Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

Process dump to executable ELF for linux

BlueRed is a web application fuzzer

A Linux kernel module that locates the system call table in memory and hooks uname. Contributions welcome!

Evil Linux kernel module that hooks sys_read system call and lets a user get a reverse shell or execute shellcode in the kernel.

Get detailed information about a Twitter user activity

⚡️ Streaming torrent client for the web

OS X Auditor is a free Mac OS X computer forensics tool

OpenSource tool for iCloud backup extraction

Passive VGA adapter 666 for Raspberry-Pi B+

SSLStrip version to defeat HSTS

Find broken SSL certificate validation in Android Apps

Streaming torrent client for node.js

Peach Fuzzer Web Frontend

A Kippo plugin that attacks back

XSS spider - 66/66 wavsep XSS detected

Schematic and board files.

This device silently hunts its prey, swooping in to gather RFID cards.

OONI Probe network measurement tool for detecting internet censorship

Crack MD5 passwords with JavaScript Web Workers

A magic pipe in the sky for the command line

Talk material for Shmoocon 2014

See my shmoocon talk repo for updated code:

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

the cross platform webshell tool in .NET

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM