An A12/A13 SecureROM exploit

RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

`ipsw` symbolication signatures

secure, encrypted P2P file transfer. No accounts, no file storage, end-to-end encrypted.

A collection of my Semgrep rules to facilitate vulnerability research.

CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs.

Making an ESP32-based quadcopter from scratch

List of companies that hire security people full remote.

Use Claude Code with your ChatGPT, Kimi, Cursor or Grok subscription via a local Anthropic-compatible proxy

Reproducible AFL++-ready Android emulator kernel

autonomous red teaming platform; multi-agent offensive-security meta-harness

Kernel Debug Kit Mirror for macOS Ventura and newer

weggli ruleset scanner for source code and binaries

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.

PMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.

A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

A demonstration of read write using cve-2025-43529 on iOS 26.1

Pishi is a code coverage tool like kcov for macOS.

Agentic CVE → Docker environment builder: given a CVE ID, builds and verifies a Docker environment running the affected application at its pre-patch version.

Code of KextFuzz: Fuzzing macOS Kernel EXTensions on Apple Silicon via Exploiting Mitigations (USENIX Security'23)

IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes

AI-assisted Lab for kernel exploitation