nilswiersma

ratarmount. Access large archives as a filesystem efficiently, e.g., TAR, RAR, ZIP, GZ, BZ2, XZ, ZSTD archives

rich. Rich is a Python library for rich text and beautiful formatting in the terminal.

dissect. Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

apk.sh. Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

lawnchair. No clever tagline needed.

pcb-edge-usb-c. Use your PCB itself as a USB C connector! Including 10,14, and 24 Pin versions

asmtransformers. ASMTransformers is a project to train and use a machine learning model to compare assembly (currently only ARM64) functions to a database of known functions, to aid in the process of reverse engineering.

soxy. A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.

usb-proxy. A USB proxy based on raw-gadget and libusb

aic_pico. AIC Card Reader (Amusement IC, e-Amusement Pass, AIME, Bana Passport, etc.)

Calculus-the-game. An electronic strategy board game about mining an asteroid and barter.

Homeserver. Lightweight home server based on microservices, usable as desktop workstation

eb23. Euroblast 2023 schedule and voting

bbGesture. A Gesture Sensor that works through objects.

tofi. Tiny dynamic menu for Wayland

augurs. Time series analysis for Rust, with bindings to Python and Javascript

GhidrAssist. An LLM extension for Ghidra to enable AI assistance in RE.

resym. For our CCS24 paper 🏆 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" by Danning Xie, Zhuo Zhang, Nan Jiang, Xiangzhe Xu, Lin Tan, and Xiangyu Zhang. 🏆 ACM SIGSAC Distinguished Paper Award Winner

NGINdeX.io. A HTML5 autoindex for NGINX without the fancy index module or ajax calls.

dfa-aes. Efficient C implementation of Differential Fault Analysis on AES (round 1, 2, 8 or 9)

AISY_Framework. Deep Learning-based Framework for Side-Channel Analysis

FindMy.py. 🍏 + 🎯 + 🐍 = Query Apple's FindMy Network with Python!

signalsdrpro. C++

tailscale-vpn-gateway. A dockerized Tailscale exit node that egresses through one or more VPN backends (NordVPN and ProtonVPN, with more to follow), fronted by a small web control panel reachable over your tailnet.

usb-cereal. USB-Cereal is a powerful, fully open source development tool that simplifies testing, development, debugging, and manufacturing of devices that utilize USB-C. Using USB-C’s extended capabilities this unique hardware saves time and effort through simplified debug and factory log capture, as well as firmware update procedures.

linux-exploit-dev-env. Everything you need to build and run Linux and Android kernels for exploit development

litex. Build your hardware, easily!

USBArmyKnife. USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

binsider. Analyze ELF binaries like a boss 😼🕵️‍♂️

IPA. GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat analysis.

datoviz. ⚡ Datoviz: high-performance GPU rendering for scientific data visualization

visplot. Side-channel traces visualizer

impala. 🛜 TUI for managing wifi on Linux

shannon_modem_loader. Exynos Modem / Shannon baseband firmware loader for IDA Pro 8.x/9.x

no-defender. A slightly more fun way to disable windows defender + firewall. (through the WSC api)

riscv-isa-sim-titanM2. Spike, a RISC-V ISA Simulator with patches for Pixel's TitanM2

ripgrep. ripgrep recursively searches directories for a regex pattern while respecting your gitignore

TAoFI-Target.

RapidBlockMode. This repository contains the material required for using Rapid Block Mode on Picoscope 3206d

xzbot. notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

scarr. SCARR is a Side-Channel Analysis (SCA) framework

Qcom-Secure-Launch. Overview of Secure-Launch process on Qualcomm devices

chipwhisperer-jupyter. Interactive ChipWhisperer tutorials using Jupyter notebooks.

