
NtStrace
frida-stalker based system call tracer on windows(x64).

frida-stalker based system call tracer on windows(x64).

Reverse engineering Amadey Loader with x64dbg: dynamic API resolution, token privilege escalation, keylogger hooks, clipboard capture, and…

Open source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…

frida-stalker based system call tracer on windows(x64).

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.

GoTEE - example application

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Dump cookies and credentials directly from Chrome/Edge process memory

Heap analysis tooling for mempool

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

Universal stack-based buffer overfow exploitation tool

Python Command-Line Ghidra MCP

Proof of concept for CVE-2022-41220

LLVM based static binary analysis framework

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

Exploitation Training -- CVE-2013-2028: Nginx Stack Based Buffer Overflow

Laboratorio de análisis y explotación de la vulnerabilidad CVE-2025-5548 en FreeFloat FTP Server 1.0