
no-access-protection-x86
It encrypts the text section and set the protection to NO_ACCESS.

It encrypts the text section and set the protection to NO_ACCESS.

frida-stalker based system call tracer on windows(x64).

Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA…

Devirtualizes Tencent VM .tvm0 sections: lifts VM handlers to guest-level listings and LLVM IR, recovers CFG and dispatch, and patches recovered code…

Reverse-engineering notes and Python tooling for JBL Wave Buds 2 (BES1306) firmware: OTA container format, flash layout, BLE/GATT protocol, and…

Deterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.

Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…

Reverse engineering Amadey Loader with x64dbg: dynamic API resolution, token privilege escalation, keylogger hooks, clipboard capture, and…

Hands-on cybersecurity lab: mini-SOC on AWS, CloudTrail IOC analyzer, phishing analysis lab, ELF binary triage, SOC agent skills

Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library…

Windows Linux DMA、Dump 、Direct、inject 内存读取、写入工具

A program written in C++ for remotely dumping manual mapped modules.

Algorithmic PE de-obfuscator, Shannon entropy radar, and incident triage engine

MySQL Community Server 26.7.0 - High - mysqldump SHOW TABLES stack overflow - crash dump UID

SQLite 3.53.4 - High - Local - Crash - FTS5 secure-delete PutVarint footer overrun

SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash

SQLite 3.53.4 - High - Local - heap OOB write - session changeset same-name nCol growth

SQLite 3.53.4 - High - Local - Crash - VALUES UNION ALL fallback cleanup stack overflow