Mas0nShi

ida_kmdf

symless

paper_collection

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

NTFuzz

NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)

Hyper-V-Internals

Internals information about Hyper-V

decode-js

JS混淆代码的AST分析工具 AST analysis tool for obfuscated JS code

Libc-GOT-Hijacking

Binary Exploitation Skill. Gain RCE from arbitrary write.

unstrip

ELF Unstrip Tool

antlr4

ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.

PythonSymbols

A WinDbg symbol server for all recent versions of CPython.

impacket

Impacket is a collection of Python classes for working with network protocols.

hvext

The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.

CVE-2023-36427

Report and exploit of CVE-2023-36427

BugId

Detect, analyze and uniquely identify crashes in Windows applications

make-real

Draw a ui and make it real

CVE-2019-0708

dump

PADumper

Process Android Memory Dumper

thread-pool

BS::thread_pool: a fast, lightweight, and easy-to-use C++17 thread pool library

kDriver-Fuzzer

ttd-bindings

Bindings for Microsoft WinDBG TTD

udmp-parser

A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.

ACTF-2023

Archive of AAA CTF 2023 (XCTF competition)

Parallels

Parallels Desktop for mac

Mist

A Mac utility that automatically downloads macOS Firmwares / Installers.

msdocsviewer

msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.

ctf_writeup

CTF writeups from Balsn

IoRingReadWritePrimitive

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

curl-fuzzer

Quality assurance testing for the curl project

GAMBA

Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

MemProcFS

MemProcFS