blacktop

ipsw. iOS/macOS Research Swiss Army Knife

ipsw-diffs. IPSW Diffs

lporg. Organize Your macOS Launchpad Apps

docker-cuckoo. Cuckoo Sandbox Dockerfile

darwin-xnu-build. XNU kernel, Kernel Collection and CodeQL build scripts

go-macho. Package macho implements access to and creation of Mach-O object files.

docker-ghidra. Ghidra Client/Server Docker Image

docker-elastic-stack. ELK Stack Dockerfile

docker-elasticsearch-alpine. Alpine Linux based Elasticsearch Docker Image

docker-bro. Bro IDS Dockerfile

symbolicator. `ipsw` symbolication signatures

docker-idapro. IDA Pro Docker Image

docker-zeek. Zeek IDS Dockerfile

go-apfs. APFS parser written in pure Go

graboid. Clientless Docker Image Downloader

docker-kibana-alpine. Alpine Linux based Kibana Docker Image

docker-kafka-alpine. Alpine Linux based Kafka Docker Image

mcp-tts. MCP Server for Text to Speech

presentations. Slides and resources for talks I've given

go-termimg. Modern terminal image library for Go

docker-yara. Yara Dockerfile

docker-logstash-alpine. Alpine Linux based Logstash Docker Image

seccomp-gen. Docker Secure Computing Profile Generator

ghidra-app. Ghidra CI/CD to build and host a universal macOS Ghidra.app

go-hypervisor. Apple Hypervisor.framework bindings for Golang

docker-volatility. Volatility Dockerfile

ipsw-py. A Python library for the ipsw daemon API

language-yara. Yara syntax highlighting

go-arm64. Pure Go AARCH64 architecture disassembler

go-foundationmodels. Pure Go wrapper for Apple's Foundation Models

scifgif. Humorous image microservice for isolated networks

bottle-bomb. Homebrew Bottle Downloader

yardens-sb-profs. Output from running Yarden's sandblaster on an iPhone15,2's iOS17 kernelcaches

aarch64-cssc. AArch64 FEAT_CSSC support for IDA Pro (disassembler/Hex-Rays) and Ghidra

vm-proxy. VBoxManage/vmrun proxy to allow communication from within a VM to the hypervisor running the VM.

go-dev. Golang Dev Env Dockerfile

partialzip. Partial Implementation of PartialZip in Go

darwin-webkit-build. WebKit/JSC CodeQL Databases

dotfiles. My personal .files

homebrew-tap. Blacktop's Homebrew Formulas

arm64-cgo. Golang bindings for the Binary Ninja Arm64 Disassembler.

dyld-src-fixes. Just some fixes to dyld so you can build some of the utils

httpie. Docker image with httpie and jq installed

atom-python-yapf. Atom.io plugin to format for Python files using Google's YAPF

go-dwarf. Package dwarf provides access to DWARF debugging information loaded from executable files, as defined in the DWARF 2.0 Standard at http://dwarfstd.org/doc/dwarf-2.0.0.pdf

lzfse-cgo. Go bindings for lzfse compression

bindiff-rs. Rust library to interface with BinDiff

docker-filebeat. Alpine Linux based Filebeat Docker Image

go-idalib. Go bindings for the IDA 9.0 SDK

fluxy. FLUX image generator TUI

go-bindiff. Go package to interface with BinDiff

ghidra. Ghidra is a software reverse engineering (SRE) framework

disassegen. Generate arbitrary language AARCH64 disassemblers from ARMARM spec

how-ya-doing. Monitor your Github repos activity

frida-scripts. This'll be the year I finally learn Frida 🤞

dbg. Docker gdb/lldb images

get-vine. Vine Video Downloader

ccpaths. Update compile_commands.json source code paths