hyper

cve-2024-20017. exploits for CVE-2024-20017

santa-linux. A proof-of-concept Linux clone of Santa, Google's binary authorization system for macOS

mediarekt-2025. PoCs for Mediatek CVEs affecting MT7622/MT7915 and others

mt7622-qemu-vm. QEMU emulation of MediaTek MT7622 PCI driver

cve-2023-33476. Exploits for a heap overflow in MiniDLNA <=1.3.2 (CVE-2023-33476)

rpi-tap. Build a Raspberry Pi Ethernet tap/bridge.

kernel-utils. some scripts to automate setting up kernel research and development environments

bro-stash. Collect and parse Bro logs with Logstash+Filebeat

hyperecon. recon setup + automation

santa-bypass. A Santa bypass using in-memory binary loading and execution + Python ctypes for stealth

keysniffer-poc. Simple PoC Linux keysniffer showing impact of a lack of GUI-isolation in X display server.

c2finder. Look for un-sinkholed C&C IPs in your Bro logs (from Bambanek Consulting C&C master list)

wifi-berry. Turn your RPi 3 into a wireless access point, quick and easy.

udhcpd-fuzz. fuzzing udhcpd with afl llvm persistent mode fuzzing

sploits. PoC exploits for bugs I have found and disclosed.

mtk-kernel-alchemy. C

elasticsec. Read different security-related data formats into a portable ELK stack.

payloads. Git All the Payloads! A collection of web attack payloads.

awesome-reversing. A curated list of awesome reversing resources

linux-kernel-exploitation. A collection of links related to Linux kernel security and exploitation

afl-harness. afl harness templates/library

Cheatsheets. Penetration Testing/Security Cheatsheets

umap2. Umap2 is the second revision of NCC Group's python based USB host security assessment tool.

post-install-scripts. Linux post-installation scripts for installation of different tools and sets of tools.

nestopia. A (slightly) improved fork of 0ldsk00l's Nestopia emulator w/ a GUI