alan

smolvm. Portable, lightweight, self-contained virtual machines.

kbox. Boot a real Linux kernel as an in-process library (LKL) and route intercepted syscalls to it via seccomp

renode. Renode - Antmicro's open source simulation and virtual development framework for complex embedded systems

tenrec. A headless, extendable, multi-session, IDA Pro MCP framework.

pbtk. A toolset for reverse engineering and fuzzing Protobuf-based apps

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

bettercap. The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

buttercup. Buttercup finds and patches software vulnerabilities

vet. vet is a command-line tool that acts as a safety net for the risky curl | bash pattern. It lets you inspect, diff against previous versions, and lint remote scripts before asking for your explicit approval to execute. Promoting a safer, more transparent way to handle remote code execution.

exploits. C

starina. Rust

grease. CLI tool, Ghidra plug-in, and Haskell library for analyzing binaries using under-constrained symbolic execution

nerve. The Simple Agent Development Kit.

ECC_Attacks. Known attacks on Elliptic Curve Cryptography

multiplier. Code auditing productivity multiplier.

rtic. Real-Time Interrupt-driven Concurrency (RTIC) framework for ARM Cortex-M microcontrollers

cve-rs. Blazingly 🔥 fast 🚀 memory vulnerabilities, written in 100% safe Rust. 🦀

blackmagic. In-application debugger for ARM Cortex and RISC-V processors.

nanoGPT. The simplest, fastest repository for training/finetuning medium-sized GPTs.

QtRE. A Ghidra headless analyzer tailored for Qt binary analysis

tinygrad. You like pytorch? You like micrograd? You love tinygrad! ❤️

hledger. Robust, fast, intuitive plain text accounting tool with CLI, TUI and web interfaces.

rust-headless-chrome. A high-level API to control headless Chrome or Chromium over the DevTools Protocol. It is the Rust equivalent of Puppeteer, a Node library maintained by the Chrome DevTools team.

logrotten. C

ferrocene. Source code of Ferrocene, safety-critical Rust toolchain

bindiff. Quickly find differences and similarities in disassembled code

SeaGOAT. local-first semantic code search engine

clang-cfi-bypass-techniques. Exploitation techniques to bypass Clang CFI when applied to Chromium

zellij. A terminal workspace with batteries included

Flask-Unsign. Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

birdcage. Cross-platform embeddable sandboxing

hydrafw. HydraBus HydraFW official firmware for open source multi-tool for anyone interested in learning/developping/debugging/hacking/Penetration Testing for basic or advanced embedded hardware

netlink. Simple netlink library for go.

shiva. A custom ELF linker/loader for installing ET_REL binary patches at runtime

ocaml_intrinsics. Provides functions to invoke amd64 instructions (such as clz,popcnt,rdtsc,rdpmc) when available, or compatible software implementation on other targets.

xone. Linux kernel driver for Xbox One and Xbox Series X|S accessories

ouroboros. Easy self-referential struct generation for Rust.

wsrepl. WebSocket REPL for pentesters

llef. LLEF is a plugin for LLDB to make it more useful for RE and VR

opencanary. Modular and decentralised honeypot

circl. CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

pastis. PASTIS: Collaborative Fuzzing Framework

openplayground. An LLM playground you can run on your laptop

try. Inspect a command's effects before modifying your live system

build-bom. Dynamically discover the commands used to create a piece of software

drgn. Programmable debugger

cs. codespelunker - CLI code search tool that understands code structure and ranks results by relevance. No indexing required with CLI, TUI, MCP and HTTP support.

vast-checker. MLIR

seninja. symbolic execution plugin for binary ninja

sasquatch. Shell

fuse-overlayfs. FUSE implementation for overlayfs

jtagulator. JTAGulator: Assisted discovery of on-chip debug interfaces

compdb. The compilation database Swiss army knife

scip. SCIP Code Intelligence Protocol

binja_coolsigmaker. a cooler signature scanning and creation library for binja

snapchange. Lightweight fuzzing of a memory snapshot using KVM

binsync. A reversing plugin for cross-decompiler collaboration, built on git.

scare. A multi-arch assembly REPL and emulator for your command line.

flowistry. Flowistry is an IDE plugin for Rust that helps you focus on relevant code.

gptcommit. A git prepare-commit-msg hook for authoring commit messages with LLMs.

homebridge. HomeKit support for the impatient.

