Julien Voisin

thc-ipv6. IPv6 attack toolkit

gosentry. Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

signal-tlsd. Standalone Rust implementation of Signal's domain fronting TLS proxy: https://github.com/signalapp/Signal-TLS-Proxy

TRX. Open source re-implementation of Tomb Raider I, Tomb Raider II and Tomb Raider III, along with additional enhancements and bugfixes

thc-tips-tricks-hacks-cheat-sheet. Various tips & tricks

landlook. Landlook — Interactive Landlock Profiler

team-teso. C

gemrb. GemRB is a portable open-source implementation of Bioware’s Infinity Engine.

TombEngine. A new and modern engine for custom Tomb Raider levels incorporating classic features and new enhancements.

fallout2-ce. Fallout 2 for modern operating systems

Singularity. Stealthy Linux Kernel Rootkit for modern kernels (6x)

x-ray. A tool to detect whether a PDF has a bad redaction

maptoposter. Transform your favorite cities into beautiful, minimalist designs. MapToPoster lets you create and export visually striking map posters with code.

openblack. openblack is an open-source game engine that supports playing Black & White (2001).

Presentations.

UT2004Patches.

EnhancedSC. A major patch for the original Splinter Cell, fixing bugs and adding gameplay improvements.

memexec. Circumventing "noexec" mount flag to execute arbitrary linux binaries by ptrace-less process injection

sfall. sfall - Engine modifications for Fallout 2

manim. A community-maintained Python framework for creating mathematical animations.

picat. Learning Constraint Programming with Picat

gitu. A TUI Git client inspired by Magit

chromium-exploit-dev. Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits

SkinDeep. Source code for Skin Deep (2025)

aligo. Utility for checking and viewing Golang struct alignment info

jcc. A full C compiler, written in pure C. No 3rd party dependencies or parser generators

censorbib. The Internet censorship bibliography.

polylux. A package for creating slides in Typst

Sylve. Lightweight GUI for managing Bhyve, Jails, ZFS, networking, and more on FreeBSD

samply. Command-line sampling profiler for macOS, Linux, and Windows

RBDOOM-3-BFG. Doom 3 BFG Edition source port with updated DX12 / Vulkan renderer and modern game engine features

feroxbuster. A fast, simple, recursive content discovery tool written in Rust.

objectwalker. A python module to explore the object tree to extract paths to interesting objects in memory.

funserialize. Scripts and auxiliary files for fuzzing PHP's unserialize function

elfconv. AOT binary translator of Linux/ELF → WebAssembly

cfpsec. CFPsec is a client program that retrieves the list of Call For Papers or/and upcoming Hacking/Security Conferences based on cfptime.org website.

cascii-core. A web-based ASCII and Unicode diagram builder written in vanilla Javascript

glpwnme. GLPI vulnerabilities checking tool

Xbox360BadUpdate. Software only hypervisor exploit for Xbox 360

lightyear. lightyear is a tool to dump files in tedious (blind) conditions using PHP filters

CVEs. Bug History

xit. a git alternative written in zig

powerletrics. Powermetrics for Linux

modern-font-stacks. System font stack CSS organized by typeface classification for every modern operating system

WindsOfTheNorth. A modlist for Skyrim Anniversary Edition

U7Revisited. A replacement engine for Ultima VII The Black Gate (and eventually Serpent Isle) that presents a new camera angle and other improvements.

source-sdk-2013. The 2013 edition of the Source SDK

vscode-weaudit. Create code bookmarks and code highlights with a click.

Graphite. Community-built comprehensive 2D content creation appplication for graphic design, digital art, and interactive real-time motion graphics powered by a node-based procedural graphics engine

asm-lessons. FFmpeg Assembly Language Lessons

ergo. A modern IRC server (daemon/ircd) written in Go.

badkeys. Tool to find common vulnerabilities in cryptographic public keys

phuzz. Modular & Open-Source Coverage-Guided Web Application Fuzzer for PHP

darkmod_src. Official mirror of TheDarkMod game engine

ad. an adaptable text editor

hvdetecc. Collection of hypervisor detections

harper. Offline, privacy-first grammar checker. Fast, open-source, Rust-powered

opencanary. Modular and decentralised honeypot

Fallout2_Restoration_Project. Fallout 2 Restoration Project, updated

SurrealEngine. Unreal Engine 1 Reimplementation

brokepkg. The LKM rootkit working in Linux Kernels 2.6.x/3.x/4.x/5.x

sshamble. SSHamble: Unexpected Exposures in SSH

multiplier. Code auditing productivity multiplier.

