orangice

pigaios

A tool for matching and diffing source codes directly against binaries.

awesome-ida-x64-olly-plugin

A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

DrGadget

dr.rer.oec.gadget IDAPython plugin for the Interactive Disassembler <ABANDONED PROJECT>

Awesome-ARKit

A curated list of awesome ARKit projects and resources. Feel free to contribute!

wdbgark

WinDBG Anti-RootKit Extension

plasma

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

Security-Advisories

Windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.

small

Smallest possible syntactically valid files of different types

insta-fuzz

experiments in generating JPEG images with fuzzers.

go-fuzz-corpus

Corpus for github.com/dvyukov/go-fuzz examples

HexRaysCodeXplorer

Hex-Rays Decompiler plugin for better code navigation

awesome-browser-exploit

awesome list of browser exploitation tutorials

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

Detour

A simple project to demonstrate function hooking / detouring

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

EasyHook

EasyHook - The reinvention of Windows API Hooking

lttng-docs

The LTTng Documentation: Source (official repository)

multiverse

A static binary rewriter that does not use heuristics

QBDI

A Dynamic Binary Instrumentation framework based on LLVM.

security-notes

:notebook: Some security related notes

exif-samples

Sample images for testing Exif metadata retrieval.

Conferences

My conference presentations and Materials for them.

onefuzz

A self-hosted Fuzzing-As-A-Service platform

grizzly

A cross-platform browser fuzzing framework

quokka

INACTIVE - http://mzl.la/ghe-archive - Quokka is a utility to launch and monitor application for faults.

dharma

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

avahi

Avahi - Service Discovery for Linux using mDNS/DNS-SD -- compatible with Bonjour

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.