Drone Parser

Tools for handling firmwares of DJI products, with focus on quadcopters.

Research related

GHIDRA plugin to parse, disassemble and decompile NodeJS Bytenode (JSC) binaries

Program for determining types of files for Windows, Linux and MacOS.

iPhone 11 emulated on QEMU

Android privilege escalation via an use-after-free in binder.c

Local root exploit for Nexus5 Android 4.4.4(KTU84P)

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

小图书馆可以使用Android启动镜像

Android Kernel Exploitation

Unofficial port of setools to Android with additional sepolicy-inject utility included

CVE-2014-3153 aka towelroot

CVE-2013-6282 proof of concept for Android

安卓内核提权漏洞分析

Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.

Samsung modem commands over USB serial connection and secret dialer codes extracted from system packages

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

AERoot is a command line tool that allows you to give root privileges on-the-fly to any process running on the Android emulator with Google Play flavors AVDs.

NARA digital preservation file format risk analysis and preservation plans

I'll submit the poc after blackhat

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Mechanical/visual programming language

NVR with realtime local object detection for IP cameras

The Twenty First Century Window Sitter.

A Google Protocol Buffers (Protobuf) payload decoder/analyzer

OOXML password remover