
CVE-2025-4275
Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce…

Analysis and exploitation of CVE-2025-4275 (Hydr0ph0bia), a Secure Boot trust-chain weakness where firmware variables are used to introduce…

A tool that is used to hunt vulnerabilities in x64 WDM drivers

The tool is used to analyze the content of the android application in local storage.

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

dex-vm used to protect the android classes.dex file

Python Decoders for Common Remote Access Trojans

Scriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

Injects code into ELF executables post-build

CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver

Static analysis and structure recovery toolkit for ACE .qvm0-protected PE images

ZTE SmartLife security findings leading to account takeover: 100K+ Google Play downloads and CVE-2026-86552 through CVE-2026-86555.

Offensive Software Exploitation Course

A lightweight dynamic instrumentation library

Open source memory scanner written in C++