
draytek-arsenal
Reverse Engineering and Observability toolkit for Draytek firewalls

Reverse Engineering and Observability toolkit for Draytek firewalls

A tool that is used to hunt vulnerabilities in x64 WDM drivers

In-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…

Linux Kernel Runtime Integrity with eBPF

Tools and PoCs for Windows syscall investigation.


Rust Demangler & Normalizer plugin for IDA

Collection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

This repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference / Array over-indexing vulnerability that I found in Google's…

Ghidra Extension to integrate BinDiff for function matching

A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck

InfectPE - Inject custom code into PE file [This project is not maintained anymore]

Visualizes repeated byte sequences in binary files to reveal hidden structure, supporting reverse engineering and pattern discovery without…

This is an experimental project for [resmack](https://gitlab.com/d0c-s4vage/resmack) to figure out the best methods for instrumenting target…

Simulate the behavior of AV/EDR for malware development training.

Security research project on fuzzing libpng with OSS-Fuzz. Includes seed corpus analysis, custom read/write fuzzers, and a proof-of-concept exploit…

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…