k3vinlusec's repositories
Bluefrag_CVE-2020-0022
This is a RCE bluetooth vulnerability on Android 8.0 and 9.0
graphicsfuzz
A testing framework for automatically finding and simplifying bugs in graphics shader compilers.
WhatsApp-Double-Free-Vulnerability_CVE-2019-11932
Exploit Analysis of The WhatsApp Double-Free Vulnerability (CVE-2019-11932) Using the GEF-GDB Debugger
UnigonEndpointApp
It's an endpoint app for macOS Big Sur. This endpoint app is developed with network extension to monitor the network event on macOS Big Sur. It's GUI-less, but you can browse the detailed info from the database. It's also capable of recording traffics.
R7000_httpd_BOF_CVE-2020-15416
https://www.zerodayinitiative.com/advisories/ZDI-20-712/
honggfuzz
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
k3vinlusec.github.io
This is Kevin's personal blog
nvram-faker
A simple library to intercept calls to libnvram when running embedded linux applications in emulated environments.
gef
GEF - GDB Enhanced Features for exploit devs & reversers
hyper
A terminal built on web technologies
huxpro.github.io
My Blog / Jekyll Themes / PWA
hyperpwn
A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda
hyperinator
Layout automation plugin for Hyper. Inspired by tmuxinator
restore-symbol
A reverse engineering tool to restore stripped symbol table for iOS app.
osx-syscalls-list
Fish for BSD system calls and MACH traps inside of XNU ✌️
memctl
An iOS kernel introspection tool.
awesome-iOS-resource
:iphone: A curated list of awesome iOS resources, including conferences, books, blogs, articles, websites and documentations
Demo
a android demo app
owasp-mstg
The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.
android-classyshark
Android executables browser
smali_emulator
This software will emulate a smali source file generated by apktool.
androguard
Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)
Mobile-Security-Framework-MobSF
Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
buildprop
Android build.prop,default.prop editor, enable ViewServer to use hierarchyviewer, make all application android:debuggable="true"
DexHunter
General Automatic Unpacking Tool for Android Dex Files
AndroidEagleEye
An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.