Sam Brown

windows_kernel_address_leaks. Examples of leaking Kernel Mode information from User Mode on Windows

windows_kernel_resources. Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits

windbg-plugins. Any useful windbg plugins I've written.

HashData. A command line Hash Identifying tool.

HackSysDriverExploits. C++

CVE-2014-4113. Trigger and exploit code for CVE-2014-4113

windows_syscalls_dumper. A dirty IDAPython script to dump windows system call number/name pairs as JSON

z3-stuff. z3 scripts and ctf challenge solutions.

pilloc. A pin tool to visualise heap operations

ida-scripts. Dumping ground for whatever IDA Pro scripts I write

PSOD. A simple Windows driver which crashes the system and turns the BSOD pink

win-driver-tools. A couple of little tools I've made for working with Windows Drivers

recon-ng-bt_lookup. A BT lookup module for recon-ng

intro-to-kernel-exploitation. C++

littleos. A little os built using the littleosbook

SimpleBrowser. A simple browser written in python

win_driver_plugin. A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.

sam-b.github.io. Ruby

gchq_can_you_crack_it. A VM implemented in rust for gchqs "Can you crack it?" challenge from 2011

win_update_permanence_swap. Modifies the permanence field in windows update MUM files to make updates permanent/removable

cs344. Introduction to Parallel Programming class code

DataSearch. A simple search engine in python

owasp-mstg. The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

CVE-2016-7255. An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit

crib-dragger. Asimple script for crib dragging against many-time pads I preiodically use for CTFs

ctf-stuff. Python