Joshua J. Drake

asus-cmd. ASUS Router infosvr UDP Broadcast root Command Execution

cve-2015-1538-1. An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

android-cluster-toolkit. The Android Cluster Toolkit helps organize and manipulate a collection of Android devices.

lk-reducer. Linux Kernel Source Tree Reducer

challack. Proof-of-concept exploit code for CVE-2016-5696

canhazaxs. A tool for enumerating the access to entries in the file system of an Android device.

privmap. A tool for enumerating the effective privileges of processes on an Android device.

VulnWebView. Java

addjsif. Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)

file-dissect. File Dissect is a cross-platform framework and UI for analyzing various file formats. It is based on wxWidgets since it provides a native feel regardless of base OS.

rootadb. restart adbd with root privileges

harry_potter. Write-up and such for the 2014 Plaid CTF harry_potter exploitation challenge

CVE-2015-3636-fi01. PoC code for 32 bit Android OS

metasploit-payloads. Unified repository for different Metasploit Framework payloads

socks_scan. Unoriginally named SOCKS proxy scanner from the days of old (2002)

drozer. D

jfap. A simple 802.11 fake access point that supports open auth

bs25-slides. Slides from "Musing from Decades of Linux Kernel Security Research" at BOOTSTRAP25

radare2. unix-like reverse engineering framework and commandline tools

csw-slides-2024. Slides for Developing Secure Software in 2024 at CanSecWest

bap. Binary Analysis Platform

nsc. A netcat clone using libnsock

idarub. Ruby plugin for IDAPro

nsock. Ninja Socket Library

rp. rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.

metasploit-framework. Fork of Metasploit Framework

openbts. GSM+GPRS Radio Access Network Node

doar-e.github.io. Diary of a reverse-engineer

capstone. Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

mettle. Fork of Rapid7's mettle payload

sf_lvars. Superfluous local variable Hex-Rays de-compiler plugin (from 2009)

chrome-bookmark-del-fix. A tool to patch Chrome's resources.pak to fix an annoying bug in the bookmark manager

radare2-regressions. Regression Tests for the Radare2 Reverse Engineer's Debugger

androiddevice.info. Android app collecting device information and submiting it to www.androiddevice.info

theos. Unified cross-platform iPhone Makefile system

jduck.github.com. Personal site

ddi. ddi - Dynamic Dalvik Instrumentation Toolkit

libircii. A C library for parsing IrcII protocol

cve-2014-0521.

insomnihack-2015-teaser. My challenge solutions for Insomni'Hack Teaser 2015

truecrypt-archive. Archive of older truecrypt releases

yez. A tiny raw-irc program using libnsock/libircii

ELFIO. ELFIO - ELF (Executable and Linkable Format) reader and producer implemented as a header only C++ library

vixr. A (new&improved) Ruby Bridge to the VMware VIX API

KUNAI-static-analyzer. Tool aimed to provide a binary analysis of different file formats through the use of an Intermmediate Representation.