Faith

chronomaly. Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

virtualbox-qemu-vuln-research-notes. Vulnerability research notes for VirtualBox and QEMU. Contains debug environment setup notes, a PoC template, exploit primitive notes, and more.

poc-CVE-2025-38352. This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.

exploit-CVE-2025-39946. Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.

real-world-ethereum-hacks-remastered. Solidity

CTF. CTF solve scripts. Some writeups on my blog, others on my gist. Check the challenge directories for links.

freebsd-dirent-info-leak-bugs. CVE-2020-25578 and CVE-2020-25579: Some FreeBSD info leak bugs I found in 2020.

my-presentations. All my presentations

picoctf-2019-pwn-challenges. My first foray into heap exploitation

nday-pocs. PoCs for N-days I've analysed

damn-vulnerable-defi. Solidity

rop-emporium-solutions. A repository of all rop-emporium problems and their solutions

ids-pcap-analysis. IDS stuff

ctf-png-chunksize-fixer. Python

ethernaut-solutions. Solidity

ctf-pwntools-skeleton. An initial skeleton script I use for all my binary exploit scripts

firefaith. As I am currently learning Rust, I thought an interesting project would be to create a VM for my own implementation of an assembly language that looks very similar to x86_64. Inspired by https://blog.subnetzero.io/post/building-language-vm-part-00/

scoping-tool. VS Code extension to help with scoping out audits. Unfinished.