SCALib. Side-Channel Analysis Library

fiutils. HTML

fi-resources. Resources for Fault Injection

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

nilswiersma.github.io. SCSS

plotly-resampler. Visualize large time series data with plotly.py

magika. Fast and accurate AI powered file content types detection

peacock. A big QMK powered trackpad

glasgow. Scots Army Knife for electronics

comprehensive-rust. This is the Rust course used by the Android team at Google. It provides you the material to quickly teach Rust.

pico_uart_trigger. Python

emfi-board. Cypherock EMFI device is a low-cost tool to induce electromagnetic fault injections on general purpose MCUs and SOCs to study various chip level attack vectors

0xfefe-com.github.io. HTML

NOSedits. Track changes to titles in NOS articles

tkmoties.github.io. HTML

pixd. 🔍 Colourful visualization tool for binary files

hexd. 🔍 Colourful, human-friendly hexdump tool

1o11. Walki Talkie QuanSheng UV-K5/K6/UV-5R Plus Custom Firmware Merge from: ▪ @OneOfEleven and ▪ @fagci Mod w. Spectrum Analyzer ▪ by @egzumer ▪ Enhanced by @RE3CON: Full freq range of BK4819 for TX and RX: 14MHz ~ 665MHz and 745MHz ~ 1899MHz. 2nd ToneBurst 1050Hz and 1750Hz = PTT + Sidekey 1, PTT + Sidekey 2. Build with CGI 11.3.Rel1 saves some space

side_channel_amplifier. Repository containing the side channel amplifier boards presented at hardwear.io

pico_usb_sniffer. Super simple USB sniffer using Raspberry Pi Pico.

Waveshare_NFC_E-Paper_Display_custom_firmware. A basic custom firmware to show a running example on the TN2115S2 SoC inside of the Passive NFC E-Paper Displays from Waveshare

logicanalyzer. 24 channel, 100Msps logic analyzer hardware and software

usb-sniffer-lite. A simple USB sniffer based on Raspberry Pi RP2040

silicon-toaster. Rust

ThunderScope. ThunderScope GitHub Repo

NewPipe. A libre lightweight streaming front-end for Android.

ghidriff. Python Command-Line Ghidra Binary Diffing Engine

hw-hacking-lab. VSS Hardware Hacking Wiki and Blog Entries

Awesome-Cybersecurity-Handbooks. A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

bindiff. Quickly find differences and similarities in disassembled code

Cartographer. Code Coverage Exploration Plugin for Ghidra

tsffs. A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

uva-workshop. Workshop exercises for Riscure workshop about SIFA and SEFA at the University of Amsterdam

SVD-Loader-Ghidra. Python

binocle. a graphical tool to visualize binary data

Kampela. Hardware signer and key storage for Substrate ecosystem

3018server. JavaScript

ghidra. Ghidra is a software reverse engineering (SRE) framework

textual-paint. :art: MS Paint in your terminal.

UV-K5-Modded-Firmwares. A collection of modified firmwares for the Quansheng UV-K5 radio.

how2heap. A repository for learning various heap exploitation techniques.

cpu_rec_rs. Determine which CPU architecture is used in a binary file.

stm32f1-picopwner. Dump read-out protected STM32F1's with a Pi Pico - A Pi Pico implementation of @JohannesObermaier's, Marc Schink's and Kosma Moczek's Glitch and FPB attack to bypass RDP (read-out protection) level 1 on STM32F1 chips

DevilutionX. Diablo build for modern operating systems

usb-sniffer. Low-cost LS/FS/HS USB sniffer with Wireshark interface

HexWalk. Hex Viewer/Editor/Analyzer compatible with Linux/Windows/MacOS

fq. jq for binary formats - tool, language and decoders for working with binary and text formats

wavebin. Capture and inspect multi-channel oscilloscope waveforms

slot-machine. ncursesw based slot machine game for terminal

donut. Official Implementation of OCR-free Document Understanding Transformer (Donut) and Synthetic Document Generator (SynthDoG), ECCV 2022

windiff. Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI and/or LLMs.

van. 🍦 VanJS: World's smallest reactive UI framework. Incredibly Powerful, Insanely Small - Everyone can build a useful UI app in an hour.

openocd. Official OpenOCD Read-Only Mirror (no pull requests)

gido_public. C++

glow. Render markdown on the CLI, with pizzazz! 💅🏻

ula. μLA: Micro Logic Analyzer for RP2040

selenium-stealth. Trying to make python selenium more stealthy.

python-uncompyle6. A cross-version Python bytecode decompiler

Awesome-Android-Reverse-Engineering. A curated list of awesome Android Reverse Engineering training, resources, and tools.

gbrom-tutorial. Tutorial for extracting the GameBoy ROM from photographs of the die.

