ax

apk.sh. Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK.

android-fingerprint-bypass. Updated Android biometric bypass script for Frida (from Kamil Breński, Krzysztof Pranczk and Mateusz Fruba, August 2019). The code resolves BiometricPrompt$AuthenticationResult constructor args at runtime. It should work with any Android version.

DEXPatch. Surgically inject a System.loadLibrary() into a dex.

asyhttp. A simple module to perform asynchronous HTTP requests using asyncio and aiohttp.

burp-logs. Logs is a Burp Suite extension to work with log files.

merge_webpath_list. There are tons of web-path wordlists for content discovery here around. Here follows some code to quickly download and merge lists from different location.

dye. Lightweight module with ANSI control codes to dye python scripts.

SHA. Basic Secure Hash Algorithm implementations in C

ghidra-scripts. A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research.

sysdig. a system exploration and troubleshooting tool

caringcaribou. A friendly car security exploration tool for the CAN bus

frida-afl-proxy-poc. frida-afl-proxy-poc

hypervisor-hack. Instrumenting the KVM hypervisor

PDFs. A repo of handmade PDFs