【☆ ゆう ☆ 】

mquickjs. Public repository of the Micro QuickJS Javascript Engine

mt7622-qemu-vm. QEMU emulation of MediaTek MT7622 PCI driver

tinyelfscarf. Source code to build a 76 byte ELF file that prints out the word "scarf"

grammars-v4. Grammars written for ANTLR v4; expectation that the grammars are free of actions.

usb-course-materials. index of all course materials; suitable for offline use

goodasm. A portable assembler for Z80, 8080, Gameboy, 6805, 8051 and others.

TonyHawksProStrcpy. Code execution exploit for Tony Hawk's video game series

yaxgbc. at least 75% of a gbc emulator

DVUEFI. Damn Vulnerable UEFI

slothy. Assembly super-optimization via constraint solving

SummerCart64. SummerCart64 - a fully open source N64 flashcart

Assemblage. The repo holds Assemblage

efi-memory. PoC EFI runtime driver for memory r/w & kdmapper fork

certmitm. A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

UEFI-Lessons. Lessons to get to know UEFI programming in Linux with the help of EDKII

kernel-inline-hook-framework. hook or replace arbitary linux/FreeBSD kernel functions in runtime, supporting arm32, arm64, x86, x86_64, riscv, loongarch

midgetpack. midgetpack is a multiplatform secure ELF packer

Silent_Packer. An ELF / PE binary packer written in pure C, made for fun

elixir. The Elixir Cross Referencer

pendulum. Linux Sleep Obfuscation

ida-openrisc. OpenRISC 1000 processor module for IDA 7.x

easylkb. easylkb - Easy Linux Kernel Builder

serio. Python

hypermedia-blog. a static blog using bun, tailwindcss, htmx, sqlite, and typescript

hw-hacking-lab. VSS Hardware Hacking Wiki and Blog Entries

FwHunt. The Binarly Firmware Hunt (FwHunt) rule format was designed to scan for known vulnerabilities in UEFI firmware.

tsffs. A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

scandump. A command-line utility that scans for Wi-Fi networks using the 802.11 netlink API.

wavacity. C

object-introspection. Object Introspection (OI) enables on-demand, hierarchical profiling of objects in arbitrary C/C++ programs with no recompilation.

bitlocker-attacks. A list of public attacks on BitLocker

libsigrokdecoder_spi-tpm. libsigrok stacked Protocol Decoder for TPM 2.0 & TPM 1.2 transactions from an SPI bus. BitLocker Volume Master Key (VMK) are automatically extracted.

Big-Ass-Data-Broker-Opt-Out-List.

Shrine. A TempleOS distro for heretics

shiva. A custom ELF linker/loader for installing ET_REL binary patches at runtime

adder. Adder python runtime instrumentation

Cartographer. Code Coverage Exploration Plugin for Ghidra

finley. finley makes it easy to quickly decompile several .NET binaries concurrently without involving a GUI.

python-ftfy. Fixes mojibake and other glitches in Unicode text, after the fact.

ROPemporium. All ROPemporium binaries categorized by architecture, with solving scripts and custom flags

FPGADesignElements. A self-contained online book containing a library of FPGA design modules and related coding/design guides.

stelf-loader. A stealthy ELF loader - no files, no execve, no RWX

michelangelo-reanimator. Michelangelo REanimator bootkit and REcon 2023 talk slides/materials

PRE-Resources. Protocol Reverse Engineering Resources

hvICE. hypervisor enforced patch protection for the linux kernel with xen + libvmi, libvmi KASLR offset spoofer

awful-ai. 😈Awful AI is a curated list to track current scary usages of AI - hoping to raise awareness

umap. UEFI bootkit for driver manual mapping

SupplyChainAttacks.

Heap-Resources. Heap Exploitation Resources

pastis. PASTIS: Collaborative Fuzzing Framework

asm2cfg. Python command-line tool and GDB extension to view and save x86, ARM and objdump assembly files as control-flow graph (CFG) pdf files

eresi. The ERESI Reverse Engineering Software Interface

ddisasm. A fast and accurate disassembler

linux-kernel-enriched-corpus. Linux Kernel Fuzzer Corpus

macstealer. MacStealer: Wi-Fi Client Isolation Bypass

jellyfin. The Free Software Media System - Server Backend & API

blenny. A payload delivery system which embeds payloads in an executable's icon file!

fpicker. fpicker is a Frida-based fuzzing suite supporting various modes (including AFL++ in-process fuzzing)

