Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring.

A LC3 virtual machine implementation in a few lines of C code

Reference implementation of the TCG Trusted Platform Module 2.0 specification.

Tool to generate ROP gadgets for ARM, AARCH64, x86, MIPS, PPC, RISCV, SH4 and SPARC

2021 交大程式安全 binary exploit 課程教材

The libtpms library provides software emulation of a Trusted Platform Module (TPM 1.2 and TPM 2.0)

A mini x86-64 assembler for fun and learning.

qemu with iOS host support

Design Pattern by Object-Oriented-C

Dev tools for probing IOKit

A minimalist type 2 hypervisor using Linux Kernel Virtual Machine (KVM)

macOS kext with kernel R/W, kalloc and kcall

Decompiling macOS Hypervisor.framework by hand

My solutions for CTF challenges

NYCU 程式安全 - Reverse Engineering 逆向工程簡報、影片、題目

Escape macOS Sandbox using sharedfilelistd exploit

Multitasking kernel for Arm/Thumb/AArch64 targets.

Android kernel module to bypass SELinux at boot