
lightkeeper
Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Xyntia, the black-box deobfuscator

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

Automatic SSTI detection tool with interactive interface

Pishi is a code coverage tool like kcov for macOS.

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

Fuzzing Framework for Modules in Apache HTTPD Server

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…

Java XML serialization library with a focus on CVE-2021-21345 exploit analysis and deserialization vulnerability testing for web applications.

A wrapper around grep, to help you grep for things

Laravel debug mode - Remote Code Execution (RCE)

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

Exploit for Jenkins serialization vulnerability - CVE-2016-0792