Robert David Graham

masscan. TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

rdpscan. A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

heartleech. Demonstrates the "heartbleed" problem using full OpenSSL stack

robdns. A fast DNS server based on C10M principles

pemcrack. Cracks SSL PEM files that hold encrypted private keys. Brute forces or dictionary cracks. This code is extraordinarily slow, DON'T JUDGE ME!!!

isowall. This is a mini-firewall that completely isolates a target device from the local network.

wc2. Investigates optimizing 'wc', the Unix word count program

telnetlogger. Simulates enough of a Telnet connection in order to log failed login attempts.

hunter-dkim. Discusses how to verify DKIM signatures in old emails, namely one of the Hunter Biden emails in the news

whats-dec. WhatsApp end-to-end media decryptor

wifi-mon. Web-based WiFi monitor

ecb-penguin. Demonstrating the famous ECB penguin so that you can repeat the process yourself.

cve-2015-5477. PoC exploit for CVE-2015-5477 BIND9 TKEY assertion failure

hamster. A proxy server for cookie sidejacking. Works with 'ferret'.

whats-enc. Reverse engineering WhatsApp Web.

cybersymposium. Mike Lindell's cybersymposium files

sockdoc. Sample programs demonstrating how to program in C using the Sockets API.

iotpasswds. Recording default/backdoor passwords from IoT devices I come across

packetdump. A packet-sniffer for 10gig networks that writes to compressed files. I created this because

scanme. A lightweight/secure honeypot using Lua scripts.

non-math-crypto. A non-math, but still technical, guide to cryptography

hellolua. Simple examples of integrating the Lua scripting language into C programs.

dnsparse. Parses DNS responses in a secure, rigorous manner

ferret. A continuation of my 'ferret' project that extracts useful information from networks.

mp4dec. Prototype program to decode a video file looking for exploits/malware.

bluetoothid. Identifies Bluetooth Low-energy devices

smb-logger. Logs incoming attempts to connect to NetBIOS/SMB

echobench. A simple implementation of an 'echo' (port 7) server using epoll (Linux), kqueue (FreeBSD), and IOCompletionPorts (Windows).

papers. This project is various snippets of code for academic papers.

c10mbench. C

scan-results. Results from some of our scans using masscan.

montyhall-js. The Monty Hall problem, in JavaScript

krackips. C

applevfbi. A collection of all the court filings in the case of Apple being forced to help the FBI unlock the San Bernadino shooter's phone, plus some commentary.

robutils. A bunch of library code that can easily be included in new/prototype projects with few (usually zero) dependencies, even on themselves.

nmap. Nmap - the Network Mapper. Github mirror of official SVN repository.

webshell. This is a webshell open source project

altivore. Alternate implementation of FBI's Carnivore packet-sniffer

blxtract. An extractor that grabs CSV files from BLX files for Mike Lindell's cyber-symposium, from code by Dennis Montgomery.

modern-sockets.

RussiaDNSLeak. Summary and archives of leaked Russian TLD DNS data

faq-covid-vaccine. Answers to frequently asked covid vaccine questions.

cgminer. ASIC and FPGA miner in c for bitcoin

nxbench. Like Apache Bench for benchmarking websites, but using 10,000 concurrent connections instead of 100

blurt. Data over audio

pcap-strip. Strips out datalink headers (like Ethernet), leaving behind just the raw IP packets.

microvulns. Prominent open-source vulnerabilities extracted into just a few files so they can be easily built, fuzzed, tested, mediated, and so on.

youtube-dl. Command-line program to download videos from YouTube.com and other video sites

deprogrammer. Students are indoctrinated in a multitude of outdated and wrong concepts.

regexx. My unfinished regex library for multi-pattern matching.

securedrop. an open source whistleblower platform

snivel. Automatically exported from code.google.com/p/snivel

model-s-api. :oncoming_automobile: A Ruby gem and unofficial documentation of the Tesla JSON API

buildharden. https://github.com/robertdavidgraham/buildharden

rednoise-stick. Reproducing the climate change Hockey Stick with simple rednoise/whitenoise generator.

str2long_contest. code corresponding to a coding contest posted here: http://blog.regehr.org/archives/909

box-scrape. incomplete project for scraping videos from Box.com