Gogh. Gogh is a collection of color schemes for various terminal emulators, including Gnome Terminal, Pantheon Terminal, Tilix, and XFCE4 Terminal also compatible with iTerm on macOS.

qemu-ovmf-swtpm. Setting up QEMU with OVMF (UEFI) and swtpm (software TPM emulation)

scare. A multi-arch assembly REPL and emulator for your command line.

scrcpy. Display and control your Android device

emba. EMBA - The firmware security analyzer

binwalk. Firmware Analysis Tool

FirmWire. FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

monolithic-firmware-collection. Repository for monolithic firmware blobs

Learn-Vim. Learning Vim and Vimscript doesn't have to be hard. This is the guide that you're looking for 📖

mpytool. MPY tool - manage files on devices running MicroPython

pygwalker. PyGWalker: Turn your dataframe into an interactive UI for visual analysis

micropython-ssd1306. A fork of the driver for SSD1306 displays to make it installable via upip

linux-re-101. A collection of resources for linux reverse engineering

holoviews. With Holoviews, your data visualizes itself.

Glitchifier9000. Python

rk3588-TRM-and-Datasheet. Rockchip rk3588(s) Technical Reference Manual and Datasheet

micropython-stubs. Stubs of most MicroPython ports, boards and versions to make writing code that much simpler.

Lithp.

bochscpu. Rust

icicle. Shell

scopehal-apps. ngscopeclient and other client applications for libscopehal.

Focaccia-Board. Multipurpose Breakout for the FT232H

BUSSide. The BUSSide

scapy. Scapy: the Python-based interactive packet manipulation program & library.

flipperzero-firmware. Flipper Zero firmware source code

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

pics. File formats dissections and more...

OffensiveRust. Rust Weaponization for Red Team Engagements.

TEE-reversing. A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

implot. Immediate Mode Plotting

HardwareAllTheThings. Hardware/IOT Pentesting Wiki

GhidraEmu. Native Pcode emulator

retdec. RetDec is a retargetable machine-code decompiler based on LLVM.

awesome-elf.

Glitchy. Glitchy is a no-code visual interface to the world of microcontroller glitching.

WireViz. Easily document cables and wiring harnesses.

vulnerability-write-ups. This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.

interpose. Function interposition for Linux and Mac OS

swsim. A software SIM card.

security-code-review. My personal collection of resources (mostly tools and training materials) for source code security audits.

Jlsca. Side-channel toolkit in Julia

Jldfa. DFA scripts using Jlsca

kpatch. NOTICE: kpatch is deprecated

Notes.

pre_workbench. Protocol Reverse Engineering Workbench

PRE-list. List of (automatic) protocol reverse engineering tools for network protocols

casr. Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.

usb-cereal. USB-Cereal is a debugging and development tool for designs that use USB-C port and bring out serial TX/RX lines into SBU1/2 pins. USB-Cereal is made compatible with both 1.8V and 3.3V signalling.

maskromtool. A CAD tool for extracting bits from Mask ROM photographs.

AWSGoat. AWSGoat : A Damn Vulnerable AWS Infrastructure

pico-python. PicoScope Python Interface

AFLplusplus. The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

unblob. Extract files from any kind of container formats

ghidra-frida-hook-gen. Frida hook generator for Ghidra

picoemp-3018-adapter. Fusion 360, STEP and STL files for 3D printing an adapter to mount a ChipSHOUTER PicoEMP to a Genmitsu 3018-PRO CNC Router.

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

dromaius. A C++ GameBoy emulator

Some_RPI-Pico_stuff. Some experiments I did with the Raspberry Pi Pico

pico-targets. Target programs to glitch for your Raspberry Pico

chipshouter-picoemp. Why not run micropython on your EMFI tool?

weggli. weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

Fuzzing101. An step by step fuzzing tutorial. A GitHub Security Lab initiative

chroagh. Chromium OS Archlinux Chroot Environment