saaramar

pwntools

CTF framework and exploit development library

ipwndfu

open-source jailbreaking tool for many iOS devices

pcileech

Direct Memory Access (DMA) Attack Software

PongoOS

pongoOS

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

snmalloc

Message passing based allocator

MSRC-Security-Research

Security Research from the Microsoft Security Response Center (MSRC)

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

pcileech-fpga

FPGA modules used together with the PCILeech Direct Memory Access (DMA) Attack Software

linux-m1

Linux kernel source tree

s6_pcie_microblaze

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

ctf-tasks

An archive of low-level CTF challenges developed over the years

applegpu

Apple G13 GPU architecture docs and tools

shadow

jemalloc heap exploitation framework

win32k-bugs

Dump of win32k POCs for bugs I've found

winipt

The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.

Simpleator

Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

psychicpaper

iOS <13.5 sandbox escape/entitlement 0day

blanket

CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.

PS4-4.55-Kernel-Exploit

A fully implemented kernel exploit for the PS4 on 4.55FW

hdk

(unofficial) Hyper-V® Development Kit

libkrw

Lib kernel r/w

LiveCloudKd

Hyper-V Research is trendy now

GuardMon

Hypervisor based tool for monitoring system register accesses.

cheriot-rtos

The RTOS components for the CHERIoT research platform

l1tf-poc

L1TF (Foreshadow) VM guest to host memory read PoC

i9300_emmc_toolbox

Samsung Galaxy S3 GT-I9300 eMMC toolbox

35c3ctf-challs

cheriot-ibex

cheriot-ibex is a RTL implementation of CHERIoT ISA based on LowRISC's Ibex core.

cheriot-sail

Sail code model of the CHERIoT ISA