David Buchanan

tweetable-polyglot-png. Pack up to 3MB of data into a tweetable PNG polyglot file.

ambiguous-png-packer. Craft PNG files that appear completely different in Apple software [NOW PATCHED]

dlinject. Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

monomorph. MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

NXLoader. My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

unsafe-python. A library to assist writing memory-unsafe code in "pure" python, without any imports (i.e. no ctypes etc.)

Turbo-Recadmiumator. A remake of truedread/netflix-1080p which auto-patches cadmium-playercore at runtime to enable enhanced playback features. (NOTE: still working in 2024 😎)

libleakmydata. A simple LD_PRELOAD library to disable SSL certificate verification. Inspired by libeatmydata.

pwn-mbr. A simple MBR hijack demonstration

stelf-loader. A stealthy ELF loader - no files, no execve, no RWX

TARDIS. Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.

DeCENC. Tools for decrypting MPEG-CENC files without knowledge of the key

millipds. A from-scratch atproto PDS implementation in Python

anubis_offload. userscript to offload Anubis PoW to native CPU or GPU code

TwitterHD. A userscript that forces twitter to always load images and videos in full resolution

dram_emfi. playing with DDR DRAM bus fault injection

fusee-nano. A minimalist re-implementation of the Fusée Gelée exploit, designed to run on embedded Linux devices. (Zero dependencies)

parallel-png-proposal. Python

picopds. A minimum viable atproto PDS for protocol experimentation purposes

rabbit_r1_boot_notes. Documenting the boot process of the Rabbit R1 (MediaTek mt6765, k65v1_64_bsp, Android 13)

fusee-lede. Instructions/files for building a custom LEDE image to turn cheap routers into a Nintendo Switch "modchip"/"dongle". Powered by https://github.com/DavidBuchanan314/fusee-nano

WAMpage. WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)

RootMyTV. Placeholder repo 👀

plcmine. Yet another vanity did:plc miner

boiga. A Python library enabling ergonomic Scratch 3.0 code generation.

bitmap-font-css. Trying to make bitmap web fonts look better.

webos-vncserver. An extremely hacky VNC server for WebOS - Works by reading directly from the GPU's framebuffer.

pyswargol. A rather fast Game-of-Life implementation in pure Python (plus pysdl2)

6502-emu. A simple 6502 emulator, with I/O via a 6850 UART.

cowroot. Universal Android root tool based on CVE-2016-5195. Watch this space.

yubiplc. A bare-bones CLI tool for signing did:plc operations with a yubikey

IHateDNS. The DNS server for people who hate DNS

unPNG. A backward-compatible subset of the PNG file format, for uncompressed bitmaps

dag-cbrrr. A reasonably fast DAG-CBOR parser for Python

wifi-sdcf. Reverse Engineering notes on the Dxingtek/Keytech(?) WiFi@SDCF card

p65a. Pythonic 6502 Assembler: An experimental alternative to traditional assemblers.

aes-playground. My experiments in understanding AES, Whitebox AES, and related attacks

python-bitsliced-aes. An experimental implementation of bitsliced aes in pure python. Quite possibly the fastest pure-python AES implementation on the planet.

magic-numbers. magically import magic number constants

rc4. A python3 RC4 implementation that doesn't suck. (i.e. it's actually binary-safe...)

scratch-vscode. Preview Scratch projects inside vscode, with live reload.

trumpogram. The World, according to Donald Trump

iPodWizard-mirror. A git mirror of iPodWizard: https://sourceforge.net/projects/ipodwizard/

irradiate.py. a simple script to simulate random "cosmic ray" memory errors against a linux process

mst-test-suite. test suite for atproto-flavour merkle search tree ops

Lplus. a toy bittorrent client

ratatouille. research-grade nintendo switch emulator-like thing

bagel. [WIP] bagel is a Binary age aLternative - mostly the same as age but with a binary header format.

mp4decrypt.js. `mp4decrypt` CLI utility implemented using MP4Box.js

ipod-toslink-mod. Adding optical digital audio output to classic iPods

shellinject. Spawn a reverse TCP shell in the context of another Linux process

python-ssh-server. A very incomplete, incompatible, and insecure implementation of RFC4253

chip8. A simple CHIP-8 Emulator with a GTK+ frontend

backd. server/client protocol for remotely manipulating a "backdoored" linux system