Hiroyuki Katsura

LLMs-from-scratch. Implement a ChatGPT-like LLM in PyTorch from scratch, step by step

codex-security. OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

rocq-mcp. MCP server for the Rocq prover

rust-rosetta. Implementing Rosetta Code problems in Rust.

eurydice. Eurydice compiles (a decent subset of) Rust to C. Verify programs in Rust, still get C code for legacy environments.

defending-code-reference-harness. Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize

hands-on-modern-rl. 🚀 An open-source, hands-on curriculum bridging the gap from basic RL concepts to LLM alignment, RLVR, and advanced Agentic systems.

mini-swe-agent. The 100 line AI agent that solves GitHub issues or helps you in your command line. Radically simple, no huge configs, no giant monorepo—but scores >74% on SWE-bench verified!

lem-lean. Lem semantic definition language

cerberus-lean. Cerberus C semantics

adler-proofs. Adler-32 verified twice: a comparative formal-verification case study using Lean+Aeneas and Verus, with both proofs sorry-free and verifying the same byte-at-a-time spec.

fandango. FANDANGO is a language-based fuzzer that leverages formal input specifications (grammars) combined with constraints to generate diverse sets of valid inputs for programs under test.

findruction2. better fast and loose instruction finder

clearwing. Python

lolcat. lolcat, now with fearless concurrency.

pulse-sandbox. A repo to get started with Pulse, with a devcontainer

AutoCorrode. Verification infrastructure for the Isabelle/HOL interactive proof assistant

TimeCapsuleLLM. A LLM trained only on data from certain time periods to reduce modern bias

goose. an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM

opencode. The open source coding agent.

video-editor. Rust

sling. C

proofofthought. Proof of thought : LLM-based reasoning using Z3 theorem proving with multiple backend support (SMT2 and JSON DSL)

guess-optimizer. GeoGuessr Expectation Simulator

mrustc. Alternative rust compiler (re-implementation)

sail-riscv. Sail RISC-V model

ostrich. An SMT Solver for string constraints

protocol-bugs-list. List of bugs found in distributed protocols

ott-paper-template. A template for writing papers using Ott (https://github.com/ott-lang/ott)

cocktails_for_programmers. Сocktails for programmers. Коктейли для программистов.

verus-proof-synthesis. Rust

minirust. A precise specification for "Rust lite / MIR plus"

arxiv-latex-cleaner. arXiv LaTeX Cleaner: Easily clean the LaTeX code of your paper to submit to arXiv

awesome-ai-agents. A list of AI autonomous agents

silicon. Symbolic-execution-based verifier for the Viper intermediate verification language.

containerization. Containerization is a Swift package for running Linux containers on macOS.

kaobook. A LaTeX class for books, reports or theses based on https://github.com/kenohori/thesis and https://github.com/Tufte-LaTeX/tufte-latex.

jail. An nsjail Docker image for CTF pwnables. Easily create secure, isolated xinetd/inetd-style services.

carcara. Rust

tpot. Artifact repository for the "Practical Verification of System-Software Components Written in Standard C" paper (SOSP'24)

explode-js. Automated Exploit Generation for Node.js Packages

verus. Verified Rust for low-level systems code

lcov. LCOV

ott. The Ott tool for writing definitions of programming languages and calculi

VERSE-Toolchain. Tools for testing and verifying the safety and correctness of C programs.

sail. Sail architecture definition language

cn-tutorial. C

mairu. On-memory AWS credentials agent and executor for IAM Identity Center (AWS SSO) and custom servers

httptap. View HTTP/HTTPS requests made by any Linux program

hunspell. The most popular spellchecking library.