FirmAE. Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

nn-zero-to-hero. Neural Networks: Zero to Hero

debugger. Binary Ninja debugger

SockFuzzer. C

QBDI. A Dynamic Binary Instrumentation framework based on LLVM.

FUGIO. FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

ronin. Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

vast. VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or further program abstraction.

carbonyl. Chromium running inside your terminal

cxx. Safe interop between Rust and C++

uncover. Quickly discover exposed hosts on the internet using multiple search engines.

pyhidra. Pyhidra is a Python library that provides direct access to the Ghidra API within a native CPython interpreter using jpype.

goomba. gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions

divergent-representations. CodeQL and Binary Ninja scripts to accompany the blog post

fdupes. FDUPES is a program for identifying or deleting duplicate files residing within specified directories.

Silhouette. Keep it secret, keep it safe

hound. Lightning fast code searching made easy

MacDirtyCowDemo. Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

php_filter_chain_generator. Python

tlspuffin. A Dolev-Yao-model-guided fuzzer for TLS

timevault. A dead man's switch for full but responsible disclosure of vulnerabilities

git-hound. Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

synchrony. javascript-obfuscator cleaner & deobfuscator

z-tokens. z-tokens -- random tokens generation and related tools

fuzz-introspector. Fuzz Introspector -- introspect, extend and optimise fuzzers

BugChecker. SoftICE-like kernel debugger for Windows 11

cargo-sandbox. Rust

hyperscan. High-performance regular expression matching library

modreveal. Utility to find hidden Linux kernel modules

WDBFontOverwrite. Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.

binaryninja-openai. Integrates OpenAI with BinaryNinja via a plugin.

goldberg. A Rust-based obfuscation macro library!

elegant-bouncer. ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

bypass-sentry-safe. C++

RebirthGuard. Anti-cheat library for Windows C++

idahunt. idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Exploit-Development. Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

comprehensive-rust. This is the Rust course used by the Android team at Google. It provides you the material to quickly teach Rust.

snuffleupagus. Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

rbndr. Simple DNS Rebinding Service

osv-scanner. Vulnerability scanner written in Go which uses the data provided by https://osv.dev

awesome-websocket-security. Awesome information for WebSockets security research

STEWS. A Security Tool for Enumerating WebSockets

websocat. Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

rsyscall. Process-independent interface to Linux system calls

blink. tiniest x86-64-linux emulator

DOMPurify. DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

exploits. Python

refinery. High Octane Triage Analysis

asm2vec. An unofficial implementation of asm2vec as a standalone python package

ultimate-writer. Open Digital Typewriter

Gepetto. IDA plugin which queries language models to speed up reverse-engineering

fwanalyzer. a tool to analyze filesystem images for security

buck2. Build system, successor to Buck

tandem. A maliciously secure two-party computation engine which is embeddable and accessible

ocamlbyexample. Learn Ocaml by reading code examples

Stockfish. A free and strong UCI chess engine

polytracker. An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

vagrant-qemu. Use Vagrant to manage machines using QEMU. Test with Apple Silicon / M1 and CentOS aarch64 image

Proxyman. The best-in-class HTTP Debugger for macOS. Capture HTTP/HTTPS from macOS, iOS, Android with a few clicks ✅

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

sniffnet. Comfortably monitor your Internet traffic 🕵️‍♂️

Unwinder. Call stack spoofing for Rust

guard. Guard is a command line tool to easily handle events on file system modifications.

firmadyne. Platform for emulation and dynamic analysis of Linux-based firmware

guarddog. :snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages

vmprotect_binja_plugin. Binary Ninja plugin for automating VMProtect analysis

codeql-action. Actions for running CodeQL analysis

hyperpom. AArch64 fuzzer based on the Apple Silicon hypervisor

Starlink-FI. HTML

wInd3x. iPod Classic and Nano 3/4/5G bootrom exploit

katana. A next-generation crawling and spidering framework.

grace. :screwdriver: It's strace, with colours.

machine_learning_security. Source code about machine learning and security.

