Continuation of Il2CppInspector - A powerful automated tool for reverse engineering Unity IL2CPP binaries.

A collection of my Semgrep rules to facilitate vulnerability research.

Extract per-track WAV stems from hardware music machines (OP-XY) via MIDI solo + audio recording. Browser-based, framework-agnostic engine.

Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.

[100% AI Generated Code] Lightweight LLVM Symbolic Execution Engine

An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts

Lightweight AArch64 Hypervisor

UEFI SMM payload mapper with hot reload for on-hardware development

My notes while studying Windows internals

scalable and robust tree-based speculative decoding algorithm

IOSurfaceRootUserClient selector 0 kernel data abort via oversized XML IOSurfaceAddressRanges data — iOS 26.5 (23F77)

A ⚡ lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

simple PE packer/crypter for Windows. compresses and encrypts executables with a custom virtual machine into a self-extracting stub.

MediaTek data structures parser

Semantics of x86-64 in K

A curated list of custom widgets, example projects, integrations, and resources made with/for iced

General purpose Linux OS for Azure

IDA Pro plugin that speeds up the initial binary auto analysis through caching and multithreaded analysis

Striga is an experimental lifter from x86_64 to LLVM IR written in Python.

Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini C…

Quarkslab Bindiffer but not only !

UM Only Roblox External Cheat

SharpMonoInjector wh0am1 Mod. Fixed and Updated. A tool for injecting assemblies into Mono embedded applications, commonly Unity Engine based games

An MCP server wrapping `kd.exe` for Windows kernel debugging

Autonomous Windows POC developer from patchwatch diff reports

Brovan is a user-mode x86_64 binary emulator for your malware analysis & reverse engineering.

ARM binary analysis

A Binary Ninja plugin for analyzing XProtect Remediator binaries.