_SiCk

ssh-keysign-pwn. Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

Copy_Fail2-Electric_Boogaloo. Copy Fail 2: Electric Boogaloo

SteelSeriesGGLPE. C

MOOR_PQ. Post-quantum anonymous overlay network. 3-hop onion routing with X25519 + Kyber768 hybrid cryptography.

sigil-web. SE050 Hardware Bitcoin Wallet - Self-sovereign Bitcoin wallet powered by NXP SE050 secure element

privme. admin to NT\authority SYSTEM LPE - Windows 10/11

ioctl_zap. a really dumb, but seemingly effective IOCTL fuzzer for windows device drivers.

bindflt-0x50. bindflt.sys 0x50 fuzz repro

wfplwfs_bsod. A local DoS in wfplwfs.sys: PoC for Windows 8.1 to 10/11. Rated medium by MSRC and closed without fix

Pack2TheRoot. my own PoC for this LPE

fpga-md5-cracker. FPGA MD5 brute-force cracker - 50 parallel cores on Zybo Z7-20 (XC7Z020), ~60M hashes/sec

NTLM_release. Verilog

chipdemo. Demoscene music disk for Zybo Z7-20 FPGA — 10-track MOD jukebox with parallax night city over HDMI 720p

DES_cracker. Verilog