QDSP6 user mode emulation

Karta. Karta - source code assisted fast binary matching plugin for IDA

ipwndfu. open-source jailbreaking tool for many iOS devices

binaryninja-api. Public API, examples, documentation and issues for Binary Ninja

deREferencing. IDA Pro plugin that implements more user-friendly register and stack views

diaphora_loader. A loader for IDA pro plugin diaphora

ghidra-scripts. ghidra stuff

make_c_program. A utility to create a simple C source file with a `main()` and open it in an editor.

aquaris-X2. Linux Kernel source code for the device bq Aquaris X2

mapguard. MapGuard is a library that enforces a security policy for mmap based page allocations.

kernel-hack-drill. Linux kernel exploitation experiments

ghidra_scripts. Scripts for the Ghidra software reverse engineering suite.

ghidra. Ghidra is a software reverse engineering (SRE) framework

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

IDArling. Collaborative Reverse Engineering plugin for IDA Pro & Hex-Rays

rview. A Gerrit client application for Android

fuji-cam-wifi-tool. Trying to reverse-engineer the wifi remote control protocol used by Fuji X series cameras

android_device_bq_sdm660-common. Shell

pigaios. A tool for matching and diffing source codes directly against binaries.

MetalGear. Fully annotated disassembly of the original Metal Gear game (MSX2, Konami, 1987, RC750)

xnu. ARM64 fixes for XNU

linux-kernel-exploitation. A collection of links related to Linux kernel security and exploitation

memctl. An iOS kernel introspection tool.

exploit_playground. Analysis of public exploits or my 1day exploits

android_device_bq_msm8953-common. Shell

android_device_bq_bardock. Aquaris X

droidimg. Android/Linux vmlinux loader

android_device_bq_bardockpro. Aquaris X Pro

shadow. jemalloc heap exploitation framework

ida_kernelcache. An IDA Toolkit for analyzing iOS kernelcaches.

darwin-xnu. Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu

010Editor-stuff. A collection of 010 Editor specific stuff

linux_kernel_cves. Tracking CVEs for the linux Kernel

aquaris-X-Pro. Linux Kernel source code for the device bq Aquaris X Pro

anti-emulator. Android Anti-Emulator

android_kernel_bq_msm8937. C

ida-arm-system-highlight. IDA script for highlighting and decoding ARM system instructions

android_device_bq_tenshi. Makefile

aquaris-U-Plus. Linux Kernel source code for the device bq Aquaris U Plus

proprietary_vendor_bq. bq vendor files

FRIEND. Flexible Register/Instruction Extender aNd Documentation

aquaris-X5-plus. Linux Kernel source code for the device bq Aquaris X5 Plus

proprietary_vendor_bq. Makefile

dex-oracle. A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

Android_Kernel_CVE_POCs. A list of my CVE's with POCs

ht. The HT Editor: A file editor/viewer/analyzer for executables.

Signal-iOS. A private messenger for iOS.

android-vts. Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.

unruu. Extracts HTC RUU's

Signal-Desktop. A private messenger for Windows, macOS, and Linux.

CVE-2015-3636. PoC code for 32 bit Android OS

PoCForCVE-2015-1528. I'll submit the poc after blackhat

AndroidScrollingImageView. An Android view for displaying repeated continuous side scrolling images. This can be used to create a parallax animation effect.

cm-cloud-generator. CyanogenMod Contributors Cloud generator script

AndroidSlides.

droidsec.github.io. The droidsec web site!

random-scripts. scripts I use from time to time

fuckitpy. The Python error steamroller.

palette-vs-the-dress. Java

UniversalAdbDriver. One size fits all Windows Drivers for Android Debug Bridge.

android-completion. Bash completion for "adb" from the Google Android SDK

kernel. C

awesome. 😎 Awesome lists about all kinds of interesting topics

gitfiti. abusing github commit history for the lulz

CBTextFieldView. A basic pleasant looking textfield/label interface for OS X.

linux. Linux kernel source tree

google-io-2014. Demo for the Material Witness talk I gave at Google I/O.

android_kernel_sony_msm8960t. C

ddi. ddi - Dynamic Dalvik Instrumentation Toolkit

HopperScripts. Python Scripts for use with Hopper Disassembler

rootadb. restart adbd with root privileges