Ben-Lichtman

llvm-project

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Godzilla

哥斯拉

jaq

A jq clone focussed on correctness, speed, and simplicity

MTuner

MTuner is a C/C++ memory profiler and memory leak finder for Windows, PlayStation 4 and 3, Android and other platforms

Nidhogg

Nidhogg is an all-in-one simple to use rootkit.

jql

A JSON Query Language CLI tool

FireDBG.for.Rust

🔥 Time Travel Visual Debugger for Rust

Tokenvator

A tool to elevate privilege with Windows Tokens

crucible

Crucible is a library for symbolic simulation of imperative programs

semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

heh

A terminal UI to edit bytes by the nibble.

2D-Injector

Hiding unsigned DLL inside a signed DLL

NtlmThief

Extracting NetNTLM without touching lsass.exe

Darkside

C# AV/EDR Killer using less-known driver (BYOVD)

guardian-rs

x86-64 code/pe virtualizer

icicle-emu

Core emulator components for Icicle

vm_challenge

weggli-patterns

A collection of my weggli patterns to facilitate vulnerability research.

PEAs

stealth-win

PigPEI

PEIM (UEFI) bootkit targeting OVMF (EDK2)

init

A super simple /sbin/init for Linux which allows running one and only one program

dorian

Dorian is an intuitive high-level abstraction for LLVM for creating imperative programs using declarative structures.

libafl-training

seconddate

Source data & analysis of NSA SECONDDATE packet-injection framework

Driver-SoulExtraction

SoulExtraction is a windows driver library for extracting cert information in windows drivers

FakeEnclave

A POC that abuses Enclave

CallMeWin32kDriver

Load your driver similar to win32k.sys

LetMeGG

A POC about how to prevent windbg break