Pinned Repositories
archive
small logging utility
asmrepl
Small ASM REPL, usefull to mess with x86, or inject into a process.
Clone-Certificate
Signing code certificate cloning utility
htp
hxemu
Triton based symbolic emulator
lena
Small C++ tracing library
MapParser
Small map file parser
mm
ManualMapper is a small library to manually load dynamic libraries
triton-build
Repository to build triton releases.
ek0's Repositories
ek0/hxemu
Triton based symbolic emulator
ek0/htp
ek0/asmrepl
Small ASM REPL, usefull to mess with x86, or inject into a process.
ek0/Clone-Certificate
Signing code certificate cloning utility
ek0/lena
Small C++ tracing library
ek0/archive
small logging utility
ek0/MapParser
Small map file parser
ek0/triton-build
Repository to build triton releases.
ek0/arch-arm64
Aarch64 architecture plugin
ek0/arch-x86
x86/x64 architecture plugin
ek0/binaryninja-api
Public API, examples, documentation and issues for Binary Ninja
ek0/browser_pwn
browser pwn, main work now
ek0/CVE-2020-0796
CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost
ek0/Disclosures
Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
ek0/googletest
GoogleTest - Google Testing and Mocking Framework
ek0/goomba
gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions
ek0/haxm
Intel® Hardware Accelerated Execution Manager (Intel® HAXM)
ek0/hvpp
hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
ek0/Hyntrospect
ek0/KDU
Kernel Driver Utility
ek0/lighthouse
Code Coverage Explorer for IDA Pro & Binary Ninja
ek0/llvm-build
Build cmakelists for LLVM
ek0/Triton
Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.
ek0/vmpattack
A VMP to VTIL lifter.
ek0/VMProtectTest
VMProtectTest
ek0/VTIL-SymEx
Symbolic expression simplifier used across VTIL toolchain.
ek0/win32k-bugs
Dump of win32k POCs for bugs I've found
ek0/windbg-scripts
A bunch of JavaScript extensions for WinDbg.
ek0/Windows10-CustomKernelSigners
Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSigners
ek0/WindowsExploitationResources
Some random resources I have enjoyed for certain topics of Windows exploit development and semi-related topics