Unlocking _everything_ on the CPU with DRAM scrambling

Racing to the bottom of CPU performance

Fil-C: completely compatible memory safety for C and C++

Linux payload implementing HV exploits to run a custom bootloader

State-of-the-art native debugging tools

Vulnerabilities advisories and PoC

Use LLMs to rank anything

wooyun-legacy skill for claude code

Runs 405B LLMs on 8GB VRAM

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalati…

Automatic Exploit Generation with LLMs

A verifier for automated and interactive proofs about transition systems.

Run Windows apps on 🐧 Linux with ✨ seamless integration

The companion repository for the 39C3 talk: Build a Fake Phone, Find Real Bugs: Qualcomm GPU Emulation and Fuzzing with LibAFL QEMU

VAST is an experimental compiler pipeline designed for program analysis of C and C++. It provides a tower of IRs as MLIR dialects to choose the best fit representations for a program analysis or fu…

Sourcetrail - free and open-source interactive source explorer

QEMU emulation of MediaTek MT7622 PCI driver

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Minimal implementation of a time-sharing kernel on RISC-V, implemented in Zig, on top of OpenSBI

An educational Bochs-based snapshot fuzzer project

An ergonomic and safe syscall interception framework for Linux.

Here is some resources about macOS/iOS system security.

Android 14 kernel exploit for Pixel7/8 Pro

Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.

A lightweight kernel coverage runner that wraps any command powered by LD_PRELOAD for fork/pthread interception using KCOV & HW Trace Buffer.

Android Kernel Exploitation