A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

FSOP Again

A repository for learning various heap exploitation techniques.

A modern macOS app for downloading and managing iOS apps from the App Store

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

Training neural networks on Apple Neural Engine via reverse-engineered private APIs

1 script run the vphone

tart, but with custom AVPBooter ROM, serial I/O, DFU mode, GDB debugging (port 8000), SEP debugging (port 8001), and panic halting. See help menus for `tart create` and `tart run` for more info. Re…

Hundreds of models & providers. One command to find what runs on your hardware.

Render markdown on the CLI, with pizzazz! 💅🏻

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

Polymarket Rust CLOB Client

Research into Undocumented Behavior of Azure AD Refresh Tokens

A cross-platform suite of tools for building and deploying software for iOS and other platforms.

Just another EDR killer

bluetooth mesh chat, IRC vibes

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

CVE-2025-68428 Proof of Concept

Local Privilege Escalation Affecting Millions of Gaming Laptops

Agentic pentest tooling. Currently achieving around 78% on XBOW's benchmark in full black-box. Completely Self-hosted. Every model available on LiteLLM (Ollama, anthropic, openai...)

n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)

Python tool to automatically perform SPN-less RBCD attacks.

Shellcode injection using the Windows Debugging API

Integrate LLM models directly into Ghidra for automated code refactoring and analysis.

Docker poc lab for CVE-2025-55182 / CVE-2025-66478 (React2Shell) detection and exploitation

🔥📜 Forbidden collection of Red Team sorcery 📜🔥

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities bef…