SQL powered operating system instrumentation, monitoring, and analytics.

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

🔥Open source RASP solution

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

shellcodeloader

Alternative Shellcode Execution Via Callbacks

Trust & Safety tools for working together to fight digital harms.

Shellcode Compiler

A Frida script that disables Flutter's TLS verification

POCs for Shellcode Injection via Callbacks

Proof-of-concept codes created as part of security research done by Google Security Team.