workshop_firmware_reverse_engineering

Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...

Virtuailor

Virtuailor - Herramienta IDAPython para reconstrucción de vtables de C++ Virtuailor es una herramienta IDAPython que reconstruye vtables para código C++ escrito para arquitectura Intel, tanto código de 32 bits como de 64 bits y AArch64 ¡Nuevo!. La herramienta se compone de 2 partes, estática y...

zyxel-wax650s-research-notebook-public

Zyxel WAX650S Research Notebook Public-safe research notebook for Zyxel WAX650S firmware V7.10ABRM.4C0. This repo is written as a story-format wiki for researchers and future LLM-assisted follow-up work. It captures how the lab was brought up, which findings were confirmed, which chains failed, a...

copy-fail-cve-2026-31431-aarch64

copy-fail-cve-2026-31431-aarch64 References: https://github.com/theori-io/copy-fail-CVE-2026-31431 https://github.com/bigwario/copy-fail-CVE-2026-31431-C Verified on ubuntu 25.10 aarch64 root@kitploit: python3 cve202631431exp.py...

falco

Falco...

Glass

Glass as in transparent and smooth A fast, native, mobile-app first interactive disassembler. Spiritual successor to IDA Pro for the Android / iOS reverse engineering workflow, built around: smali for APK / DEX / smali handling armv8-encode for AArch64 and ARMv7 A32 / Thumb — native .so, iOS Mach...

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

Analyse-faille-de-s-curit-CVE-2025-6018-CVE-2025-6019

Instructions for performing the vulnerability demonstration ISO LINK FOR THE VULNERABILITY Please download the following OS image openSUSE-Leap-15.6 using this link: https://download.opensuse.org/distribution/leap/15.6/iso/openSUSE-Leap-15.6-DVD-aarch64-Build710.3-Media.iso The image is...

CVE-2026-43499-T807D

T807D 最终产物—源码一一对应恢复包 生成日期：2026-08-08 结论 本目录已经整理出当前项目中能够找回的完整 popsicle 源码树、必要头文件、嵌入式 su 载荷、生产二进制和运行脚本。 必须区分： 1. r562 SO 和 r557 helper 的生产二进制已完整保留，哈希可复核。 2. 项目没有保存这两个生产二进制编译前的旧源码快照、目标文件或带 DWARF 的完整构建产物。因此，当前源码不能被诚实地标记为“逐字节就是当时编译生产二进制的源码”。 3. 当前保存的源码是 Kit 中唯一完整的 popsicle 源码树，也是 2026-08-05 审查后的维护基线。...

IonStack-S22U

CVE-2026-43499 - Galaxy S22 Ultra https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | This repository contains a device-specific port of the CVE-2026-43499 exploit for the Samsung Galaxy S22 Ultra SM-S908W. Supported target root@kitploit: Device: Samsung...

CVE-2026-31431-copyfail-aarch64

This repository does not have a README...

OESA-2026-3898 openjdk-11 security update

The OpenJDK runtime environment. Security Fixes: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimiz...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 MERGED WITH ORIGINAL REPO: Find it here https://github.com/CamsShaft/IonStack-S22 Full root in the kernel domain with selinux permissive on my SM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3. NOTES: I'm not going into great detail or lengths in this one sinc...

hyperpom

HYPERPOM AArch64 fuzzing library based on the Apple Silicon hypervisor Table of contents Disclaimer Getting Started Prerequisites Self-Signed Binaries and Hypervisor Entitlement Compilation Workflow Documentation Examples Running the Tests Authors Hyperpom is a coverage-guided mutation-based...

silica

SILICA An exhaustive comparison of A64 instruction-allocation decisions. Silica checks every one of the 4,294,967,296 possible A64 instruction words. It compares whether Capstone, LLVM, Unicorn, and a table compiled from Arm's XML encoding diagrams accept each word. A decoder and an encoding...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.6-0.2.hum1 aarch64, x8664 grafana13.1-13.1.6-0.2.hum1.src src Security Fixes: grafana13.1: CVE-2026-81871...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.3.hum1 aarch64, x8664 tempo3.0-3.0.3-0.3.hum1.src src Security Fixes: tempo3.0: CVE-2026-81871...

android_demystification_toolbox

Android Demystification Toolbox Purpose ADT is a Miasm-based symbolic execution toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code. Features The ability to save/restore all threads & processes contexts A centraliz...

cve-2015-4843-type-confusion-phrack

Descripción Los detalles de la vulnerabilidad se discuten en confluence. Este repositorio ha sido retomado después de unos años de estar inactivo, sin haber revisado el código DisabledSecurityManager. TypeConfusionDemo OverflowDemo Esta es una demo que muestra que podemos desbordar hacia antes de...

c-copy-fail

CopyFail CVE-2026-31431 en la API de Criptografía del Kernel de Linux Recursos: sitio web principal llamadas al sistema para aarch64 pwntools para generar código shell cómo funcionan los datos auxiliares en sendmsg...