deltaclock

diffuse

Diffuse is a tool for diffing APKs, AABs, AARs, and JARs

weggli

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

Telethon

Pure Python 3 MTProto API Telegram client library, for bots too!

same-origin-xss

Same Origin XSS challenge

samfirm.js

TypeScript implementation of a streaming downloader, decryptor and extractor of Samsung firmware.

custom-codeql-queries

Custom / Experimental CodeQL queries

marp-vscode

Marp for VS Code: Create slide deck written in Marp Markdown on VS Code

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

fuzzuf

Fuzzing Unification Framework

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

vlmcsd

KMS Emulator in C (currently runs on Linux including Android, FreeBSD, Solaris, Minix, Mac OS, iOS, Windows with or without Cygwin)

gsocket

Connect like there is no firewall. Securely.

xed

The X86 Encoder Decoder (XED), is a software library for encoding and decoding X86 (IA32 and Intel64) instructions

pocorgtfo

a "Proof of Concept or GTFO" mirror with an extensive index with also whole issues or individual articles as clean PDFs.

spark

Arch Linux Provisioning with Ansible

cursed_types

List of Trusted Types bypasses

patching

An Interactive Binary Patching Plugin for IDA Pro

languagetool

Style and Grammar Checker for 25+ Languages

fx-private-relay

Keep your email safe from hackers and trackers. Make an email alias with 1 click, and keep your address to yourself.

type-challenges

Collection of TypeScript type challenges with online judge

exploits

'>"><img src=x onerror=alert(1) /><b>asd</b>

log4j-finder

Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)

Log4jAttackSurface

css-exfiltration

turdshovel

Dump objects from .NET dumps.

exploitkitpub

reFlutter

Flutter Reverse Engineering Framework

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Heimdall

Heimdall is a cross-platform open-source tool suite used to flash firmware (aka ROMs) onto Samsung Galaxy devices.