knightsc

followers

0

following

stars

https://knight.sc

Scott Knight's repositories

USBApp

A small test app that tries to load a USBDriverKit system extension

Language:C++MIT80 8 5

gapstone

gapstone is a Go binding for the capstone disassembly library

Language:GoBSD-3-Clause69 4 7

XProtect

macOS XProtect definition files

Language:YARA38 11 1

osx_and_ios_kernel_programming

Updated sample code for OS X and iOS Kernel Programming book

Language:C++NOASSERTION34 5 1

system_policy

osquery table extension that allows querying of information from the macOS private SystemPolicy.framework

Language:Objective-CMIT29 3 1

EndpointSecurity

A module to expose the Endpoint Security library to Swift

Language:CMIT20 30

Tracer

macOS application that makes use of the EndpointSecurity framework

Language:SwiftMIT18 3 1

hopper

A collection of Hopper plugins and scripts

Language:Objective-CMIT17 40

darwin-xnu

The Darwin Kernel (mirror)

Language:CNOASSERTION14 40

CVE

A collection of CVE POC code

Language:Objective-CMIT11 20

CoreAnimationPlayground

A Swift playground demonstrating how to use Core Animation

Language:SwiftMIT9 30

lldb

A collection of lldb scripts and configuration files

Language:PythonMIT7 30

Presentations

Slides from various presentations and conferences

7 50

knightsc.github.io

Content for https://knight.sc

Language:Ruby6 30

sandbox_profiles

A collection of sandbox files from macOS 10.9 through 10.15

Language:Scheme6 30

r2

A collection of radare2 scripts and configuration files

Language:PythonMIT4 20

sb

A Go library for working with macOS SBPL files

Language:GoMIT3 4 2

mockc2

An interactive mock C2 server

Language:GoMIT010

aws-apigateway-lambda-authorizer-blueprints

Blueprints and examples for Lambda-based custom Authorizers for use in API Gateway.

Language:C#Apache-2.0020

binee

Binee: binary emulation environment

Language:GoGPL-2.0000

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, EVM, M68K, M680X, MOS65xx, Mips, PPC, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

Language:CNOASSERTION010

homebrew-core

🍻 Default formulae for the missing package manager for macOS

Language:RubyBSD-2-Clause020

micromdm

Mobile Device Management server

Language:GoMIT010

PasteHunter

Scanning pastebin with yara rules

Language:PythonGPL-3.0000

ScatterBee_Analysis

Scripts to aid analysis of files obfuscated with ScatterBee.

Language:PythonApache-2.0010

scep

Go SCEP server

Language:GoMIT010

tau-tools

A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit

Language:PowerShellMIT010

visualboyadvance-m

Our goal is to improve upon VisualBoyAdvance by integrating the best features from the various builds floating around. In order to uncompress the downloaded package, you need a zip extractor.

Language:C++020

xv6-riscv

Xv6 for RISC-V

Language:CNOASSERTION000

yara

The pattern matching swiss knife

Language:CBSD-3-Clause010