Awesome_Malware_Techniques. This is a repository of resource about Malware techniques

spyne. A transport agnostic sync/async RPC library that focuses on exposing services with a well-defined API using popular protocols.

awesome-rust-security. Curated list of awesome projects and resources related to Rust and computer security

enf-matching. Date a recording using background electrical noise

Iroh. Dynamic code analysis tool - Exploit, record and analyze running JavaScript

SymbolicTriagePost. Supporting Materials for “Symbolic Triage” blog post

o-mvll. :electron: O-MVLL is a code obfuscation tool based on LLVM for native code (Android and iOS).

trojan-source. Trojan Source: Invisible Vulnerabilities

saml-attack-surface.

REpsych. Psychological warfare in reverse engineering

elvm. EsoLangVM Compiler Infrastructure

Artfuscator. A C compiler targeting an artistically pleasing nightmare for reverse engineers

rcgen. Generate X.509 certificates, CSRs

awesome-zero-knowledge-proofs. A curated list of awesome things related to learning Zero-Knowledge Proofs (ZKP).

EdXposed. Elder driver Xposed Framework.

rewind. Snapshot-based coverage-guided windows kernel fuzzer

arbiter. Python

akamai-security-research. This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

requests-racer. Small Python library that makes it easy to exploit race conditions in web apps with Requests.

gef. GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

psalm. A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

Havoc. The Havoc Framework

steamdeck-emulation. 🎮 Guide to play emulated games on Steam Deck

Mussels. Python

turbinia. Automation and Scaling of Digital Forensics Tools

yori. Yori is a CMD replacement shell that supports backquotes, job control, and improves tab completion, file matching, aliases, command history, and more.

awesome-elf.

octosuite. Terminal-based toolkit for GitHub data analysis.

Cronos. PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

binaryninja-api. Public API, examples, documentation and issues for Binary Ninja

synapse. Synapse: Matrix homeserver written in Python/Twisted.

symboliclink-testing-tools. C++

like-dbg. Fully dockerized Linux kernel debugging environment

werdlists. :keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

out-of-tree. out-of-tree kernel {module, exploit} development tool

exrop. Automatic ROPChain Generation

drltrace. Drltrace is a library calls tracer for Windows and Linux applications.

martian. Martian is a library for building custom HTTP/S proxies

whisper. Robust Speech Recognition via Large-Scale Weak Supervision

advmlthreatmatrix. Adversarial Threat Landscape for AI Systems

risk-explorer-for-software-supply-chains. A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and other resources. The taxonomy as well as related safeguards can be explored using an interactive visualization tool.

advisories. SSD Secure Disclosure Advisories

cloud-security-vulnerabilities. List of all the Publicly disclosed vulnerabilities of Public Cloud Provider like Amazon Web Services (AWS), Microsoft Azure, Google Cloud, Oracle Cloud, IBM Cloud etc

BGGP. Binary Golf Grand Prix

ast-grep. ⚡A CLI tool for code structural search, lint and rewriting. Written in Rust

dacquiri. A strong, compile-time enforced authorization framework for rust applications.

EvilURL. Generate unicode domains for IDN Homograph Attack and detect them.

CVE-2020-10665. POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation

chromium. The official GitHub mirror of the Chromium source

certificate-transparency-go. Auditing for TLS certificates (Go code)

pe-bear. Portable Executable reversing tool with a friendly GUI

virtual-fido. A Virtual FIDO2 USB Device

Vulnerability-Disclosures. C++

vheap. Extendable Visualization & Exploitation tool for glibc heap

flipperzero-firmware. Flipper Zero firmware source code

tactical-exploitation. Modern tactical exploitation toolkit.

exploits. A handy collection of my public exploits, all in one place.

semgrep-rules. A collection of my Semgrep rules to facilitate vulnerability research.

voltron. A hacky debugger UI for hackers

Red-Baron. Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

java-deserialization-exploits. A collection of curated Java Deserialization Exploits

CVE-2022-30075. Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)

phishing_catcher. Phishing catcher using Certstream

disposable-email-domains. a list of disposable email domains

top-10-cicd-security-risks.