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

manim. Animation engine for explanatory math videos

easycrypt. EasyCrypt: Computer-Aided Cryptographic Proofs

nilaway. Static analysis tool to detect potential nil panics in Go code

cerberus. Cerberus C semantics

yarpgen. Yet Another Random Program Generator

mincaml-rs. A mincaml port written in Rust (reference implementation)

pprotein. Performance monitoring utilities for API server written in Go, works with pprof/fgprof/alp/slp

isunarabe-images. ISUNARABE の練習 VM 用イメージをビルドするためのパイプライン

ctf_multidocker. Dockerfile

misc. C++

zellij. A terminal workspace with batteries included

CVE-2023-3640. SCTF 2023 kernel pwn && CVE-2023-3640

criterion.rs. Statistics-driven benchmarking library for Rust

ouroboros. Easy self-referential struct generation for Rust.

z3. The Z3 Theorem Prover

mata. A fast and simple automata library

algaroba. An eager SMT solver for Algebraic Data Types (ADTs)

rustc_public. Define compiler intermediate representation usable by external tools

script-server. Web UI for your scripts with execution management

benchexec. BenchExec: A Framework for Reliable Benchmarking and Resource Measurement

miri. An interpreter for Rust's mid-level intermediate representation

athena. Validation framework for CHC models

errors. Go error library with error portability over the network

python-decompile3. Python decompiler for 3.7-3.8 Stripped down from uncompyle6 so we can refactor and start to fix up some long-standing problems

domato. DOM fuzzer

LLM4Decompile. Reverse Engineering: Decompiling Binary Code with Large Language Models

ultimate. The Ultimate program analysis framework.

moka. A high performance concurrent caching library for Rust

llrt. LLRT (Low Latency Runtime) is an experimental, lightweight JavaScript runtime designed to address the growing demand for fast and efficient Serverless applications.

set_log. Python

z3-cex. OCaml

magic-trace. magic-trace collects and displays high-resolution traces of what a process is doing

pprof-rs. A Rust CPU profiler implemented with the help of backtrace-rs

colima. Container runtimes on macOS (and Linux) with minimal setup

difftastic. a structural diff that understands syntax 🟥🟩

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

misc. misc

it-quiz. 「IT」に関連するジャンルの、自作の早押しクイズのデータベース

aws-isucon. ISUCON過去問環境をAWSで再現するための一式まとめ

tsgctf-platform. TypeScript

LazyVim. Neovim config for the lazy

scripts. Scripts used in CHC-COMP

rajiko. A tool for unblocking geolocation restriction of radiko.jp!

hscaml. yet another toy OCaml interpreter in Haskell

graten. "Gradual Tensor Shape Checking" (ESOP 23)

ctf-wiki-en. A full English version of the popular ctf-wiki

DOrder. DOrder -- Automatically Learning Shape Specifications

cursed_types. List of Trusted Types bypasses

bentov. OCaml implementation of histogram-approximation algorithm

hacl-star. HACL*, a formally verified cryptographic library written in F*

milewski-ctfp-pdf. Bartosz Milewski's 'Category Theory for Programmers' unofficial PDF and LaTeX source

qcheck. QuickCheck inspired property-based testing for OCaml.

crowbar. Property fuzzing for OCaml

csisat. CSIsat: A Tool for LA+EUF Interpolation

mlir-tutorial. MLIR For Beginners tutorial

domainslib. Parallel Programming over Domains

awesome-multicore-ocaml. A collection of libraries, experiments and ideas relating to OCaml 5 (multicore + effects)

buck2. Build system, successor to Buck

catala. Programming language for literate programming law specification

eio. Effects-based direct-style IO for multicore OCaml

sloader. sloader is an ELF loader which aims to replace ld-linux.so of glibc.

cheribuild. Easily build and run CHERI related projects

cheribsd. FreeBSD adapted for CHERI-RISC-V and Arm Morello.

quine-relay. An uroboros program with 100+ programming languages

othello_read. C++

binsync. A reversing plugin for cross-decompiler collaboration, built on git.

optee_os. Trusted side of the TEE

cacao. Rust bindings for AppKit (macOS) and UIKit (iOS/tvOS). Experimental, but working!

buzzer. Go

write-ups. Write-ups for various CTF

FUSEFs_exploitation. An example of a FUSE filesystem that can be used in kernel exploitation as a replacement for userfaultfd technique

ocamlrep. Sets of libraries and tools to write applications and libraries mixing OCaml and Rust. These libraries will help keeping your types and data structures synchronized, and enable seamless exchange between OCaml and Rust

ChatGDB. Harness the power of ChatGPT inside the GDB or LLDB debugger!

