Ghidra is a software reverse engineering (SRE) framework
AVault - Call Recorder (No Root Required) | Privacy-first, hardware-encrypted audio vault for Android 12-16+. Rootless call recording via Shizuku with AES-256-GCM, biometrics & auto-cleanup.
Nintendo Switch userland code execution using Civilization 7 game cartridge
AnyUnlock 2026: Full working installer for quick and easy access to all utility configurations.
Building 70 Projects ranging from beginner to advanced so anyone can β learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company π
Anyunlock 2026: Full working installer for a powerful desktop utility configuration, ready to run right out of the box.
Claude Code skill to support Android app's reverse engineering
Gain control of your Hyundai Motor Group vehicle, NEMESIS provides a way to execute software as root. Compatible with Gen5W AVNT systems with OTA update support.
Audit phΓ‘p lΓ½ website theo luαΊt Viα»t Nam (BVDLCN 91/2025, TMΔT 122/2025, ANM 116/2025, AI 134/2025) cho Claude Code, Cursor, Copilot, Windsurf, Cline
Find secrets with Gitleaks π
Actual Multiplie Monitors 2026 complete standalone setup. Ready-to-run desktop installation with all features pre-activated.
AndroidUnlocker 2026 - Full working installer for professional desktop software utility, ready to run.
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Complete Anyunlock 2026 installation build. Ready-to-run utility for professional desktop software configuration.
NoDPI is a utility for bypassing the DPI (Deep Packet Inspection)
A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zero cross-process writes.
Policy-driven, layered isolation and containment
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
Metasploit Framework
Open source (AGPL-3.0) evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
Install your own AmneziaWG 3.1 VPN server on a fresh Ubuntu or Debian VPS with one command. Made for networks that block WireGuard. No Docker, QR-code import, 2.0 on request for routers.
Cross-Platform Micro-VM Sandbox for Agentic Workloads
game of active directory
WebKit jailbreak research for PlayStation 5 firmware 14.10
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
π Static code analysis engine to find security issues in code.
Code Property Graph: specification, query language, and utilities
Private Cloud Compute (PCC)
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Collection of malware source code for a variety of platforms in an array of different programming languages.
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
PHP2Shell exploit framework β CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
FPGA modules used together with the PCILeech Direct Memory Access (DMA) Attack Software
PCIe DMA-based external game state reader. Hardware DMA capture, memory layout discovery, no in-process injection. C#
Aave V3 Protocol
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It Ρs based on code from the Google BoringSSL project and the OpenSSL project.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Bypass SmartScreen! Use a signed executable as the launcher to reduce Microsoft Defender SmartScreen warnings when running your code. You do not need to sign the executable itself, only the DLL.
This GitHub Action runs Checkov against infrastructure-as-code, open source packages, container images, and CI/CD configurations to identify misconfigurations, vulnerabilities, and license compliance issues.