
Barzakh
Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.

Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.

IoT firmware identification and extraction

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…

Python config extractors for malware families including PlugX, Remcos, templateX, and RedLine Stealer, supporting C2 configuration extraction for…

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Lightweight telnet honeypot for capturing IoT malware samples and identifying active command-and-control infrastructure, designed for educational…

backdoor.mirai.helloworld cve2018-20561, cve-2018-10562 해킹

A session-unique RISC-V ISA — every boot speaks a different dialect. Old binaries become invalid. Malware cannot persist.

Python telnet honeypot for catching botnet binaries

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)

A tool for malicious behavior detection in IoT devices

Toolkit for implant attack of IoT devices

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Curated collection of P/Invoke definitions from pinvoke.net with Microsoft documentation links, enabling quick Windows API prototyping for security…

IoT Malware Similarity Analysis Platform