Altin (tin-z)

GDBleed. Dynamic-Static binary instrumentation framework on top of GDB

CVE-2023-35086-POC. POC of CVE-2023-35086 only DoS

CVE-2025-27363. Integer overflow in FreeType software, which also affects Chrome

Stuff_and_POCs. Containing vulnerabilities I've discovered and maybe CVE

narly.js. narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)

CVE-2021-20294-POC. Simple CVE-2021-20294 poc

heapwn_Cheatsheet. A repository that contains some memo about heap exploitation in Linux

OSED_scripts. Scripts developed for OSED exam preparation

IDC_OSED_scripts. IDC plugins to support OSED exam preparation, some of the scripts are simplified port of devttyS0 IDAPython plugins

pthC. Framework analysis assembly code by Intel processor trace

IoT_toolbox. Rudimentary tools for vulnerability research and reverse engineering tasks for IoT routers

windbg-code-tracing. Pykd script to perform simple code tracing and so inspecting control flow executed (CFE).

smart_contract_auditor_tool. Python

Linux-kernel-forensics-scripts. Gdb, r2, python scripts i made to perform binary analysis and forensic tasks.

CVE-2018-14714-POC. POC CVE-2018-14714

coccinelle_exercises. coccinelle notes and exercises

solidity_CVE-2021-42574-POC. POC of CVE-2021-42574 for solidity and solc compiler

mY_Writ3_Up5. CTF & security related write-ups done by me

kvm-fuzz. PoC of fuzzing closed-source userspace binaries with KVM

toolbox_python. Helper functions in python exploiting python internals

malware-naming. Malware naming convention

tin-z.

report_BFS_ekoparty_2022_exploitation_challenges. BFS 2022 ekoparty windows challenge writeup

Useful-bash-aliases-and-functions. List of useful bash aliases and functions that i made during work

Audits. My personal smart contract findings during code audit sessions

CVE-2020-36109-POC. PoC DoS CVE-2020-36109

Windows-stuffs. Win32

qemu_blog. A series of posts about QEMU internals:

nvram-faker. C

tin-z.github.io. The Lambda driver blog

PartitionAlloc_gdb. Python

intro-to-semgrep. TypeScript

pino_obfuscator. C

codeql-uboot. CodeQL

fahook. A simple script that using angr aims to reach and avoid some section of code and hook others. "Usefull" for RE

AppliedMathForSecurityBook. Jupyter Notebook

yarb. 方便获取每日安全资讯的爬虫和推送程序

upgradeable-proxy-from-scratch. Code from "Upgradeable proxy contract from scratch" blog post

coccinelleforrust_personal_mirror. https://gitlab.inria.fr/coccinelle/coccinelleforrust

hardhat-tracer. 🕵️ allows you to see internal calls, events and storage operations in the console

general-scripts. Python

vr-rev-jobs. List of organizations offering vulnerability research, reverse engineering, and security research jobs