The binary you run is not the program you wrote.

An SPTM bypass for iOS 16 - 17.3.1

A12/A13 PPL Bypass

Tether downgrade tool for some checkm8/usbliter8 64bit devices. Some restores may utilize seprmvr64 by Mineek.

A native macOS app for managing virtual iPhones - browse, create, and boot iOS research VMs from a single window.

Binary Ninja diffing tool

Controller app for the l41ka firmware that handles automation

experimental pongoOS-loading RP2350 firmware and bootkit for legacy A12/13 devices, aimed at security research

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

An A12/A13 SecureROM exploit

RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

`ipsw` symbolication signatures

secure, encrypted P2P file transfer. No accounts, no file storage, end-to-end encrypted.

A collection of my Semgrep rules to facilitate vulnerability research.

CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs.

Making an ESP32-based quadcopter from scratch

List of companies that hire security people full remote.

Use Claude Code with your ChatGPT, Kimi, Cursor or Grok subscription via a local Anthropic-compatible proxy

Reproducible AFL++-ready Android emulator kernel

autonomous red teaming platform; multi-agent offensive-security meta-harness

Kernel Debug Kit Mirror for macOS Ventura and newer

weggli ruleset scanner for source code and binaries

weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionality in large codebases.