Apache Teaclave (incubating) SGX SDK helps developers to write Intel SGX applications in the Rust programming language, and also known as Rust SGX SDK.

A Fast and Safe Python based on PyPy

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

iOS Kernel utilities

small proof of concept gui for auditing iOS applications based on objection

iOS Reverse Engineering

Dump privileged ARM system registers from usermode using variant 3a of Meltdown

Unofficial American Fuzzy Lop repo

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.

Tiny cute emulator plugin for IDA based on unicorn.

iOS/macOS/Linux Remote Administration Tool

A list of my CVE's with POCs

VMware Escape Exploit before VMware WorkStation 12.5.5

Short, unrelated helper scripts for users of AFL (the fuzzer)

IDA pro plugin to find crypto constants (and more)

Experimental block-based swizzling API for Objective-C

Multi-level network clustering based on the Map Equation

Components of a decompilation pipeline.

Release Branches for MoFlow

Firmware Analysis Tool

Google Project Zero OS X Vul Report Analysis

Publications from Trail of Bits

NOT MAINTAINED: Generate linkable tbd from mach-o

Patched sdks that include private framework tbds

Some setup scripts for security research tools.

detect stegano-hidden data in PNG & BMP

QEMU Interactive Runtime Analyser

hashkill password recovery tool

codesign bypass (get out of rop without JIT)