pypykatz. Mimikatz implementation in pure Python

Sourcetrail. Sourcetrail - free and open-source interactive source explorer

river. This repository is the home of the River reverse proxy application, based on the pingora library from Cloudflare.

ladybird. Truly independent web browser

mimalloc-bench. Suite for benchmarking malloc implementations.

eaphammer. Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

goop. Yet another tool to dump a git repository from a website, focused on as-complete-as-possible dumps and handling weird edge-cases.

lookscanned.io. 📚 LookScanned.io - Make your PDFs look scanned

herbie. Optimize floating-point expressions for accuracy

germy. GERMY is a Linux Kernel n-day in the N_GSM line discipline

cnext-exploits. Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

ChameleonUltra. The new generation chameleon based on NRF52840 makes the performance of card emulation more stable. And gave the chameleon the ability to read, write, and decrypt cards.

N64Recomp. Tool to statically recompile N64 games into native executables

bash_tls. A minimal TLS 1.2 client implementation in a pure Bash script

PPPwn. PPPwn - PlayStation 4 PPPoE RCE

slides. Terminal based presentation tool

proxmark3. Iceman Fork - Proxmark3

fallout1-ce. Fallout for modern operating systems

UnderworldGodot. Engine recreation for Ultima Underworld and Ultima Underworld 2 using the Godot Engine

php_filter_chains_oracle_exploit. A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

My-CTF-Web-Challenges. Collection of CTF Web challenges I made

ffuf. Fast web fuzzer written in Go

ioq3. The ioquake3 community effort to continue supporting/developing id's Quake III Arena

EagleVM. Native code virtualizer for x64 binaries

Peacock. The Peacock Project is a HITMAN™ World of Assassination trilogy server replacement.

morrowind-modding.github.io. The Morrowind Modding Wiki

stract. web search done right

BTIGhidra. Binary Type Inference Ghidra Plugin

cursorless. Don't let the cursor slow you down

reko. Reko is a binary decompiler.

exploits. Miscellaneous exploit code

polygons. A playable post on how harmless choices can make a harmful world.

templight. Templight is a Clang-based tool to profile the time and memory consumption of template instantiations and to perform interactive debugging sessions to gain introspection into the template instantiation process.

systemshock. Shockolate - A minimalist and cross platform System Shock source port.

xgadget. Fast, parallel, cross-variant ROP/JOP gadget search for x86/x64 binaries.

elfshaker. elfshaker stores binary objects efficiently

GAMBA. Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

typst.vim. Vim plugin for Typst

wrapwrap. Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

peda. PEDA - Python Exploit Development Assistance for GDB

RetSpill. RetSpill: Igniting User-Controlled Data to Burn Away Linux Kernel Protections

rex. Shellphish's automated exploitation engine, originally created for the Cyber Grand Challenge.

sacad. Smart Automatic Cover Art Downloader

DarkPlaces. The DarkPlaces Quake engine, created by LadyHavoc. Official Git repository (replaces SVN).

virtme. An easy way to virtualize the running system

dune3d. 3D CAD application

keeperfx. Open source remake and Fan Expansion of Dungeon Keeper.

shh. Systemd Hardening Helper - Mirror of https://github.com/desbma/shh

routersploit. Exploitation Framework for Embedded Devices

bitmagnet. A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.

wipeout-rewrite. C

ripe-atlas-software-probe. Probe codebase of RIPE Atlas, a global network measuring Internet connectivity and reachability

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

mgs2sos. This mod lets you play MGS2: Substance with the 3rd person camera (and game controls) from MGS3: Subsistence

llef. LLEF is a plugin for LLDB to make it more useful for RE and VR

Cytopia. :deciduous_tree::house_with_garden::office::evergreen_tree: A city building simulation game

TES3Merge. Object merge utility for The Elder Scrolls 3: Morrowind.

arocc. A modern fully featured C compiler.

padre. Blazing fast, advanced Padding Oracle exploit

harbian-audit. Hardened Debian GNU/Linux distro auditing

Seatbelt. Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

vcmi. Open-source engine for Heroes of Might and Magic III

pledge. OpenBSD APIs ported to Linux userspace using SECCOMP BPF and Landlock LSM

BugChecker. SoftICE-like kernel debugger for Windows 11

streets-gl. 🗺 OpenStreetMap 3D renderer powered by WebGL2

kasld. KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.

jedi-language-server. A Python language server exclusively for Jedi. If Jedi supports it well, this language server should too.

