TLS-Attacker is a Java-based framework for analyzing TLS libraries. It can be used to manually test TLS clients and servers or as as a software library for more advanced tools.

Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks.

Probe RFC dependencies & Automatically download RFCs

Netzob: Protocol Reverse Engineering, Modeling and Fuzzing

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…

A LLVM Sanitizer for Symbolic Tracing

A Python implementation that facilitates finding timeless timing attack vulnerabilities.

S2E: A platform for multi-path program analysis with selective symbolic execution.

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

Simple authoritative DNS server, suitable for embedded systems

🐎 Benchmarks for Inter-Process-Communication Techniques

Resources related to GitHub Security Lab

A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS

A little bit about a linux kernel

Linux containers from scratch in C.

Powerful framework for pinpointing bug lifecycles in web browsers.

ProFuzzBench - A Benchmark for Stateful Protocol Fuzzing

The Linux Kernel Module Programming Guide (updated for 5.0+ kernels)

symbolic execution plugin for binary ninja

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

Debugger with hardware breakpoints and memory watchpoints for BCM4339 Wi-Fi chips

This is the source code for P2IM paper (accepted to Usenix Security'20)

LAVA: Large-scale Automated Vulnerability Addition

FuzzBALL: Vine-based Binary Symbolic Execution

A tool that can be used to learn state machines from implementations.

A tool to infer the security handshake state machine of a given WiFi router. Useful for vulnerability analysis

A tool that can be used to learn state machines from implementations.

QSYM: A Practical Concolic Execution Engine Tailored for Hybrid Fuzzing