Robert Xiao

2048-ai. AI for the 2048 game

sha1collider. Build two PDFs that have different content but identical SHA1 sums.

ghidra-wasm-plugin. Ghidra Wasm plugin with disassembly and decompilation support

iOS-SOCKS-Server. iOS HTTP/SOCKS proxy server for fake-tethering

universal-doom. A single .exe binary which runs DOOM on DOS 6, Windows 95 and Windows 10 (and probably everything in between).

eqgrp-free-file. Free sampling of files from the purported Equation Group hack.

Il2CppVersions. Build scripts & historical header files for every available minor version of Unity's Il2Cpp project

pwn-stuff. Miscellaneous utilities and such that I use for pwning. Open sourced since people might find these useful. Be warned: nothing is stable.

ntfsrecover. NTFS data-recovery program written in Python

ffsend. Python client for Firefox Send

socks5-ios. SOCKS server for iOS. Handy for defeating tethering speed limits, among other uses.

ghidra-rickroll. Get rickrolled, right in your favourite NSA reverse engineering tool

threes-ai. AI for the game Threes!

iOS-Torrent-Client. A torrent client for iOS which runs on play.js - without sideloading or jailbreaking!

direct-handtracking. DIRECT - Depth IR Enhanced Contact Tracking

fixedint. Fixed-width integers for Python

doublethink. Doublethink challenge from DEF CON 2018

ofxWin8Touch. Windows 8 touch driver for OpenFrameworks using WM_POINTER events

openFrameworks-AndroidStudio. OpenFrameworks modifications to work with Android Studio

firefox-charset-extension. Override Character Encoding extension for Firefox

sstic-2021. Files for my solution to the SSTIC 2021 challenge

Insta360-X3-Firmware-Tools. Tools for unpacking and repacking firmware images for the Insta360 X3

bgrep. Binary grep with support for sophisticated regexes and grep(1)-like usage

osx-10.9-opensource. OS X 10.9 Public Sources

sublime-replace-with-python. "Replace with Python" for Sublime Text

microsocks. tiny, portable SOCKS5 server with very moderate resource usage

steam-phishing-analysis. Analysis and dissection of a Steam login phishing site.

libm3. Library for reading and writing Blizzard .m3 model files.

sstv-encoder. SSTV encoder for Terebeep challenge at PlaidCTF 2017

FF-Remote-Control. An extension for Firefox that allows one to remote control FF with TCP sockets

hexacon-2022. Files for my solution to the Hexacon 2022 challenge

pogo-iv-reader. Screenshot-reading IV calculator for Pokemon GO

net-nrbf. Utilities to dump and process .NET binary-serialized data streams.

pandt. HCI P&T projects

sarah2-attack. Cryptanalysis of the Sarah2 pen-and-paper cipher

android_remote_control. Control an Android phone's touchscreen via ADB.

sstic-2023. My writeup for the SSTIC 2023 challenge (https://www.sstic.org/2023/challenge/)

ghidra-skeleton-language. Skeleton language module for Ghidra

pwntools. CTF framework and exploit development library

bpftools. BPF Tools - packet analyst toolkit

websocket-client. websocket client for python

libfreenect. Drivers and libraries for the Xbox Kinect device on WIndows, Linux, and OS X

nightmare. Python

ctf_clusters. visualizing CTF clusters (teams playing together at DEFCON quals 2022)

ghidra2dwarf. 🐉 Export ghidra decompiled code to dwarf sections inside ELF binary

hachoir. Hachoir is a Python library to view and edit a binary stream field by field

sharedrop. HTML5 clone of Apple's AirDrop - easy P2P file transfer powered by WebRTC

text-generation-webui. A gradio web UI for running Large Language Models like LLaMA, llama.cpp, GPT-J, Pythia, OPT, and GALACTICA.

Photopea-Offline. Photopea for offline use

android_system_core. Android System Core (CM)

stratasys. Stratasys EEPROM tool

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

unpack-mkbootimg. Android unpackbootimg/mkbootimg tools