Sean Heelan

anamnesis-release. Automatic Exploit Generation with LLMs

o3_finds_cve-2025-37899. Artefacts for blog post on finding CVE-2025-37899 with o3

HeapLayout. Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'

funserialize. Scripts and auxiliary files for fuzzing PHP's unserialize function

Malamute. Malamute is a fuzzing toolkit initially developed to aid with regression-test based fuzzing of language interpreters

InterParser. A collection of scripts based on libclang for extracting API information from interpreters

claude_opus_cve_2023_0266. Demo showing Claude Opus does not find CVE-2023-0266

AliasExamples. CodeQL

ShapeShifter. An heap allocator that allows a particular layout to be selected

Entomology. Bugs! Both security relevant and otherwise.

BitVectorDemos. Some small demo scripts for SMTLIB and Z3 basics

otel-profiling-agent. The production-scale datacenter profiler

DotFiles. Files for initialising my environment on OS X and Linux

ksmbd-vuln-research. A report on my ongoing vulnerability research on ksmbd

Arjun. HTTP parameter discovery suite.

sysgrok. LLM-driven assistant for analyzing, understanding and optimizing systems

superopt. A superoptimizing compiler for packet-processing

xdev-buildroot. Makefile

amass. In-depth attack surface mapping and asset discovery

ctf-archives. CTF Archives: Collection of CTF Challenges.

puredns. Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

fuzztruction-net. Rust

google_benchmark_plot. A handy script to visualize google benchmark output

PerfBinaryStaticAnalysis. Experimental scripts for detection of potential performance issues in binaries

AdventOfCode. https://adventofcode.com/

pedantrs. A Rust linter, purely for educational purposes

ebpf-blade. Program slicer for eBPF

ParaDySE. C