suto

infernal-twin

wireless hacking - This is evil twin attack automated

klee-taint

KLEE-TAINT - Klee with taint analysis support

tiny-mitm-proxy

Probably one of the smallest SSL MITM proxies you can make

Trebuchet

MS15-076 Privilege Escalation

ZDI-15-639

Proof of Concept for ZDI-15-639

afl-cygwin

AFL "mostly" ported to cygwin

afl-ffmpeg-opus

Fuzzing script for ffmpeg's opus decoder

AndroidID-24090395

write-what-where plus heap address leaking in OMX

autoDANE

Bluto

Recon, Subdomain Bruting, Zone Transfers

c-snippets

cscan

Faraday Continuous Scanning

dummy

dummy key

exserial

Java Untrusted Deserialization Exploits Tools

foresight

A tool for predicting the output of random number generators

fREedom

capstone based disassembler for extracting to binnavi

IEFuzz

A static Internet Explorer Fuzzer.

jekyll-now

Build a Jekyll blog in minutes, without touching the command line.

llilc

This repo contains LLILC, an LLVM based compiler for .NET Core. It includes a set of cross-platform .NET code generation tools that enables compilation of MSIL byte code to LLVM supported platforms.

MBE

Course materials for Modern Binary Exploitation by RPISEC

Mosca

Static analysis tool to find bugs like a grep unix command

NaFl

A clone (of the basic core) of AFL fuzzer

PoCForCVE-2015-1528

I'll submit the poc after blackhat

Reef

IDAPython plugin for finding Xrefs from a function

sandbox-attacksurface-analysis-tools

tbhm

The Bug Hunters Methodology

TypeScript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

vivisect

wadi

Wadi Fuzzing Harness

writeups

Here are my writeups about various reverse engineering and exploitation problems, mostly on unix/linux and using open source tools