Anvil Secure

ulexecve

ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.

lookinsidethebox

Breaks the encryption and obfuscation layers that Dropbox applies to their modified Python interpreter.

dawgmon

dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software

garmin-ciq-app-research

Garmin Forerunner 245 Music research artefacts.

nosymonkey

API hooking and code injection made easy!

aws-sigv4

Anvil Secure's Burp extension for signing AWS requests with SigV4

nanopb-decompiler

symlink-secure-boot-vm

VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/defeating-secure-boot-with-symlink-attacks.html

hominoid

Proof of concept for an anti-phishing browser plugin, working by comparing pages screenshots with perceptual hashing algorithms.

BoschFirmwareTool

gog-galaxy-app-research

Public release for the GOG Galaxy Research Security Advisory.

awstracer

AWS CLI Tracer - trace and replay sequences of aws cli commands

azure-sphere-re

usb-racer

This tool emulates USB disk drives and allows easy swapping out of data blocks in order to test TOCTOU issues.