effects-examples. Examples to illustrate the use of algebraic effects in Multicore OCaml

fiat-crypto. Cryptographic Primitive Code Generation by Fiat

effing-mad. Algebraic effects for Rust

golem. Solver for Constrained Horn Clauses

human-or-vocaloid-quiz. TypeScript

voicevox_gcp. GCP container of VOICEVOX Engine

Hypervisor-101-in-Rust. The materials of "Hypervisor 101 in Rust", a one-day long course, to quickly learn hardware-assisted virtualization technology and its application for high-performance fuzzing on Intel/AMD processors.

developer-roadmap. Interactive roadmaps, guides and other educational content to help developers grow in their careers.

alive. Alive: Automatic LLVM's Instcombine Verifier

aeneas. A verification toolchain for Rust programs

mezzo. The language of the future!

fully-homomorphic-encryption. Homomorphic Encryption demos

ctf. knowledge is power

ropr. A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative (currently x86 only)

extfuse. Extension Framework for FUSE

cupynumeric. NumPy and SciPy on Multi-Node Multi-GPU systems

cbmc. C Bounded Model Checker

mcc. min-caml compiler written in rust

rust-horn. RustHorn: A CHC-based automated verifier for Rust

petgraph. Graph data structure library for Rust.

library-checker-problems. The problem data (Test case generator, judge's solution, task, ...) of Library Checker

code. Prolog

heartbeat.hakatashi.com. Keep alive

tar.pl. tar creator+extractor in ~100 lines of prolog

rust-pretty-assertions. Overwrite `assert_eq!` with a drop-in replacement, adding a colorful diff.

starlark. Starlark Language

buck. A fast build system that encourages the creation of small, reusable modules over a variety of platforms and languages.

autocxx. Tool for safe ergonomic Rust/C++ interop driven from existing C++ headers

cbindgen. A project for generating C bindings from Rust code

diplomat. Rust tool for generating FFI definitions allowing many other languages to call Rust code

crubit. A bidirectional bindings generator for C++ and Rust.

research. VerSprite Security Research

wizard-engine. Research WebAssembly Engine

virgil. A fast and lightweight native programming language

holbert. A graphical interactive proof assistant designed for education

malfunction. Malfunctional Programming

swc. Rust-based platform for the Web

pretty.rs. Wadler-style pretty-printing combinators in Rust

coar. Collection of Automated Reasoners

sotsuron. AFL++ code coverage visualization (for my graduation thesis)

FSOPAgain. FSOP Again

kosenctfx. Go

satysfi.ml. Go

differential-dataflow. An implementation of differential dataflow using timely dataflow on Rust.

polonius. Defines the Rust borrow checker.

rbpf. Rust virtual machine and JIT compiler for eBPF programs

gopacket. Provides packet processing capabilities for Go

awib. a brainfuck compiler written in brainfuck

Zeratool. Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems

cloud-init-isucon. ISUCON過去問環境を構築するためのcloud-config集

slp. SlowLog Profiler for MySQL and PostgreSQL

hashmap. A Golang lock-free thread-safe HashMap optimized for fastest read access.

trick2022. Ruby

caronte. A tool to analyze the network flow during attack/defence Capture the Flag competitions

tsgctf2021. Everything about TSG CTF 2021

compiler-explorer. Run compilers interactively from your web browser and interact with the assembly

decompiler-explorer. Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

CVE-2022-23222. CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

nextra. Simple, powerful and flexible site generation framework with everything you love from Next.js.

hayatoito.github.io. HTML

CreuSAT. CreuSAT - A formally verified SAT solver written in Rust and verified with Creusot.

creusot. Creusot helps you prove your Rust code is correct.

2022. WeCTF 2022 Source Code & Organizer's Writeup

YubiKey-Guide. Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

rbbardiche. Ruby parser and LSP in Rust

fuzz-introspector. Fuzz Introspector -- introspect, extend and optimise fuzzers

tinygo. Go compiler for small places. Microcontrollers, WebAssembly (WASM/WASI), and command-line tools. Based on LLVM.

ocamlsyntax.com. How do you do that recursive GADT thing again?

DNS_ROPOB. C

awesome-elf.

python-patterns. A collection of design patterns/idioms in Python

CTFNote. Python

awesome-low-latency. Patterns and resources of low latency programming.

wtfpython. What the f*ck Python? 😱

quals-2022. Source code for the DEF CON 30 CTF Qualifiers.

ptrlib. Python library for CTFer