cra0

URH-to-wav

Script that turns a .complex file from URH (Universal Radio Hacker) to a .wav file

DLest

Microsoft Windows DLL Export Browser (Enumerate Exports, COM Methods and Properties) with Advanced Search Features.

ndp2019-wristband-teardown

Tear-down effort of the Pixmob wristband used in NDP2019.

imagotag-hack

BusPirate5-firmware

Bus Pirate v5 Firmware

Killers

Exploitation of process killer drivers

pixmob-ir-reverse-engineering

Hacking the PixMob infrared (and now also RF!) protocol to enable control of PixMob wristbands at home.

VMP-Imports-Deobfuscator

VMProtect 2.x-3.x x64 Import Deobfuscator

bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

EventLogCrasher

AllTools

All reasonably stable tools

WMIProcessWatcher

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

tpm-spoofer

Simple proof of concept kernel mode driver hooking tpm.sys dispatch to randomize any public key reads

uefimaze

Bare-metal bootable graphical maze game in C#

cs2-signature-list

List of strings to find function signatures on cs2

csgo-osx-linux

Counter-Strike: Global Offensive

cs2-anticheat

Anticheat code found in Counter-Strike 2 binaries.

ida-find-.data-ptr

A simple ida python script to find .data ptr

Exception-Ret-Spoofing

A simple way to spoof return addresses using an exception handler

Instrumentation-Callbacks

Minimalistic and foolproof POC for instrumentation callbacks

drvscan

scan system / process integrity

RenameLocalVars

RenameLocalVars is an IDA plugin that renames local variables to something easier to read.

HypervisorCheckR0

Just check hypervisor in ring0

MagicSigner

Signtool for expired certificates

tiny_tracer

A Pin Tool for tracing API calls etc

Minimal

Proxy-DLL-Loads

The code is a pingback to the Dark Vortex blog:

ShadowStackWalk

Finding Truth in the Shadows

ret-sync

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

wdmcpp

Visual Studio Project example for using Microsoft's STL in WDM (Windows Kernel-mode Driver)