Grammar-Mutator. A grammar-based custom mutator for AFL++

RVVM. The RISC-V Virtual Machine

packer-tutorial. A tutorial on how to write a packer for Windows!

hoard-of-bitfonts. turns out I like bitmap fonts

fragattacks. C

debugoff. Linux anti-debugging and anti-analysis rust library

wavedrom. :ocean: Digital timing diagram rendering engine

itlb_poc. iTLB multihit PoC

binary-parsing. A list of generic tools for parsing binary data structures, such as file formats, network protocols or bitstreams

secret_handshake. A prototype malware C2 channel using x509 certificates over mTLS

p65a. Pythonic 6502 Assembler: An experimental alternative to traditional assemblers.

Book-on-MOS-stages. Book repository "Analysis and Design of Elementary MOS Amplifier Stages"

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

TEE-reversing. A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

MacDirtyCowDemo. Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

usercorn. dynamic binary analysis via platform emulation

unicorn-engine-notes. Notes on using the Python bindings for the Unicorn Engine

unicorn. Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

test. A collection of boilerplate code and projects for testing ideas

qiling. A True Instrumentable Binary Emulation Framework

lkmpg. The Linux Kernel Module Programming Guide (updated for 5.0+ kernels)

GhidraBoy. Sharp SM83 / Game Boy extension for Ghidra

fq. jq for binary formats - tool, language and decoders for working with binary and text formats

learn-fpga. Learning FPGA, yosys, nextpnr, and RISC-V

usb_c_cable_tester.

hyperpom. AArch64 fuzzer based on the Apple Silicon hypervisor

twitter-archive-parser. Python code to parse a Twitter archive and output in various ways

tdfiglet. A figlet for TheDraw's TDF ANSI fonts

dotfiles. rice 🍚 custom linux config files. as seen on r/unixporn #noricenolife neovim cultist. dotfiles are perpetual wip

Community-Papers. RIXED LABS is open for contributions for it's community papers . If you want to publish a blog or a paper , it will be added to the site with proper credits.

PS5SDK. An SDK to build payloads/ELF files compatible with the loader in the PS5 WebKit+Kernel Exploit chain.

exploit_me. Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 29 vulnerability techniques)

hashprogs. A collection of small programs which compute cryptographic hashs.

taskverse. A tool like /bin/ps but uses /proc/kcore for walking the tasklist; this finds hidden processes

lipgloss. Style definitions for nice terminal layouts 👄

awesome-firmware-security. Awesome Firmware Security & Other Helpful Documents

linux-wifi-ota-crash. This is a small POC running on an ESP32, exploiting CVE-2022-42722 to crash Linux devices over the air.

tigard. An FTDI FT2232H-based multi-protocol tool for hardware hacking

xx-files.

portscraper. Rust

monomorph. MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

awesome-youtubers. An awesome list of awesome YouTubers that teach about technology. Tutorials about web development, computer science, machine learning, game development, cybersecurity, and more.

kmemd. Explore a live Linux kernel's memory using GDB

heap_find_and_poke. uses process_vm_readv and process_vm_writev to patch heap memory of another process

rtpmidid. RTP MIDI (AppleMIDI) daemon for Linux

Ghidrathon. The FLARE team's open-source extension to add Python 3 scripting to Ghidra.

hello-asm. Hello World examples in assembly, for use as templates.

LIEF. LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

grc. generic colouriser

bitmap-font-css. Trying to make bitmap web fonts look better.

Terminus. Bring a real terminal to Sublime Text

ReC98. The Touhou PC-98 Restoration Project

garble. Obfuscate Go builds

like-dbg. Fully dockerized Linux kernel debugging environment

Pokemon-Shellcode-Loader. Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

PVT. PCAP visualization tool

utils. Useful scripts, Docker images, docker-compose apps, and Terraform modules.

tproxy. A cli tool to proxy and analyze TCP connections.

SurvivalManual. Libre Survival Manual for Android with offline in mind

decompiler-explorer. Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

piloslib. Multi-platform open-source set of audio and modulation tools that focus on synthesis, live electronic music, interconnection, probability, unique sounds, and intuitive interfacing built by Akunull in Pure Data starting in 2014

nprint. nPrint provides a generalizable data representation for network packets that works directly with machine learning techniques

eagle-rs. Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)

gorss. Go Terminal Feed Reader

Arm-firmware-emulation. Script for emulating Arm firmware in QEMU, including a binary for hooking functions for certain Tenda firmware versions that are not straight-forward to emulate.

