Glass

Glass as in transparent and smooth A fast, native, mobile-app first interactive disassembler. Spiritual successor to IDA Pro for the Android / iOS reverse engineering workflow, built around: smali for APK / DEX / smali handling armv8-encode for AArch64 and ARMv7 A32 / Thumb — native .so, iOS Mach...

Virtuailor

Virtuailor - IDAPython tool for C++ vtables reconstruction Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 New!. The tool constructed from 2 parts, static and dynamic. The first is the static part, contai...

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

IonStack-S22U

CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | While this repository originated as a device-specific port for the Galaxy S22 Ultra, the project has since shifted and expanded to support all Samsung...

workshop_firmware_reverse_engineering

Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

Instructions for performing the vulnerability demonstration ISO LINK FOR THE VULNERABILITY Please download the following OS image openSUSE-Leap-15.6 using this link: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso The image is...

CVE-2026-31431-copyfail-aarch64

This repository does not have a README...

zyxel-wax650s-research-notebook-public

Zyxel WAX650S Research Notebook Public-safe research notebook for Zyxel WAX650S firmware V7.10ABRM.4C0. This repo is written as a story-format wiki for researchers and future LLM-assisted follow-up work. It captures how the lab was brought up, which findings were confirmed, which chains failed, a...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 MERGED WITH ORIGINAL REPO: Find it here https://github.com/CamsShaft/IonStack-S22 Full root in the kernel domain with selinux permissive on my SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES: I'm not going into great detail or lengths in this one sinc...

CLEANSTART-2026-TN20078 **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables i...

Security vulnerability affects the gcc package. DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected...

c-copy-fail

CopyFail CVE-2026-31431 in Linux Kernel Crypto API Resources: main website aarch64 syscalls pwntools for generating shell code how ancillary data work in sendmsg...

copy-fail-cve-2026-31431-aarch64

copy-fail-cve-2026-31431-aarch64 References: https://github.com/theori-io/copy-fail-CVE-2026-31431 https://github.com/bigwario/copy-fail-CVE-2026-31431-C Verified on ubuntu 25.10 aarch64 python3 cve202631431exp.py...

CVE-2026-43499-T807D

T807D Final Artifacts — Source One-to-One Correspondence Recovery Package Generated: 2026-08-08 Conclusion This directory has organized the complete popsicle source tree, necessary header files, embedded su payload, production binaries, and runtime scripts that can be recovered from the current...

silica

SILICA An exhaustive comparison of A64 instruction-allocation decisions. Silica checks every one of the 4,294,967,296 possible A64 instruction words. It compares whether Capstone, LLVM, Unicorn, and a table compiled from Arm's XML encoding diagrams accept each word. A decoder and an encoding...

Linux Distros Unpatched Vulnerability : CVE-2026-50185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by...

gcc security update

8.5.0-30.0.1 - Merge Oracle patches to 8.5.0-30. Oracle history: August-26-2025 Qing Zhao 8.5.0-28.0.1 - Merge Oracle patches to 8.5.0-28. March-31-2025 Jose E. Marchesi 8.5.0-26.0.1 - Merge Oracle patches to 8.5.0-26. Reviewed-by: David Faust March-11 2025 Qing Zhao 8.5.0-24.0.1 - Merge Oracle...

EUVD-2026-109188

Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm brtable instruction...

GHSA-MGHF-WJFP-P5XM Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

Summary When running with the Cranelift compiler backend on an aarch64 target, Wasmtime can compile a Wasm module with more than 256k targets on one brtable instruction in a way that results in an incorrect conditional branch target. This conditional branch could then jump to arbitrary other code...