FUGIO. FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

Microsoft-Activation-Scripts. Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

tld-zoneinfo. information about retrieving TLD zone data

x86-sat. Basic SAT model of x86 instructions using Z3, autogenerated from Intel docs

Havoc. The Havoc Framework

seerr. Open-source media request and discovery manager for Jellyfin, Plex, and Emby.

pimox7. Proxmox V7 for Raspberry Pi

alpine-chroot-install. Install Alpine Linux in chroot with a breeze. Build ARM on Travis CI or any other x86_64 CI.

Addon. ClearURLs is an add-on based on the new WebExtensions technology and will automatically remove tracking elements from URLs to help protect your privacy.

uBlock. uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

ropfuscator. ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).

typst. A markup-based typesetting system that is powerful and easy to learn.

microvm.nix. NixOS MicroVMs

RustPython. A Python Interpreter written in Rust

nicotine-plus. Graphical client for the Soulseek peer-to-peer network

ruff. An extremely fast Python linter and code formatter, written in Rust.

moebius. Modern ANSI & ASCII Art Editor

goomba. gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions

asciimathml. A new home for asciimathml

marp. The entrance repository of Markdown presentation ecosystem

vim-dbml. Vim plugin provides syntax and filtetype detection for DBML (Database Markup Language) by dbml-lang.org

xray-16. Improved version of the X-Ray Engine, the game engine used in the world-famous S.T.A.L.K.E.R. game series by GSC Game World. Join OpenXRay! ;)

cutter. Free and Open Source Reverse Engineering Platform powered by rizin

maloja. Self-hosted music scrobble database to create personal listening statistics and charts

dircolors. An arctic, north-bluish clean and elegant dircolors theme.

php_filter_chain_generator. Python

fortify-headers. Chimera's fork of https://git.2f30.org/fortify-headers

polarbearblog. Beautifully simple single author blog in Go - derived from Bear Blog.

bearblog. Free, no-nonsense, super fast blogging.

protoview. Flipper Zero app to display known and unknown signals

REVIDE. The next generation reverse engineering IDE (work-in-progress).

git-shuffle. Randomize Git commit timestamps to enhance privacy

awesome-flipperzero. 🐬 A collection of awesome resources for the Flipper Zero device.

predef. Pre-defined Compiler Macros wiki

opus. Pure Go implementation of Opus

openspy-core. C++

blink. tiniest x86-64-linux emulator

bubblewrap. Low-level unprivileged sandboxing tool used by Flatpak and similar projects

minijail. sandboxing and containment tool used in ChromeOS and Android

conf-steakoverlow-2022. Bypass d'authentification depuis le GRUB | SteakOverflow 2022

mini-rv32ima. A tiny C header-only risc-v emulator.

MSRC-Security-Research. Security Research from the Microsoft Security Response Center (MSRC)

luajit-remake. An ongoing attempt to re-engineer LuaJIT from scratch

d2. D2 is a modern diagram scripting language that turns text to diagrams.

SpyGuard. SpyGuard is a forked and enhanced version of TinyCheck. SpyGuard's main objective is to detect signs of compromise by monitoring network flows transmitted by a device.

ratarmount. Access large archives as a filesystem efficiently, e.g., TAR, RAR, ZIP, GZ, BZ2, XZ, ZSTD archives

nano-emacs. GNU Emacs / N Λ N O - Emacs made simple

llsoftsecbook. Low-Level Software Security for Compiler Developers

elvm. EsoLangVM Compiler Infrastructure

Artfuscator. A C compiler targeting an artistically pleasing nightmare for reverse engineers

php7.4.26-internalog. php7.4.26-internalog

hickory-dns. A Rust based DNS client, server, and resolver

libc-db. libc database (file in packages, hash, package files, symbols). Raw binary libc available on https://github.com/BestPig/libc-bin)

wpbullet. A static code analysis for WordPress (and PHP)

headscale. An open source, self-hosted implementation of the Tailscale control server

EaST. Exploits and Security Tools Framework 2.0.1

decompiler-explorer. Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

PHP-binary-bugs. PHP binary bugs advisory

x8. Hidden parameters discovery suite

v2. Minimalist and opinionated feed reader

mabel. A fancy BitTorrent client for the terminal

CompileScore. Tools for profiling and visualizing C++ build times.

q1k3. A tiny FPS for js13k

acme.sh. A pure Unix shell script ACME client for SSL / TLS certificate automation

harpoon. CLI tool for open source and threat intelligence

metasploit-framework. Metasploit Framework

samurai. ninja-compatible build tool written in C

coreutils. Cross-platform Rust rewrite of the GNU coreutils

rustls. A modern TLS library in Rust