Cronos-Rootkit. Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

asciiflow. ASCIIFlow

emba. EMBA - The firmware security analyzer

pwnkernel. Kernel development & exploitation practice environment.

Cybersecurity-Tradecraft. A repo to support the book

heaptrace. helps visualize heap operations for pwn and debugging

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Weylus. Use your tablet as graphic tablet/touch screen on your computer.

goo-gone. degoogle for your browser

nfqueue-go. Go bindings for NFQueue

gdb-dashboard. Modular visual interface for GDB in Python

spritegtk. render sprites into your desktop environment as shaped windows using GTK

uCodeDisasm. Python

exclave. C++

WindowsInternals. Yet another windows internals repo

ScareCrow. ScareCrow - Payload creation framework designed around EDR bypass.

simple-languages-js. A small Javascript snippet for smooth bi/multilingual websites.

js-vuln-db. A collection of JavaScript engine CVEs with PoCs

how2heap. A repository for learning various heap exploitation techniques.

rappel. A linux-based assembly REPL for x86, amd64, armv7, and armv8

PPLdump. Dump the memory of a PPL with a userland exploit

termshark. A terminal UI for tshark, inspired by Wireshark

ICS-Security-Tools. Tools, tips, tricks, and more for exploring ICS Security.

ropc. A Turing complete ROP compiler

ropr. A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative (currently x86 only)

Reverse-Engineering. A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.

al-khaser. Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

malware_training_vol1. Materials for Windows Malware Analysis training (volume 1)

wsb-detect. wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")

libgolf. Binary Golf Library

sublime. 320+ color themes for Sublime Text and Textmate.

AFLplusplus. The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

winafl. A fork of AFL for fuzzing Windows binaries

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

cores. Teensy Core Libraries for Arduino

rich. Rich is a Python library for rich text and beautiful formatting in the terminal.

wtfpython. What the f*ck Python? 😱

ansilove. ANSI and ASCII art to PNG converter in C

edex-ui. A cross-platform, customizable science fiction terminal emulator with advanced monitoring & touchscreen support.

uboot-mdb-dump. Python

funky_malware_formats. Parsers for custom malware formats ("Funky malware formats")

algo. Set up a personal VPN in the cloud

mitra. A generator of weird files (binary polyglots, near polyglots, polymocks...)

PSKernel-Primitives. Exploit primitives for PowerShell

EfiGuard. Disable PatchGuard and Driver Signature Enforcement at boot time

ret-sync. ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

DIRT. Driver Initial Reconnaissance Tool

endlessh. SSH tarpit that slowly sends an endless banner

tools-for-hack-a-sat-2020. QEMU setup for emulating satellite firmware for Hack-A-Sat final event

pcodedmp. A VBA p-code disassembler

oletools. oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

DNSExfiltrator. Data exfiltration over DNS request covert channel

cb-multios. DARPA Challenges Sets for Linux, Windows, and macOS

bip. Python

idascope. An IDA Pro extension for easier (malware) reverse engineering

cosa-nostra. Cosa Nostra, a FOSS graph based malware clusterization toolkit.

FavFreak. Making Favicon.ico based Recon Great again !

awesome-embedded-and-iot-security. A curated list of awesome embedded and IoT security resources.

pe_tree. Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.

malwaremustdie. repository of tools & resources of the MMD team

htp-zines. A collection of Hack The Planet's zines.

capa. The FLARE team's open-source tool to identify capabilities in executable files.

Exploits. Real world and CTFs exploiting web/binary POCs.

threadx. Eclipse ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications.

cLEMENCy. cLEMENCy is the LEgitbs Middle ENdian Computer architecture developed by Lightning for DEF CON CTF 2017

syphon. ⚗️ a privacy centric matrix client

haxon. Tooling to retrieve data from Axon2 Body Cams

element-themes. A place to share themes for Element. PRs with new themes are welcome!

pypykatz. Mimikatz implementation in pure Python

yara-rules-re. [Moved to Codeberg] Tools for inspecting YARA bytecode

degoogle. search Google and extract results directly. skip all the click-through links and other sketchiness

ipftrace2. A packet oriented Linux kernel function call tracer

binary-samples. Samples of binary with different formats and architectures. A test suite for your binary analysis tools.

python-curses-scroll-example. :tv: How to implement the scroll and paging in Python curses

exrex. Irregular methods on regular expressions

ICS_PCAPS. ICS Cybersecurity PCAP respository

Z0FCourse_ReverseEngineering. Reverse engineering focusing on x64 Windows.