Dmytro Oleksiuk

s6_pcie_microblaze. PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

ThinkPwn. Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors

SmmBackdoor. First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.

MicroBackdoor. Small and convenient C2 tool for Windows targets

KernelForge. A library to develop kernel level Windows payloads for post HVCI era

openreil. Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)

WindowsRegistryRootkit. Kernel rootkit, that lives inside the Windows registry values data

SmmBackdoorNg. Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

fwexpl. PC firmware exploitation tool and library

PeiBackdoor. PEI stage backdoor for UEFI compatible firmware

ioctlfuzzer. Automatically exported from code.google.com/p/ioctlfuzzer

UEFI_boot_script_expl. CHIPSEC module that exploits UEFI boot script table vulnerability

pico_dma. Autonomous pre-boot DMA attack hardware implant for M.2 slot based on PicoEVB development board

DrvHide-PoC. Hidden kernel mode code execution for bypassing modern anti-rootkits.

smram_parse. System Management RAM analysis tool

PTBypass-PoC. Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.

IDA-VMware-GDB. Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub

Aptiocalypsis. Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares

qc_debug_monitor. Debug messages monitor for Qualcomm cellular modems

zc_pcie_dma. DMA attacks over PCI Express based on Xilinx Zynq-7000 series SoC

Code-coverage-analysis-tools. Code coverage analysis tools for the PIN Toolkit

secretnet_expl. LPE exploits for Secret Net and Secret Net Studio

MsFontsFuzz. OpenType font file format fuzzer for Windows

DbgCb. Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications

SimpleUnpacker. Simple tool for unpacking packed/protected malware executables.

prl_guest_to_host. Guest to host VM escape exploit for Parallels Desktop

IDA-UbiGraph. IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph

efiXplorer. IDA plugin for UEFI firmware analysis and reverse engineering automation

r0ak. r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

vmlinux-to-elf. A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

capstone. Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

blog. Stuff for blog.cr4.sh website

masscan. TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

PowerShell-Suite. My musings with PowerShell

portage. Portage Package Manager - this is just a mirror, see https://wiki.gentoo.org/wiki/Project:Portage#Contributing_to_Portage

chipsec. Platform Security Assessment Framework